last executing test programs: 2.831334805s ago: executing program 4 (id=1713): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x17e, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20400000}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x10, 0xfffffffd, 0xb}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x5, 0x5, 0xf}, {0x4, 0x3, 0x2}, {0x1, 0x4, 0x8, 0x6}], 0x10, 0x81}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="5f40c9a6be04c5f6bc9b4ba3d8ef5b03ff68a95292e475cdb8563a4c64a6651b0cb481ef401d2fa7542aa7f8029fc35006c9b9ef090068c34994cce9e3b353455d780f652fc0c3a4254ba5e0c465777c559aba505b9802a8b1df5c8a91678ea4c60481ff106b06d5c4c1b436c12da82e5ee85b232953edbcfd20429995cabdf98f3bc59891398f664272c19d2eeb91c5cbc327bf49a92fcf139478dd751b3385627e25533b55581982d6bd1a965ca016ae96", @ANYRESOCT, @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x40040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000780)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000227bd7000fddbdf250400000005002d0001000000050030000000000008000600", @ANYRES32=r7, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x20000044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='ext4_nfs_commit_metadata\x00', r2, 0x0, 0x2}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000ac0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) close(r1) r9 = socket(0x10, 0x3, 0x0) unshare(0x2c020400) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x829, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x11, 0x2, {0x8000, 0x0, 0x2, 0x4}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x0, 0x5, 0x7ff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x0) socket(0x10, 0x803, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="495300922c589530190fed69b654a1189c00", @ANYRES32=0x0, @ANYBLOB="0c00990008000000000000000800428004000080"], 0x30}}, 0x6048004) r13 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r13, 0x0, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000008c0)='tegra_dma_complete_cb\x00', r14}, 0x18) r15 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r15, 0xfffffffffffffffe, r15, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 2.789143728s ago: executing program 4 (id=1714): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000280)="d5", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) (fail_nth: 1) 2.529771929s ago: executing program 4 (id=1716): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000380), 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 2.491831202s ago: executing program 4 (id=1718): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x1c, r4, 0x1100, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x1) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r5}, 0x20) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@delneigh={0x44, 0x1a, 0x1, 0x470bd2d, 0x800, {0xa, 0x0, 0x0, 0x0, 0x1, 0xe8, 0x2}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x2}}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x44}}, 0x71d0b8801b5f1c98) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d0748020000007ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000001800)={'syztnl1\x00', 0x0, 0x40, 0x7800, 0x564c, 0xc, {{0x36, 0x4, 0x0, 0x2, 0xd8, 0x66, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}, {[@lsrr={0x83, 0x7, 0x4f, [@local]}, @timestamp_prespec={0x44, 0x44, 0x18, 0x3, 0xd, [{@local, 0x6}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x37}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7ff}, {@private=0xa010100, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@empty, 0x3}, {@loopback, 0x8}]}, @lsrr={0x83, 0x7, 0xb4, [@dev={0xac, 0x14, 0x14, 0x18}]}, @ra={0x94, 0x4}, @noop, @cipso={0x86, 0x50, 0x3, [{0x1, 0xe, "730ac4c4f63f5b54c2e83421"}, {0x2, 0x8, "c6697ac42376"}, {0x0, 0x2}, {0x6, 0x6, "c195380d"}, {0x0, 0xa, "16d5eede6d27dec8"}, {0x6, 0x3, "0e"}, {0x5, 0xd, "82399295eebb7ebbd38c8e"}, {0x2, 0x4, "46aa"}, {0x0, 0xe, "3ee1401c64c7b12b5844eb53"}]}, @timestamp_prespec={0x44, 0x1c, 0xc0, 0x3, 0xb, [{@broadcast, 0xb8d4}, {@remote, 0x10000}, {@rand_addr=0x64010100, 0xb0b}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r8, r9, 0x25, 0x17, @void}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r6, 0x1}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0x21, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x3a}, @generic={0x3, 0x8, 0x5, 0x4, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x44}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0xffc, &(0x7f0000000740)=""/4092, 0x0, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xd, 0x4, 0xc8b}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x1, r0, r0, r0, r0, r0], &(0x7f00000003c0)=[{0x0, 0x3, 0x6, 0x1}], 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='siox_set_data\x00', r10}, 0x18) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r11}, 0x18) r12 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r12, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r12, &(0x7f0000000200), 0x4) pidfd_send_signal(0xffffffffffffffff, 0x1, &(0x7f0000000440)={0x2f, 0x9, 0x8}, 0x0) 2.088821294s ago: executing program 1 (id=1724): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="240000001a00010e8afc856d5109e4250a0000000008000000000000080002"], 0x24}}, 0x20000050) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x1ffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2kn6/P1qqvLoAwgURMQjadJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSd8QRib+AE1wQcELiCndUqUK5tMDFaOPdxHbttA5ONtSfj7TJzO44M1/vjj07kw2gbw2nP5KIvRHxa0Tsq2ebCwzXf91cXpz6c3lxKola7Y0/kpVyN5YXp/Ki+ev25JmBiNInSRxuU+/8pcvnJqvVmYtZfmzh/Ltj85cuPzN7fvLszNmZCxOnTp04Pv7cyYlnexJnGteNQx/MHTn4yltXX5s6ffXtH79O8vhb4uiR4fUOPl6r9bi6Yv2vIZ0MFNgQulKud9MYXOn/+6IcaydvX7z8caGNAzZVrVar3df58FINuIslUXQLgGLkX/Tp/W++bdHQY1u4/kL9BiiN+2a21Y8MRCkrM9hyf9tLwxFxeumvL9ItNmceAgCgybfp+OfpbPzXtPBTisZ5of9nayiViLgnIvZHxMmIOBAR90aslL0/Ih7osv7WRZJbxz+la13+ya6k47/ns7Wt5vFfPvqLSjni73y4XInB5MxsdeZY9p6MxOCOND++Th3fvfTLZ52ONY7/0i2tPx8LZu24NrCj+TXTkwuT/ybmRtc/ijg00C7+ZHUlIL0sDkbEoQ3WMfvkV0c6Hbt9/M2GGjM9WGeqfRnxRP38L0VL/Llk/fXJsZ1RnTk2ll8Vt/rp5yuvd6q/2/h7LT3/u9te/6vxV5LG9dr57uu48tunHe9pNnr9DyVvNu17f3Jh4eJ4xFDyar3RjfsnWspNrJVP4x852r7/74+1d+JwRKQX8YMR8VBEPJy1/ZGIeDQijq4T/w8vPvZO856ki/g3Vxr/dFfnfy0xFK172ifK577/pqnSSnQRf3r+T6ykRrI9d/L5dyft2tjVDAAAAP89pYjYG0lpdDVdKo2O1v+H/0DsLlXn5heeOjP33oXp+jMClRgs5TNd9fng+nzoeHZbn+cnWvLHs3njz8u7VvKjU3PV6aKDhz63p0P/T/1eLrp1wKbzvBb0L/0f+pf+D/1L/4f+1ab/7yqiHcDWa/f9/2EB7QC2Xkv/t+wHfcT9P/Qv/R/6l/4PfWl+V9z+Ifntmti5PZrRn4koFVd7PkNV+JtwFycK/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokX8CAAD//2Ts5lU=") accept4(r0, &(0x7f0000000100)=@l2, &(0x7f0000000040)=0x80, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3a}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x7, 0x1, 0x1, 0xa, 0x6, 0xfffffffffffffff0, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r5}, 0x10) unshare(0x2040400) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r6, 0x0, 0x0) r7 = socket(0x2b, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x30842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r8) open(&(0x7f0000000180)='./file0\x00', 0x80, 0x7) 2.003645951s ago: executing program 1 (id=1725): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0xd04c0) futex_waitv(&(0x7f0000002740)=[{0xdc61, &(0x7f0000000340)=0x4, 0x82}, {0x4, &(0x7f0000000900)=0x5, 0x82}, {0x0, &(0x7f0000000940)=0xb90, 0x82}, {0x7, &(0x7f0000000980)=0x3, 0x82}, {0xca06, &(0x7f00000009c0)=0x6, 0x82}, {0x6, &(0x7f0000000a00)=0x8}, {0x3, &(0x7f0000000a40)=0x2, 0x82}, {0x8, &(0x7f0000000a80)=0x2, 0x2}, {0xf86, &(0x7f0000000ac0)=0x1, 0x2}, {0x8, &(0x7f0000000b00)=0x3d0, 0x2}, {0x100, &(0x7f0000000b40), 0x2}, {0x2d5, &(0x7f0000000b80)=0x40, 0x82}, {0x4, &(0x7f0000000bc0)=0x6, 0x2}, {0x3, &(0x7f0000000c00)=0x9c0, 0x82}, {0x8, &(0x7f0000000c40)=0x6, 0x82}, {0x3, &(0x7f0000000c80)=0x2, 0x2}, {0xb2, &(0x7f0000000cc0)=0x3, 0x82}, {0x9, &(0x7f0000000d00)=0x7, 0x82}, {0x5be, &(0x7f0000000d40)=0x200, 0x82}, {0x6, &(0x7f0000000d80)=0x3, 0x82}, {0x5, &(0x7f0000000dc0)=0x6, 0x82}, {0x6, &(0x7f0000000e00)=0x3, 0x2}, {0x7f, &(0x7f0000000e40)=0xffffffffffffffff, 0x2}, {0x6, &(0x7f0000000e80)=0x2, 0x82}, {0x3, &(0x7f0000001400)=0x400, 0x82}, {0x6, &(0x7f0000000f00)=0x8, 0x82}, {0x5, &(0x7f0000000f40)=0x8000, 0x2}, {0x5, &(0x7f0000000f80)=0x34a28679}, {0x0, &(0x7f0000000fc0)=0x5, 0x82}, {0x0, &(0x7f0000001000), 0x82}, {0xffffffffffffffff, &(0x7f0000001040)=0x10001, 0x82}, {0x8, &(0x7f0000001080)=0x8, 0x82}, {0x3, &(0x7f00000010c0)=0x1b6, 0x82}, {0x4, &(0x7f0000001100)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000001140)=0x4, 0x82}, {0x4, &(0x7f0000001180)=0x5, 0x82}, {0x0, &(0x7f00000011c0)=0x4, 0x2}, {0x6, &(0x7f0000001200)=0x7, 0x82}, {0x2, &(0x7f0000001240)=0x9, 0x2}, {0x4, &(0x7f0000001280)=0x401, 0x82}, {0x5, &(0x7f00000012c0)=0xfffffffeffffffff, 0x2}, {0xee, &(0x7f0000001300)=0x5c8, 0x184}, {0x3, &(0x7f0000001340)=0xff, 0x2}, {0x3ff, &(0x7f0000001380)=0x8e}, {0x3, &(0x7f00000013c0)=0x9, 0x2}, {0x7fffffffffffffff, &(0x7f00000032c0)=0x7f, 0x2}, {0x5, &(0x7f0000001440)=0xf4d, 0x82}, {0x0, &(0x7f0000001480)=0x1ff, 0x82}, {0x0, &(0x7f00000014c0)=0x2, 0x2}, {0x3, &(0x7f0000001500), 0x2}, {0x4, &(0x7f0000001540)=0x8, 0x2}, {0x900, &(0x7f0000001580), 0x2}, {0xd9, &(0x7f00000015c0)=0x80, 0x82}, {0x80000000, &(0x7f0000001600)=0xfffffffffffffdc3, 0x82}, {0x1, &(0x7f0000001640)=0xb, 0x82}, {0x0, &(0x7f0000001680)=0x2, 0x82}, {0x12, &(0x7f00000016c0)=0xb, 0x82}, {0x6, &(0x7f0000001700)=0x800, 0x2}, {0x4, &(0x7f0000001740)=0x80000000, 0x2}, {0xd, &(0x7f0000001780)=0x4, 0x82}, {0x7f, &(0x7f00000017c0)=0x2, 0x2}, {0xa, &(0x7f0000001800)}, {0x1ff, &(0x7f0000001840)=0x8, 0x82}, {0x8000000000000000, &(0x7f0000001880)=0x6, 0x82}, {0x1, &(0x7f00000018c0)=0x1, 0x2}, {0x816, &(0x7f0000001f80)=0x1, 0x2}, {0x8, &(0x7f0000001940)=0x8000000000000001, 0x2}, {0xa8f099a, &(0x7f0000001980)=0x3ff, 0x82}, {0x4, &(0x7f00000019c0)=0xb4f, 0x2}, {0xc524, &(0x7f0000001a00)=0x2722230a, 0x2}, {0xfffffffffffffffe, &(0x7f0000001a40)=0x8001, 0x2}, {0x10001, &(0x7f0000001a80)=0x7, 0x82}, {0x1, &(0x7f0000001ac0)=0x4, 0x82}, {0x100, &(0x7f0000001b00)=0x3, 0x2}, {0x2500000, &(0x7f0000001b40)=0x2, 0x82}, {0xc4, &(0x7f0000001b80)=0x401, 0x2}, {0x5, &(0x7f0000001bc0)=0x6, 0x2}, {0x362d4402, &(0x7f0000001c00)=0x6, 0x2}, {0xc0000000000000, &(0x7f0000001c40)=0x2, 0x82}, {0xbf42, &(0x7f0000001c80)=0x6, 0x2}, {0x2, &(0x7f0000001cc0)=0x5, 0x2}, {0x6, &(0x7f0000001d00)=0x81, 0x2}, {0xaad, &(0x7f0000001d40)=0x8, 0x2}, {0x5, &(0x7f0000001d80)=0xe, 0x2}, {0x0, &(0x7f0000001dc0)=0xac01, 0x82}, {0x2, &(0x7f0000001e00)=0x4, 0x2}, {0x100, &(0x7f0000001e40)=0xff}, {0x8001, &(0x7f0000001e80)=0x2, 0x2}, {0x0, &(0x7f0000001ec0)=0x3, 0x82}, {0xb0, &(0x7f0000001f00)=0xbc, 0x2}, {0xe78, &(0x7f0000001f40)=0x1, 0x2}, {0xf9, &(0x7f0000000ec0), 0x2}, {0xffffffffffffff7f, &(0x7f0000001fc0)=0x4, 0x2}, {0x7, &(0x7f0000002000)=0xcd9, 0x82}, {0xf0e, &(0x7f0000002040), 0x2}, {0x8f72, &(0x7f0000002080)=0x7fff, 0x2}, {0x2, &(0x7f0000002100), 0x2}, {0x2, &(0x7f0000002140)=0xf, 0x2}, {0x0, &(0x7f0000002180)=0x1, 0x2}, {0x6, &(0x7f00000021c0)=0x2, 0x2}, {0x9, &(0x7f0000002200)=0x7, 0x2}, {0xa161, &(0x7f0000002240)=0xb49, 0x82}, {0x4, &(0x7f0000002280)=0x400, 0x2}, {0xa3, &(0x7f00000022c0)=0x40, 0x82}, {0x3, &(0x7f0000002300)=0x77, 0x82}, {0x7fff, &(0x7f0000002340)=0x9, 0x82}, {0x10000, &(0x7f0000002380)=0xb47, 0x2}, {0xffff, &(0x7f00000023c0)=0x7, 0x82}, {0x3, &(0x7f0000002400)=0x6, 0x82}, {0xfffffffffffffff7, &(0x7f0000002440)=0x7, 0x82}, {0x0, &(0x7f0000002480)=0x2, 0x82}, {0x2, &(0x7f00000024c0)=0x8, 0x82}, {0x9, &(0x7f0000002500)=0x7, 0x82}, {0x0, &(0x7f0000002540)=0xe, 0x82}, {0x4, &(0x7f0000002580)=0x6, 0x2}, {0x6, &(0x7f00000025c0)=0x10000, 0x2}, {0x3, &(0x7f0000002600)=0x8, 0x82}, {0x0, &(0x7f0000002640)=0x1, 0x6}, {0x3, &(0x7f0000002680)=0x8, 0x82}, {0x6, &(0x7f00000026c0)=0x9e, 0x2}, {0x6, &(0x7f0000002700)=0x8d3, 0x82}], 0x79, 0x0, &(0x7f00000020c0)={0x0, 0x989680}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x9, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003c80)="f5", 0x1}], 0x1}}], 0x1, 0x8011) recvmmsg(r2, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x10120, 0x0) shutdown(r2, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x15, 0x5, 0x3, 0xc, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x6e6bb0, 0x18, {0x6, 0xff, 0x3, 0xd6, 0x0, 0x1, 0x0, @in=@local, @in6=@loopback}}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2a, 0x3507}]}, 0x60}}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x40040080) 1.981175253s ago: executing program 2 (id=1726): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00042dbd7000fddbdf2507000000050021000000000005000400fa000000"], 0x24}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, 0x0) 1.816557266s ago: executing program 1 (id=1728): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000300)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) read(r3, &(0x7f0000002340)=""/232, 0xe8) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) rt_sigsuspend(&(0x7f00000002c0)={[0x2]}, 0x8) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r6, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r5, r6, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000004c0)={0x1, 0x3}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0xffffffffffffff54}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffe, r8, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r9}, 0x4) 1.64172541s ago: executing program 4 (id=1731): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) setitimer(0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10020) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62066bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r7, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB="00000000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="0b60f2de26674449000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x7fff}, 0x18) 1.527333829s ago: executing program 3 (id=1732): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}}], 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) fadvise64(0xffffffffffffffff, 0x2, 0x7d962850, 0x0) r5 = dup3(r1, r0, 0x0) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x5c, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x40) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) stat(&(0x7f0000000240)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) splice(0xffffffffffffffff, &(0x7f0000000280)=0x5, 0xffffffffffffffff, &(0x7f0000000340)=0x3, 0xd, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x800) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000080)='./file3\x00', &(0x7f0000000200), 0x800000, &(0x7f0000000600)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x8000000000000000}}, {@timeout={'timeout', 0x3d, 0xf}}, {@rq={'rq', 0x3d, 0x200}}, {@common=@dfltuid}, {@timeout={'timeout', 0x3d, 0x7fffffffffffffff}}, {@sq={'sq', 0x3d, 0x5}}, {@timeout={'timeout', 0x3d, 0x7}}, {@timeout={'timeout', 0x3d, 0x6f537f6a}}], [{@euid_eq}, {@uid_lt}, {@fowner_lt}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@obj_type={'obj_type', 0x3d, '(\'-&)'}}, {@pcr={'pcr', 0x3d, 0x20}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@uid_lt={'uid<', 0xee01}}]}}) 1.341011094s ago: executing program 3 (id=1734): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) socket(0x28, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x20, 0x0, 0x8000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200010000008000"/20, @ANYRES32=0x0, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000040000000400"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2, r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='cpuset.mem_hardwall\x00', &(0x7f00000004c0)='#+\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r5, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00a20079dd3490000000000007020000f8ffffffb703000008000000b70400000004000085000000820000009571ef19da7bb490ad35ec4118a555f54207754a7c749000000000"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) 1.282576768s ago: executing program 3 (id=1735): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x76) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002200)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESHEX, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x1, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000340)=[{0x2b, 0x0, [0x3, 0x3, 0x3, 0x9, 0x6, 0x6, 0x3, 0x10000003, 0x2, 0x8001, 0x6, 0xfffffffb, 0x3, 0x8, 0x180, 0x5]}], r3, 0x1, 0x1, 0x48}}, 0x20) 1.281559648s ago: executing program 3 (id=1736): request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVin:Dd', 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14, 0x3ed}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14, 0x3ed}}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x9, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="b4003610", @ANYRES16=r1, @ANYBLOB="20002abd7000fedbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000800000006001600090000000500120001000000060011000700000008000b00000400000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b0008000000060016009e0300000500120001000000060011000400000008000b0001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008) sched_setattr(0x0, &(0x7f00000008c0)={0x38, 0x5, 0x21, 0x1, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000a80)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="1acdf33e51a22ed665e10d79", @ANYRES64=0x0], 0x11) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) mq_timedsend(0xffffffffffffffff, &(0x7f0000000980)="ddf845ee3c6378337945d9cd651c82c11bf8fd5468b1d8ae77df27169401453666edce816ecb6c0707627629d105b1f1d93ab6d3a84f0eb8e180e450a48787c1422fbbf2d0c4dfb5734e2b7dd062df0421ecec71f2a2a1dd95db87cf8844e10ebb8e2902d82c98b34a349ecc70c6ae289eee77bbd285baf91de97a34af7b733c6bb59a8b8228a0b109cd412391bc5b37fda8f5f04c3638de1b8c9eee3ae3fb091ccb72c15b7b2923bfaddde95e4cf8248b5e42ca991786ad1b609e34a2113a7b5748dd", 0xc3, 0x10, &(0x7f0000000880)={0x0, 0x989680}) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3c}}, './file0\x00'}) sendmsg$kcm(r7, 0x0, 0xc0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") 1.236327152s ago: executing program 3 (id=1737): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff, 0x1, [0x6]}, 0xa) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.1304656s ago: executing program 2 (id=1738): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 1.113840401s ago: executing program 2 (id=1739): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64f1f11a85418018, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x401}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_regs={0x4, 0x0, 0x2f, "f42a637b0000dda5b89a02db8deea00b06ee73e9da31e2faa7a8c01332068d1962fcd5e4e4fc12d7a545aa3ed6bab3"}}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x7}, {0xc, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 904.801908ms ago: executing program 1 (id=1740): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64f1f11a85418018, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x401}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_regs={0x4, 0x0, 0x2f, "f42a637b0000dda5b89a02db8deea00b06ee73e9da31e2faa7a8c01332068d1962fcd5e4e4fc12d7a545aa3ed6bab3"}}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x7}, {0xc, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 674.170297ms ago: executing program 2 (id=1741): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f00000011c0)='mm_page_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 657.187078ms ago: executing program 4 (id=1742): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) clock_gettime(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10000, 0x1}, 0x8002, 0x0, 0x1003, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = creat(&(0x7f0000010280)='./file0\x00', 0x182) mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x15, 0x88, 0xc000067}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000400), 0x5, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000002080)=ANY=[@ANYBLOB="0088"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ustat(0x3, 0x0) r3 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x5000) mlockall(0x3) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x5000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) mknod(&(0x7f0000000080)='./file0\x00', 0x0, 0xb) sendmmsg$inet6(r4, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 499.46765ms ago: executing program 0 (id=1743): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x17e, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20400000}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x10, 0xfffffffd, 0xb}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x5, 0x5, 0xf}, {0x4, 0x3, 0x2}, {0x1, 0x4, 0x8, 0x6}], 0x10, 0x81}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="5f40c9a6be04c5f6bc9b4ba3d8ef5b03ff68a95292e475cdb8563a4c64a6651b0cb481ef401d2fa7542aa7f8029fc35006c9b9ef090068c34994cce9e3b353455d780f652fc0c3a4254ba5e0c465777c559aba505b9802a8b1df5c8a91678ea4c60481ff106b06d5c4c1b436c12da82e5ee85b232953edbcfd20429995cabdf98f3bc59891398f664272c19d2eeb91c5cbc327bf49a92fcf139478dd751b3385627e25533b55581982d6bd1a965ca016ae96", @ANYRESOCT, @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x40040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000780)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000227bd7000fddbdf250400000005002d0001000000050030000000000008000600", @ANYRES32=r7, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x20000044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='ext4_nfs_commit_metadata\x00', r2, 0x0, 0x2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r1) r8 = socket(0x10, 0x3, 0x0) unshare(0x2c020400) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x829, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x11, 0x2, {0x8000, 0x0, 0x2, 0x4}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x0, 0x5, 0x7ff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x0) socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="495300922c589530190fed69b654a1189c00", @ANYRES32=0x0, @ANYBLOB="0c00990008000000000000000800428004000080"], 0x30}}, 0x6048004) r12 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r12, 0x0, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000008c0)='tegra_dma_complete_cb\x00', r13}, 0x18) r14 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r14, 0xfffffffffffffffe, r14, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 461.097583ms ago: executing program 0 (id=1744): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x40}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c0002"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 447.016545ms ago: executing program 1 (id=1745): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f00000011c0)='mm_page_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x1, 0x0, {0x0, 0x0, 0x0, r7, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001600)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000001700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x68, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004041}, 0x200440c4) 410.132217ms ago: executing program 0 (id=1746): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x17e, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20400000}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x10, 0xfffffffd, 0xb}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x5, 0x5, 0xf}, {0x4, 0x3, 0x2}, {0x1, 0x4, 0x8, 0x6}], 0x10, 0x81}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="5f40c9a6be04c5f6bc9b4ba3d8ef5b03ff68a95292e475cdb8563a4c64a6651b0cb481ef401d2fa7542aa7f8029fc35006c9b9ef090068c34994cce9e3b353455d780f652fc0c3a4254ba5e0c465777c559aba505b9802a8b1df5c8a91678ea4c60481ff106b06d5c4c1b436c12da82e5ee85b232953edbcfd20429995cabdf98f3bc59891398f664272c19d2eeb91c5cbc327bf49a92fcf139478dd751b3385627e25533b55581982d6bd1a965ca016ae96", @ANYRESOCT, @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x40040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000780)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000227bd7000fddbdf250400000005002d0001000000050030000000000008000600", @ANYRES32=r7, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x20000044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='ext4_nfs_commit_metadata\x00', r2, 0x0, 0x2}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000ac0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) close(r1) r9 = socket(0x10, 0x3, 0x0) unshare(0x2c020400) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x829, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x11, 0x2, {0x8000, 0x0, 0x2, 0x4}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x0, 0x5, 0x7ff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x0) socket(0x10, 0x803, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="495300922c589530190fed69b654a1189c00", @ANYRES32=0x0, @ANYBLOB="0c00990008000000000000000800428004000080"], 0x30}}, 0x6048004) r13 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r13, 0x0, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000008c0)='tegra_dma_complete_cb\x00', r14}, 0x18) r15 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r15, 0xfffffffffffffffe, r15, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 377.5056ms ago: executing program 3 (id=1747): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}}], 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r6 = socket$inet(0x2, 0x80001, 0x84) fadvise64(r6, 0x2, 0x7d962850, 0x0) r7 = dup3(r1, r0, 0x0) connect$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 306.184016ms ago: executing program 0 (id=1748): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{0x1}, &(0x7f0000000d00), 0x0}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000f80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x6, 0x0, 0x0, &(0x7f0000000ec0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x25, '\x00', r1, 0x25, r3, 0x8, &(0x7f0000000f40)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001000)=[{0x4, 0x5, 0x7, 0x2}, {0x3, 0x4, 0xd, 0x2}, {0x4, 0x1, 0x5, 0x9}, {0x5, 0x2, 0x8}, {0x5, 0x5, 0x6, 0x9}], 0x10, 0x5}, 0x94) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r7}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000440)={0x2}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x2, 0x8}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0xe00, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {0x9, 0x200}}, './file1\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r5, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c80)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000001d00)=[0x0]) 296.018976ms ago: executing program 2 (id=1749): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_pidfd_open(0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) dup2(r2, r1) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x80, 0x80, 0x9, 0x3, {{0x24, 0x4, 0x2, 0x0, 0x90, 0x66, 0x0, 0xd, 0x4, 0x0, @remote, @private=0xa010101, {[@noop, @lsrr={0x83, 0x7, 0x5c, [@multicast1]}, @timestamp_addr={0x44, 0x14, 0x5e, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast1, 0x1}]}, @rr={0x7, 0x1f, 0xfd, [@dev={0xac, 0x14, 0x14, 0x25}, @local, @broadcast, @remote, @loopback, @remote, @multicast1]}, @timestamp_prespec={0x44, 0x24, 0xb1, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local}]}, @timestamp_addr={0x44, 0x1c, 0xe1, 0x1, 0x7, [{@local}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0xfd88}, {@local, 0x7}]}, @end]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00'}) bind$pptp(r3, &(0x7f0000000340)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) bind$pptp(r3, &(0x7f00000004c0)={0x18, 0x2, {0x1, @loopback}}, 0x1e) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b002000000005000500000000000000e920d720de5b981983e44a9b081517e304047b041c49c223b04649f1d2194b3d36d54c874612eff992e051f1c254b669e2584b2d3b017a13c87764fbe1dfe38917974260abef6bd3cf511b1e8a428e0ce73a64d734444005f7acecb925af9cd7f1402ba8a960efc093dea5be5f3b4eb62e82eb2397b8502894511962c2aff6b9275d78fccda948f57f6ffde5f07e0a63c3381c497d"], 0xcd) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 135.907889ms ago: executing program 0 (id=1750): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x9}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x80}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r4, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r8, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r5}, 0x18) r9 = socket$kcm(0x29, 0x5, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r11, 0x0) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg(r9, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 131.55086ms ago: executing program 1 (id=1751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000150a01", @ANYBLOB="2d030b761d55661ee639f37a87bccc65527db788dbc2569520399283aeac97fbfbef742a72303392ca19cf2524057040242b569006890e347eaa9fdbbf0e79352587eb732e4db2189f92370aaed338203c090e490aed10e3df1f9daac0beb75562190d47f68b08f9dc325348755dd67417f8a01c05a96570c9139f6da6c1412c3d3b4f70c35973b9fc8dbcd258801bf073958b93177fc1d7a7c3f862ce729a9ec12cacb75a499bac7ef8ca69f9263350f16db1f8ab9d3d39db32ffbc6404a5f0152cdc2ed82daf6e3942ccf85028b7826e781741116574157c9f1d1b8c958171ab9881177d6e5adb05dbfe8369a18a"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 13.266109ms ago: executing program 2 (id=1752): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x0, @mcast2, 0x9}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) r1 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000240)=""/173, 0xad}, {0x0}], 0x2, 0x800, 0x4000000) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x0, @mcast2, 0x9}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) close(r0) (async) syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') (async) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000240)=""/173, 0xad}, {0x0}], 0x2, 0x800, 0x4000000) (async) 0s ago: executing program 0 (id=1753): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 3) kernel console output (not intermixed with test programs): 9.394246][ T4199] RBP: 00007f9996807090 R08: 0000000000000000 R09: 0000000000000000 [ 39.394310][ T4199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.394320][ T4199] R13: 00007f9997fc6038 R14: 00007f9997fc5fa0 R15: 00007ffcd4f5a1c8 [ 39.394355][ T4199] [ 39.608157][ T4210] program syz.1.260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.783601][ T4226] tipc: Started in network mode [ 39.788575][ T4226] tipc: Node identity 8e6e36116e38, cluster identity 4711 [ 39.795833][ T4226] tipc: Enabled bearer , priority 0 [ 39.835386][ T4229] syzkaller0: entered promiscuous mode [ 39.840930][ T4229] syzkaller0: entered allmulticast mode [ 39.872820][ T4226] tipc: Resetting bearer [ 39.880055][ T4225] tipc: Resetting bearer [ 39.889580][ T4225] tipc: Disabling bearer [ 39.895455][ T4233] program syz.0.268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.207785][ T4258] FAULT_INJECTION: forcing a failure. [ 40.207785][ T4258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.220962][ T4258] CPU: 1 UID: 0 PID: 4258 Comm: syz.1.279 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 40.221063][ T4258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 40.221074][ T4258] Call Trace: [ 40.221080][ T4258] [ 40.221087][ T4258] __dump_stack+0x1d/0x30 [ 40.221105][ T4258] dump_stack_lvl+0xe8/0x140 [ 40.221175][ T4258] dump_stack+0x15/0x1b [ 40.221258][ T4258] should_fail_ex+0x265/0x280 [ 40.221310][ T4258] should_fail+0xb/0x20 [ 40.221328][ T4258] should_fail_usercopy+0x1a/0x20 [ 40.221443][ T4258] _copy_from_user+0x1c/0xb0 [ 40.221467][ T4258] ___sys_sendmsg+0xc1/0x1d0 [ 40.221499][ T4258] __x64_sys_sendmsg+0xd4/0x160 [ 40.221523][ T4258] x64_sys_call+0x191e/0x2ff0 [ 40.221576][ T4258] do_syscall_64+0xd2/0x200 [ 40.221601][ T4258] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 40.221625][ T4258] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 40.221649][ T4258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.221669][ T4258] RIP: 0033:0x7f9997d9ebe9 [ 40.221712][ T4258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.221729][ T4258] RSP: 002b:00007f9996807038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.221749][ T4258] RAX: ffffffffffffffda RBX: 00007f9997fc5fa0 RCX: 00007f9997d9ebe9 [ 40.221762][ T4258] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 40.221772][ T4258] RBP: 00007f9996807090 R08: 0000000000000000 R09: 0000000000000000 [ 40.221783][ T4258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.221793][ T4258] R13: 00007f9997fc6038 R14: 00007f9997fc5fa0 R15: 00007ffcd4f5a1c8 [ 40.221809][ T4258] [ 40.408015][ T4252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.276'. [ 40.529282][ T4275] tipc: Started in network mode [ 40.534229][ T4275] tipc: Node identity faec535144b1, cluster identity 4711 [ 40.541422][ T4275] tipc: Enabled bearer , priority 0 [ 40.549775][ T4275] syzkaller0: entered promiscuous mode [ 40.555476][ T4275] syzkaller0: entered allmulticast mode [ 40.564191][ T4275] tipc: Resetting bearer [ 40.570760][ T4272] tipc: Resetting bearer [ 40.578205][ T4272] tipc: Disabling bearer [ 40.724156][ T4277] lo speed is unknown, defaulting to 1000 [ 40.894325][ T4292] team0 (unregistering): Port device team_slave_0 removed [ 40.903969][ T4292] team0 (unregistering): Port device team_slave_1 removed [ 40.974348][ T4296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.292'. [ 40.992995][ T4299] program syz.0.293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.021933][ T4301] netlink: 'syz.0.294': attribute type 1 has an invalid length. [ 41.029806][ T4301] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.294'. [ 41.100600][ T4309] tipc: Enabled bearer , priority 0 [ 41.107904][ T4309] syzkaller0: entered promiscuous mode [ 41.113716][ T4309] syzkaller0: entered allmulticast mode [ 41.128883][ T4309] tipc: Resetting bearer [ 41.136408][ T4308] tipc: Resetting bearer [ 41.148600][ T4308] tipc: Disabling bearer [ 41.214166][ T4313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 41.223437][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.231013][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.514739][ T4338] tipc: Enabled bearer , priority 0 [ 41.522210][ T4338] syzkaller0: entered promiscuous mode [ 41.527728][ T4338] syzkaller0: entered allmulticast mode [ 41.544680][ T4338] tipc: Resetting bearer [ 41.552086][ T4337] tipc: Resetting bearer [ 41.565020][ T4337] tipc: Disabling bearer [ 41.649826][ T4344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 41.901392][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.908715][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.021151][ T4380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.316'. [ 42.030409][ T4380] netlink: 'syz.2.316': attribute type 7 has an invalid length. [ 42.038095][ T4380] netlink: 'syz.2.316': attribute type 8 has an invalid length. [ 42.045821][ T4380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 42.290937][ T4388] program syz.4.321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.317441][ T4011] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.334217][ T4011] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.357214][ T4011] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.395269][ T4011] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.502365][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'. [ 42.555864][ T4405] program syz.3.329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.671763][ T4412] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 42.909914][ T4422] FAULT_INJECTION: forcing a failure. [ 42.909914][ T4422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.923219][ T4422] CPU: 1 UID: 0 PID: 4422 Comm: syz.1.336 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 42.923246][ T4422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.923256][ T4422] Call Trace: [ 42.923261][ T4422] [ 42.923268][ T4422] __dump_stack+0x1d/0x30 [ 42.923288][ T4422] dump_stack_lvl+0xe8/0x140 [ 42.923359][ T4422] dump_stack+0x15/0x1b [ 42.923374][ T4422] should_fail_ex+0x265/0x280 [ 42.923386][ T4422] should_fail+0xb/0x20 [ 42.923447][ T4422] should_fail_usercopy+0x1a/0x20 [ 42.923459][ T4422] _copy_from_user+0x1c/0xb0 [ 42.923474][ T4422] ___sys_sendmsg+0xc1/0x1d0 [ 42.923528][ T4422] __sys_sendmmsg+0x178/0x300 [ 42.923593][ T4422] __x64_sys_sendmmsg+0x57/0x70 [ 42.923605][ T4422] x64_sys_call+0x1c4a/0x2ff0 [ 42.923616][ T4422] do_syscall_64+0xd2/0x200 [ 42.923645][ T4422] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.923658][ T4422] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 42.923671][ T4422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.923873][ T4422] RIP: 0033:0x7f9997d9ebe9 [ 42.923936][ T4422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.923982][ T4422] RSP: 002b:00007f9996807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 42.923994][ T4422] RAX: ffffffffffffffda RBX: 00007f9997fc5fa0 RCX: 00007f9997d9ebe9 [ 42.924035][ T4422] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000003 [ 42.924041][ T4422] RBP: 00007f9996807090 R08: 0000000000000000 R09: 0000000000000000 [ 42.924048][ T4422] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.924054][ T4422] R13: 00007f9997fc6038 R14: 00007f9997fc5fa0 R15: 00007ffcd4f5a1c8 [ 42.924065][ T4422] [ 43.115416][ T4425] program syz.1.337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.690899][ T29] kauditd_printk_skb: 565 callbacks suppressed [ 43.690914][ T29] audit: type=1326 audit(1755432577.961:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3246ebe9 code=0x7ffc0000 [ 43.720804][ T29] audit: type=1326 audit(1755432577.961:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3246ebe9 code=0x7ffc0000 [ 43.744246][ T29] audit: type=1326 audit(1755432577.961:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b3246ebe9 code=0x7ffc0000 [ 43.767618][ T29] audit: type=1326 audit(1755432577.961:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3246ebe9 code=0x7ffc0000 [ 43.791007][ T29] audit: type=1326 audit(1755432577.961:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b3246ebe9 code=0x7ffc0000 [ 43.814457][ T29] audit: type=1326 audit(1755432577.961:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3246ebe9 code=0x7ffc0000 [ 43.837830][ T29] audit: type=1326 audit(1755432577.961:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b3246ebe9 code=0x7ffc0000 [ 43.861262][ T29] audit: type=1326 audit(1755432577.961:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3246ebe9 code=0x7ffc0000 [ 43.885019][ T29] audit: type=1326 audit(1755432577.961:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b3246ebe9 code=0x7ffc0000 [ 43.908577][ T29] audit: type=1326 audit(1755432577.961:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3246ebe9 code=0x7ffc0000 [ 43.974539][ T4488] program syz.4.365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.020413][ T4486] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 44.265857][ T4506] tipc: Enabled bearer , priority 0 [ 44.275076][ T4506] syzkaller0: entered promiscuous mode [ 44.280657][ T4506] syzkaller0: entered allmulticast mode [ 44.309701][ T4506] tipc: Resetting bearer [ 44.335335][ T4505] tipc: Resetting bearer [ 44.358105][ T4505] tipc: Disabling bearer [ 44.744630][ T4550] @: renamed from vlan0 (while UP) [ 44.812924][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 44.864143][ T4562] program syz.1.398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.984196][ T1036] IPVS: starting estimator thread 0... [ 44.986817][ T4568] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 45.078642][ T4572] program syz.0.402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.081626][ T4570] IPVS: using max 4368 ests per chain, 218400 per kthread [ 45.465519][ T4581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 45.776617][ T4589] tipc: Started in network mode [ 45.781698][ T4589] tipc: Node identity 4260b9bdb65e, cluster identity 4711 [ 45.789147][ T4589] tipc: Enabled bearer , priority 0 [ 45.797134][ T4592] syzkaller0: entered promiscuous mode [ 45.802848][ T4592] syzkaller0: entered allmulticast mode [ 45.815091][ T4589] tipc: Resetting bearer [ 45.824040][ T4588] tipc: Resetting bearer [ 45.832725][ T4588] tipc: Disabling bearer [ 45.850197][ T4594] program syz.1.410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.900623][ T4598] lo speed is unknown, defaulting to 1000 [ 46.020458][ T4610] netlink: 'syz.2.412': attribute type 21 has an invalid length. [ 46.028541][ T4610] netlink: 'syz.2.412': attribute type 4 has an invalid length. [ 46.040692][ T4610] random: crng reseeded on system resumption [ 46.303048][ T4634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'. [ 46.489880][ T4645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'. [ 46.675225][ T4666] tipc: Enabled bearer , priority 0 [ 46.684588][ T4666] syzkaller0: entered promiscuous mode [ 46.690096][ T4666] syzkaller0: entered allmulticast mode [ 46.702250][ T4666] tipc: Resetting bearer [ 46.711476][ T4665] tipc: Resetting bearer [ 46.720264][ T4669] program syz.1.440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.731071][ T4665] tipc: Disabling bearer [ 46.825400][ T4677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 46.858639][ T4675] lo speed is unknown, defaulting to 1000 [ 46.860403][ T4678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.442'. [ 47.485210][ T4719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.458'. [ 47.970780][ T4750] tipc: Enabled bearer , priority 0 [ 48.000112][ T4750] syzkaller0: entered promiscuous mode [ 48.006058][ T4750] syzkaller0: entered allmulticast mode [ 48.024770][ T4750] tipc: Resetting bearer [ 48.032004][ T4749] tipc: Resetting bearer [ 48.042720][ T4753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.473'. [ 48.053416][ T4749] tipc: Disabling bearer [ 48.161320][ T4757] @: renamed from vlan0 [ 48.201316][ T4765] netlink: 44 bytes leftover after parsing attributes in process `syz.1.478'. [ 48.342283][ T4779] lo speed is unknown, defaulting to 1000 [ 48.459073][ T4790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.489'. [ 48.498318][ T4799] netlink: 44 bytes leftover after parsing attributes in process `syz.1.491'. [ 48.509315][ T4798] program syz.2.490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.604687][ T4810] FAULT_INJECTION: forcing a failure. [ 48.604687][ T4810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.617882][ T4810] CPU: 0 UID: 0 PID: 4810 Comm: syz.2.494 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 48.617932][ T4810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.617945][ T4810] Call Trace: [ 48.617951][ T4810] [ 48.617959][ T4810] __dump_stack+0x1d/0x30 [ 48.617980][ T4810] dump_stack_lvl+0xe8/0x140 [ 48.618042][ T4810] dump_stack+0x15/0x1b [ 48.618092][ T4810] should_fail_ex+0x265/0x280 [ 48.618109][ T4810] should_fail+0xb/0x20 [ 48.618123][ T4810] should_fail_usercopy+0x1a/0x20 [ 48.618140][ T4810] _copy_to_user+0x20/0xa0 [ 48.618208][ T4810] simple_read_from_buffer+0xb5/0x130 [ 48.618229][ T4810] proc_fail_nth_read+0x10e/0x150 [ 48.618251][ T4810] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 48.618271][ T4810] vfs_read+0x1a5/0x770 [ 48.618303][ T4810] ? __rcu_read_unlock+0x4f/0x70 [ 48.618321][ T4810] ? __fget_files+0x184/0x1c0 [ 48.618380][ T4810] ksys_read+0xda/0x1a0 [ 48.618398][ T4810] __x64_sys_read+0x40/0x50 [ 48.618462][ T4810] x64_sys_call+0x27bc/0x2ff0 [ 48.618481][ T4810] do_syscall_64+0xd2/0x200 [ 48.618521][ T4810] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.618543][ T4810] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 48.618621][ T4810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.618649][ T4810] RIP: 0033:0x7f1b3246d5fc [ 48.618729][ T4810] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 48.618746][ T4810] RSP: 002b:00007f1b30eb6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 48.618762][ T4810] RAX: ffffffffffffffda RBX: 00007f1b32696090 RCX: 00007f1b3246d5fc [ 48.618773][ T4810] RDX: 000000000000000f RSI: 00007f1b30eb60a0 RDI: 0000000000000005 [ 48.618783][ T4810] RBP: 00007f1b30eb6090 R08: 0000000000000000 R09: 0000000000000000 [ 48.618793][ T4810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.618803][ T4810] R13: 00007f1b32696128 R14: 00007f1b32696090 R15: 00007ffe0bbf5818 [ 48.618847][ T4810] [ 48.953546][ T29] kauditd_printk_skb: 546 callbacks suppressed [ 48.953562][ T29] audit: type=1326 audit(1755432583.231:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff187a8ebe9 code=0x7ffc0000 [ 48.984438][ T29] audit: type=1326 audit(1755432583.241:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 49.007802][ T29] audit: type=1326 audit(1755432583.241:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 49.031296][ T29] audit: type=1326 audit(1755432583.241:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 49.054738][ T29] audit: type=1326 audit(1755432583.241:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 49.078161][ T29] audit: type=1326 audit(1755432583.241:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 49.101498][ T29] audit: type=1326 audit(1755432583.241:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 49.124998][ T29] audit: type=1326 audit(1755432583.241:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 49.148457][ T29] audit: type=1326 audit(1755432583.241:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 49.171783][ T29] audit: type=1326 audit(1755432583.241:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 49.260318][ T4837] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 49.520786][ T4862] tipc: Enabled bearer , priority 0 [ 49.527872][ T4862] syzkaller0: entered promiscuous mode [ 49.533679][ T4862] syzkaller0: entered allmulticast mode [ 49.542888][ T4862] tipc: Resetting bearer [ 49.557569][ T4861] tipc: Resetting bearer [ 49.565913][ T4861] tipc: Disabling bearer [ 49.703401][ T4868] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 49.715776][ T4873] lo speed is unknown, defaulting to 1000 [ 49.717655][ T2977] IPVS: starting estimator thread 0... [ 49.811749][ T4877] IPVS: using max 2592 ests per chain, 129600 per kthread [ 49.849863][ T4886] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 50.178145][ T2977] IPVS: starting estimator thread 0... [ 50.188303][ T4898] netlink: 'syz.3.527': attribute type 3 has an invalid length. [ 50.271861][ T4897] IPVS: using max 4320 ests per chain, 216000 per kthread [ 50.290596][ T4908] lo speed is unknown, defaulting to 1000 [ 50.422304][ T4912] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 50.600915][ T4926] __nla_validate_parse: 1 callbacks suppressed [ 50.600929][ T4926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.540'. [ 51.184549][ T4953] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 51.366965][ T4961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 51.628463][ T4987] @: renamed from vlan0 [ 51.657252][ T4990] program syz.3.564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.887068][ T5005] lo speed is unknown, defaulting to 1000 [ 52.200124][ T5015] lo speed is unknown, defaulting to 1000 [ 52.393732][ T5024] program syz.1.578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.764200][ T5051] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.771777][ T5051] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.893673][ T2977] lo speed is unknown, defaulting to 1000 [ 52.899460][ T2977] syz2: Port: 1 Link DOWN [ 52.901250][ T4002] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.916702][ T5062] lo speed is unknown, defaulting to 1000 [ 52.922627][ T4002] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.949717][ T4002] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.962135][ T4002] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.057739][ T5071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.594'. [ 53.318149][ T5087] program syz.4.600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.380491][ T5080] lo speed is unknown, defaulting to 1000 [ 53.734189][ T5108] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 53.782748][ T5119] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 53.895177][ T5134] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 54.001055][ T29] kauditd_printk_skb: 886 callbacks suppressed [ 54.001149][ T29] audit: type=1326 audit(1755432588.271:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5143 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231901ebe9 code=0x7ffc0000 [ 54.017251][ T5147] syzkaller1: entered promiscuous mode [ 54.036365][ T5147] syzkaller1: entered allmulticast mode [ 54.047667][ T5144] ./file0: Can't lookup blockdev [ 54.071594][ T29] audit: type=1326 audit(1755432588.281:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5129 comm="syz.2.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3246ebe9 code=0x7ffc0000 [ 54.095811][ T29] audit: type=1326 audit(1755432588.281:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5129 comm="syz.2.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3246ebe9 code=0x7ffc0000 [ 54.119472][ T29] audit: type=1326 audit(1755432588.291:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5129 comm="syz.2.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b3246ebe9 code=0x7ffc0000 [ 54.142866][ T29] audit: type=1326 audit(1755432588.291:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5129 comm="syz.2.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3246ebe9 code=0x7ffc0000 [ 54.166440][ T29] audit: type=1326 audit(1755432588.291:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5129 comm="syz.2.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b3246ebe9 code=0x7ffc0000 [ 54.189821][ T29] audit: type=1326 audit(1755432588.321:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5129 comm="syz.2.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3246ebe9 code=0x7ffc0000 [ 54.213333][ T29] audit: type=1326 audit(1755432588.321:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5143 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f231901ebe9 code=0x7ffc0000 [ 54.236792][ T29] audit: type=1326 audit(1755432588.321:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5129 comm="syz.2.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3246ebe9 code=0x7ffc0000 [ 54.260118][ T29] audit: type=1326 audit(1755432588.321:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5143 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231901ebe9 code=0x7ffc0000 [ 54.357873][ T5157] program syz.2.630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.439865][ T5166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'. [ 54.689579][ T5194] program syz.0.644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.781936][ T5200] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 54.857996][ T5207] FAULT_INJECTION: forcing a failure. [ 54.857996][ T5207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.871332][ T5207] CPU: 0 UID: 0 PID: 5207 Comm: syz.4.650 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 54.871406][ T5207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.871418][ T5207] Call Trace: [ 54.871434][ T5207] [ 54.871441][ T5207] __dump_stack+0x1d/0x30 [ 54.871496][ T5207] dump_stack_lvl+0xe8/0x140 [ 54.871516][ T5207] dump_stack+0x15/0x1b [ 54.871536][ T5207] should_fail_ex+0x265/0x280 [ 54.871628][ T5207] should_fail+0xb/0x20 [ 54.871646][ T5207] should_fail_usercopy+0x1a/0x20 [ 54.871668][ T5207] _copy_from_user+0x1c/0xb0 [ 54.871775][ T5207] __copy_msghdr+0x244/0x300 [ 54.871797][ T5207] ___sys_sendmsg+0x109/0x1d0 [ 54.871830][ T5207] __x64_sys_sendmsg+0xd4/0x160 [ 54.871854][ T5207] x64_sys_call+0x191e/0x2ff0 [ 54.871948][ T5207] do_syscall_64+0xd2/0x200 [ 54.871971][ T5207] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.871991][ T5207] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 54.872010][ T5207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.872028][ T5207] RIP: 0033:0x7ff187a8ebe9 [ 54.872106][ T5207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.872144][ T5207] RSP: 002b:00007ff1864ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.872162][ T5207] RAX: ffffffffffffffda RBX: 00007ff187cb5fa0 RCX: 00007ff187a8ebe9 [ 54.872181][ T5207] RDX: 0000000020000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 54.872194][ T5207] RBP: 00007ff1864ef090 R08: 0000000000000000 R09: 0000000000000000 [ 54.872206][ T5207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.872245][ T5207] R13: 00007ff187cb6038 R14: 00007ff187cb5fa0 R15: 00007ffc0d359148 [ 54.872262][ T5207] [ 55.266673][ T5237] netlink: 76 bytes leftover after parsing attributes in process `syz.1.663'. [ 55.352460][ T5243] lo speed is unknown, defaulting to 1000 [ 55.371222][ T5237] lo speed is unknown, defaulting to 1000 [ 55.641139][ T5267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'. [ 55.672382][ T5271] lo speed is unknown, defaulting to 1000 [ 55.789198][ T5283] FAULT_INJECTION: forcing a failure. [ 55.789198][ T5283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.802470][ T5283] CPU: 1 UID: 0 PID: 5283 Comm: syz.1.680 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 55.802487][ T5283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 55.802537][ T5283] Call Trace: [ 55.802541][ T5283] [ 55.802544][ T5283] __dump_stack+0x1d/0x30 [ 55.802557][ T5283] dump_stack_lvl+0xe8/0x140 [ 55.802610][ T5283] dump_stack+0x15/0x1b [ 55.802619][ T5283] should_fail_ex+0x265/0x280 [ 55.802655][ T5283] should_fail+0xb/0x20 [ 55.802665][ T5283] should_fail_usercopy+0x1a/0x20 [ 55.802677][ T5283] _copy_from_iter+0xcf/0xe40 [ 55.802729][ T5283] ? alloc_pages_mpol+0x201/0x250 [ 55.802748][ T5283] copy_page_from_iter+0x178/0x2a0 [ 55.802816][ T5283] tun_get_user+0x679/0x2680 [ 55.802852][ T5283] ? ref_tracker_alloc+0x1f2/0x2f0 [ 55.802866][ T5283] tun_chr_write_iter+0x15e/0x210 [ 55.802882][ T5283] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 55.802897][ T5283] vfs_write+0x527/0x960 [ 55.802941][ T5283] ksys_write+0xda/0x1a0 [ 55.802953][ T5283] __x64_sys_write+0x40/0x50 [ 55.803048][ T5283] x64_sys_call+0x27fe/0x2ff0 [ 55.803068][ T5283] do_syscall_64+0xd2/0x200 [ 55.803084][ T5283] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.803097][ T5283] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 55.803213][ T5283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.803224][ T5283] RIP: 0033:0x7f9997d9d69f [ 55.803233][ T5283] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 55.803243][ T5283] RSP: 002b:00007f9996807000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 55.803254][ T5283] RAX: ffffffffffffffda RBX: 00007f9997fc5fa0 RCX: 00007f9997d9d69f [ 55.803331][ T5283] RDX: 0000000000000036 RSI: 0000200000000440 RDI: 00000000000000c8 [ 55.803338][ T5283] RBP: 00007f9996807090 R08: 0000000000000000 R09: 0000000000000000 [ 55.803345][ T5283] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 55.803355][ T5283] R13: 00007f9997fc6038 R14: 00007f9997fc5fa0 R15: 00007ffcd4f5a1c8 [ 55.803366][ T5283] [ 56.094865][ T5289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'. [ 56.127138][ T5300] capability: warning: `syz.2.688' uses deprecated v2 capabilities in a way that may be insecure [ 56.140936][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.686'. [ 56.159728][ T5299] lo speed is unknown, defaulting to 1000 [ 56.422001][ T5317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.692'. [ 56.775158][ T5342] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 56.976575][ T5347] syzkaller1: entered promiscuous mode [ 56.982128][ T5347] syzkaller1: entered allmulticast mode [ 57.007163][ T5351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.706'. [ 57.010989][ T5349] lo speed is unknown, defaulting to 1000 [ 57.137273][ T5363] lo speed is unknown, defaulting to 1000 [ 57.364201][ T5372] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 57.745298][ T5407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.728'. [ 57.863597][ T5418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'. [ 57.973071][ T5432] program syz.3.738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.140769][ T5448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'. [ 58.310550][ T5462] lo speed is unknown, defaulting to 1000 [ 58.340760][ T5466] FAULT_INJECTION: forcing a failure. [ 58.340760][ T5466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.353882][ T5466] CPU: 1 UID: 0 PID: 5466 Comm: +}[@ Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 58.353984][ T5466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 58.353996][ T5466] Call Trace: [ 58.354004][ T5466] [ 58.354012][ T5466] __dump_stack+0x1d/0x30 [ 58.354034][ T5466] dump_stack_lvl+0xe8/0x140 [ 58.354100][ T5466] dump_stack+0x15/0x1b [ 58.354117][ T5466] should_fail_ex+0x265/0x280 [ 58.354138][ T5466] should_fail+0xb/0x20 [ 58.354155][ T5466] should_fail_usercopy+0x1a/0x20 [ 58.354175][ T5466] _copy_from_user+0x1c/0xb0 [ 58.354207][ T5466] memdup_user+0x5e/0xd0 [ 58.354276][ T5466] strndup_user+0x68/0xb0 [ 58.354344][ T5466] __se_sys_mount+0x4d/0x2e0 [ 58.354366][ T5466] ? fput+0x8f/0xc0 [ 58.354393][ T5466] ? ksys_write+0x192/0x1a0 [ 58.354440][ T5466] __x64_sys_mount+0x67/0x80 [ 58.354463][ T5466] x64_sys_call+0x2b4d/0x2ff0 [ 58.354508][ T5466] do_syscall_64+0xd2/0x200 [ 58.354530][ T5466] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.354591][ T5466] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 58.354670][ T5466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.354759][ T5466] RIP: 0033:0x7f1b3246ebe9 [ 58.354774][ T5466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.354789][ T5466] RSP: 002b:00007f1b30ed7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 58.354807][ T5466] RAX: ffffffffffffffda RBX: 00007f1b32695fa0 RCX: 00007f1b3246ebe9 [ 58.354821][ T5466] RDX: 0000200000000280 RSI: 00002000000002c0 RDI: 0000000000000000 [ 58.354898][ T5466] RBP: 00007f1b30ed7090 R08: 0000200000000540 R09: 0000000000000000 [ 58.354912][ T5466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.354925][ T5466] R13: 00007f1b32696038 R14: 00007f1b32695fa0 R15: 00007ffe0bbf5818 [ 58.354943][ T5466] [ 58.582244][ T5470] netlink: 'syz.2.754': attribute type 1 has an invalid length. [ 58.679226][ T5483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.759'. [ 58.749080][ T5492] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.792734][ T5499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.767'. [ 58.941733][ T5514] FAULT_INJECTION: forcing a failure. [ 58.941733][ T5514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.954938][ T5514] CPU: 1 UID: 0 PID: 5514 Comm: syz.2.774 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 58.954964][ T5514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 58.954979][ T5514] Call Trace: [ 58.954985][ T5514] [ 58.954993][ T5514] __dump_stack+0x1d/0x30 [ 58.955020][ T5514] dump_stack_lvl+0xe8/0x140 [ 58.955043][ T5514] dump_stack+0x15/0x1b [ 58.955056][ T5514] should_fail_ex+0x265/0x280 [ 58.955073][ T5514] should_fail+0xb/0x20 [ 58.955086][ T5514] should_fail_usercopy+0x1a/0x20 [ 58.955126][ T5514] _copy_to_user+0x20/0xa0 [ 58.955147][ T5514] simple_read_from_buffer+0xb5/0x130 [ 58.955203][ T5514] proc_fail_nth_read+0x10e/0x150 [ 58.955224][ T5514] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.955308][ T5514] vfs_read+0x1a5/0x770 [ 58.955369][ T5514] ? __rcu_read_unlock+0x4f/0x70 [ 58.955386][ T5514] ? __fget_files+0x184/0x1c0 [ 58.955406][ T5514] ksys_read+0xda/0x1a0 [ 58.955467][ T5514] __x64_sys_read+0x40/0x50 [ 58.955558][ T5514] x64_sys_call+0x27bc/0x2ff0 [ 58.955574][ T5514] do_syscall_64+0xd2/0x200 [ 58.955634][ T5514] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.955652][ T5514] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 58.955709][ T5514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.955730][ T5514] RIP: 0033:0x7f1b3246d5fc [ 58.955750][ T5514] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 58.955763][ T5514] RSP: 002b:00007f1b30ed7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.955782][ T5514] RAX: ffffffffffffffda RBX: 00007f1b32695fa0 RCX: 00007f1b3246d5fc [ 58.955793][ T5514] RDX: 000000000000000f RSI: 00007f1b30ed70a0 RDI: 0000000000000007 [ 58.955805][ T5514] RBP: 00007f1b30ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.955814][ T5514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.955824][ T5514] R13: 00007f1b32696038 R14: 00007f1b32695fa0 R15: 00007ffe0bbf5818 [ 58.955845][ T5514] [ 59.172762][ T5522] program syz.3.777 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.230827][ T29] kauditd_printk_skb: 1168 callbacks suppressed [ 59.230844][ T29] audit: type=1326 audit(1755432593.471:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9997d9ebe9 code=0x7ffc0000 [ 59.260723][ T29] audit: type=1326 audit(1755432593.471:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9997d9ebe9 code=0x7ffc0000 [ 59.284111][ T29] audit: type=1326 audit(1755432593.471:4652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9997d9ec23 code=0x7ffc0000 [ 59.307326][ T29] audit: type=1326 audit(1755432593.481:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9997d9d69f code=0x7ffc0000 [ 59.330870][ T29] audit: type=1326 audit(1755432593.481:4654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9997d9ec77 code=0x7ffc0000 [ 59.354149][ T29] audit: type=1326 audit(1755432593.481:4655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9997d9d550 code=0x7ffc0000 [ 59.377544][ T29] audit: type=1326 audit(1755432593.481:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9997d9d84a code=0x7ffc0000 [ 59.400919][ T29] audit: type=1326 audit(1755432593.481:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9997d9ebe9 code=0x7ffc0000 [ 59.424352][ T29] audit: type=1326 audit(1755432593.481:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9997d9ebe9 code=0x7ffc0000 [ 59.447650][ T29] audit: type=1326 audit(1755432593.481:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5520 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9997d9ebe9 code=0x7ffc0000 [ 59.735299][ T5579] FAULT_INJECTION: forcing a failure. [ 59.735299][ T5579] name failslab, interval 1, probability 0, space 0, times 0 [ 59.748218][ T5579] CPU: 0 UID: 0 PID: 5579 Comm: syz.1.797 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 59.748246][ T5579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 59.748257][ T5579] Call Trace: [ 59.748263][ T5579] [ 59.748270][ T5579] __dump_stack+0x1d/0x30 [ 59.748323][ T5579] dump_stack_lvl+0xe8/0x140 [ 59.748342][ T5579] dump_stack+0x15/0x1b [ 59.748358][ T5579] should_fail_ex+0x265/0x280 [ 59.748393][ T5579] should_failslab+0x8c/0xb0 [ 59.748476][ T5579] kmem_cache_alloc_noprof+0x50/0x310 [ 59.748501][ T5579] ? create_new_namespaces+0x3c/0x3d0 [ 59.748531][ T5579] create_new_namespaces+0x3c/0x3d0 [ 59.748635][ T5579] unshare_nsproxy_namespaces+0xe8/0x120 [ 59.748664][ T5579] ksys_unshare+0x3d0/0x6d0 [ 59.748691][ T5579] ? ksys_write+0x192/0x1a0 [ 59.748714][ T5579] __x64_sys_unshare+0x1f/0x30 [ 59.748748][ T5579] x64_sys_call+0x2911/0x2ff0 [ 59.748808][ T5579] do_syscall_64+0xd2/0x200 [ 59.748832][ T5579] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.748855][ T5579] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.748878][ T5579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.748903][ T5579] RIP: 0033:0x7f9997d9ebe9 [ 59.748918][ T5579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.748934][ T5579] RSP: 002b:00007f9996807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 59.748953][ T5579] RAX: ffffffffffffffda RBX: 00007f9997fc5fa0 RCX: 00007f9997d9ebe9 [ 59.748966][ T5579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000200 [ 59.748978][ T5579] RBP: 00007f9996807090 R08: 0000000000000000 R09: 0000000000000000 [ 59.749057][ T5579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.749117][ T5579] R13: 00007f9997fc6038 R14: 00007f9997fc5fa0 R15: 00007ffcd4f5a1c8 [ 59.749136][ T5579] [ 60.035394][ T5595] lo speed is unknown, defaulting to 1000 [ 61.432366][ T5715] FAULT_INJECTION: forcing a failure. [ 61.432366][ T5715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.445718][ T5715] CPU: 0 UID: 0 PID: 5715 Comm: syz.0.852 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 61.445847][ T5715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.445853][ T5715] Call Trace: [ 61.445856][ T5715] [ 61.445860][ T5715] __dump_stack+0x1d/0x30 [ 61.445924][ T5715] dump_stack_lvl+0xe8/0x140 [ 61.445937][ T5715] dump_stack+0x15/0x1b [ 61.445945][ T5715] should_fail_ex+0x265/0x280 [ 61.445957][ T5715] should_fail+0xb/0x20 [ 61.445966][ T5715] should_fail_usercopy+0x1a/0x20 [ 61.446012][ T5715] _copy_to_user+0x20/0xa0 [ 61.446027][ T5715] simple_read_from_buffer+0xb5/0x130 [ 61.446085][ T5715] proc_fail_nth_read+0x10e/0x150 [ 61.446100][ T5715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.446190][ T5715] vfs_read+0x1a5/0x770 [ 61.446201][ T5715] ? __rcu_read_unlock+0x4f/0x70 [ 61.446213][ T5715] ? __fget_files+0x184/0x1c0 [ 61.446269][ T5715] ksys_read+0xda/0x1a0 [ 61.446282][ T5715] __x64_sys_read+0x40/0x50 [ 61.446301][ T5715] x64_sys_call+0x27bc/0x2ff0 [ 61.446326][ T5715] do_syscall_64+0xd2/0x200 [ 61.446414][ T5715] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.446427][ T5715] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.446440][ T5715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.446505][ T5715] RIP: 0033:0x7ffb28f5d5fc [ 61.446514][ T5715] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 61.446524][ T5715] RSP: 002b:00007ffb279a6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.446535][ T5715] RAX: ffffffffffffffda RBX: 00007ffb29186090 RCX: 00007ffb28f5d5fc [ 61.446542][ T5715] RDX: 000000000000000f RSI: 00007ffb279a60a0 RDI: 0000000000000005 [ 61.446549][ T5715] RBP: 00007ffb279a6090 R08: 0000000000000000 R09: 0000000000000000 [ 61.446555][ T5715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.446582][ T5715] R13: 00007ffb29186128 R14: 00007ffb29186090 R15: 00007ffd97c1be28 [ 61.446626][ T5715] [ 61.753418][ T5737] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 61.764750][ T5737] syz.4.859 uses obsolete (PF_INET,SOCK_PACKET) [ 62.834031][ T5798] __nla_validate_parse: 6 callbacks suppressed [ 62.834046][ T5798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.883'. [ 62.959949][ T5813] lo speed is unknown, defaulting to 1000 [ 63.070699][ T5827] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 63.220360][ T5837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.899'. [ 63.788167][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'. [ 63.945994][ T5898] FAULT_INJECTION: forcing a failure. [ 63.945994][ T5898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.959144][ T5898] CPU: 1 UID: 0 PID: 5898 Comm: syz.2.919 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 63.959173][ T5898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 63.959185][ T5898] Call Trace: [ 63.959192][ T5898] [ 63.959198][ T5898] __dump_stack+0x1d/0x30 [ 63.959221][ T5898] dump_stack_lvl+0xe8/0x140 [ 63.959365][ T5898] dump_stack+0x15/0x1b [ 63.959435][ T5898] should_fail_ex+0x265/0x280 [ 63.959464][ T5898] should_fail+0xb/0x20 [ 63.959478][ T5898] should_fail_usercopy+0x1a/0x20 [ 63.959575][ T5898] strncpy_from_user+0x25/0x230 [ 63.959601][ T5898] ? kmem_cache_alloc_noprof+0x186/0x310 [ 63.959691][ T5898] ? getname_flags+0x80/0x3b0 [ 63.959714][ T5898] getname_flags+0xae/0x3b0 [ 63.959740][ T5898] user_path_at+0x28/0x130 [ 63.959792][ T5898] __x64_sys_umount+0x85/0xe0 [ 63.959824][ T5898] x64_sys_call+0xdd2/0x2ff0 [ 63.959841][ T5898] do_syscall_64+0xd2/0x200 [ 63.959863][ T5898] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.959881][ T5898] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 63.959957][ T5898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.959975][ T5898] RIP: 0033:0x7f1b3246ebe9 [ 63.959987][ T5898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.960002][ T5898] RSP: 002b:00007f1b30e95038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 63.960021][ T5898] RAX: ffffffffffffffda RBX: 00007f1b32696180 RCX: 00007f1b3246ebe9 [ 63.960061][ T5898] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000040 [ 63.960074][ T5898] RBP: 00007f1b30e95090 R08: 0000000000000000 R09: 0000000000000000 [ 63.960118][ T5898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.960128][ T5898] R13: 00007f1b32696218 R14: 00007f1b32696180 R15: 00007ffe0bbf5818 [ 63.960146][ T5898] [ 64.278419][ T29] kauditd_printk_skb: 1243 callbacks suppressed [ 64.278432][ T29] audit: type=1326 audit(1755432598.551:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 64.308304][ T29] audit: type=1326 audit(1755432598.551:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 64.332003][ T29] audit: type=1326 audit(1755432598.551:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 64.419395][ T29] audit: type=1326 audit(1755432598.551:5906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 64.442777][ T29] audit: type=1326 audit(1755432598.551:5907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 64.466478][ T29] audit: type=1326 audit(1755432598.551:5908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 64.490039][ T29] audit: type=1326 audit(1755432598.551:5909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 64.513642][ T29] audit: type=1326 audit(1755432598.551:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 64.537053][ T29] audit: type=1326 audit(1755432598.551:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 64.560550][ T29] audit: type=1326 audit(1755432598.551:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 64.630603][ T5913] lo speed is unknown, defaulting to 1000 [ 64.710190][ T5923] serio: Serial port ptm0 [ 64.776429][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.931'. [ 64.790112][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.930'. [ 64.956227][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.937'. [ 65.048697][ T5952] lo speed is unknown, defaulting to 1000 [ 65.089924][ T5960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.942'. [ 65.219254][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.944'. [ 65.760822][ T6008] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 66.661007][ T6053] netlink: 'syz.4.978': attribute type 3 has an invalid length. [ 66.843471][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 67.388568][ T6098] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 67.589132][ T6106] lo speed is unknown, defaulting to 1000 [ 68.130725][ T6119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.140728][ T6119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.472902][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1010'. [ 68.743222][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 69.111080][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1022'. [ 69.183747][ T6169] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 69.422482][ T29] kauditd_printk_skb: 1036 callbacks suppressed [ 69.422496][ T29] audit: type=1326 audit(1755432603.701:6949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 69.452524][ T29] audit: type=1326 audit(1755432603.701:6950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 69.581431][ T29] audit: type=1326 audit(1755432603.711:6951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 69.604966][ T29] audit: type=1326 audit(1755432603.711:6952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 69.628454][ T29] audit: type=1326 audit(1755432603.711:6953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 69.652168][ T29] audit: type=1326 audit(1755432603.751:6954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 69.675818][ T29] audit: type=1326 audit(1755432603.761:6955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 69.703012][ T29] audit: type=1326 audit(1755432603.791:6956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 69.773265][ T6187] vlan2: entered allmulticast mode [ 69.806859][ T29] audit: type=1326 audit(1755432603.881:6957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 69.830788][ T29] audit: type=1326 audit(1755432603.881:6958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 70.039417][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1039'. [ 70.129735][ T6210] lo speed is unknown, defaulting to 1000 [ 70.580662][ T6224] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 70.588157][ T6222] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 70.882091][ T6240] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 71.246225][ T6112] syz.3.1002 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 71.259588][ T6112] CPU: 0 UID: 0 PID: 6112 Comm: syz.3.1002 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 71.259615][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.259627][ T6112] Call Trace: [ 71.259657][ T6112] [ 71.259664][ T6112] __dump_stack+0x1d/0x30 [ 71.259683][ T6112] dump_stack_lvl+0xe8/0x140 [ 71.259700][ T6112] dump_stack+0x15/0x1b [ 71.259716][ T6112] dump_header+0x81/0x220 [ 71.259745][ T6112] oom_kill_process+0x342/0x400 [ 71.259846][ T6112] out_of_memory+0x979/0xb80 [ 71.259884][ T6112] try_charge_memcg+0x5e6/0x9e0 [ 71.259928][ T6112] obj_cgroup_charge_pages+0xa6/0x150 [ 71.259957][ T6112] obj_cgroup_charge_account+0x73/0x1a0 [ 71.259988][ T6112] __memcg_slab_post_alloc_hook+0x398/0x580 [ 71.260069][ T6112] kmem_cache_alloc_noprof+0x220/0x310 [ 71.260093][ T6112] ? alloc_buffer_head+0x35/0x1f0 [ 71.260115][ T6112] alloc_buffer_head+0x35/0x1f0 [ 71.260137][ T6112] folio_alloc_buffers+0x14a/0x310 [ 71.260224][ T6112] create_empty_buffers+0x2c/0x200 [ 71.260246][ T6112] __block_write_begin_int+0x1d4/0xf90 [ 71.260329][ T6112] ? jbd2_journal_stop+0x560/0x680 [ 71.260409][ T6112] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 71.260433][ T6112] ? __list_add_valid_or_report+0x38/0xe0 [ 71.260482][ T6112] ? inode_io_list_move_locked+0x1d0/0x2d0 [ 71.260510][ T6112] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 71.260537][ T6112] block_page_mkwrite+0x1a8/0x3d0 [ 71.260617][ T6112] ext4_page_mkwrite+0x859/0xb90 [ 71.260642][ T6112] ? folio_unlock+0xd9/0x120 [ 71.260670][ T6112] handle_mm_fault+0x15cb/0x2c20 [ 71.260688][ T6112] ? __rcu_read_unlock+0x4f/0x70 [ 71.260712][ T6112] do_user_addr_fault+0x3fe/0x1090 [ 71.260799][ T6112] exc_page_fault+0x62/0xa0 [ 71.260821][ T6112] asm_exc_page_fault+0x26/0x30 [ 71.260841][ T6112] RIP: 0033:0x7f2318efed6a [ 71.260863][ T6112] Code: 01 4c 89 44 24 10 4c 89 54 24 08 e8 30 7d fe ff 48 8b 43 38 4c 8b 44 24 10 83 43 28 08 4c 8b 54 24 08 48 8d 48 f8 48 89 4b 38 <48> 89 68 f8 45 3b 78 04 0f 82 5e fe ff ff e9 ed fe ff ff 0f 1f 00 [ 71.260877][ T6112] RSP: 002b:00007ffe129552f0 EFLAGS: 00010206 [ 71.260992][ T6112] RAX: 0000001b33512f50 RBX: 00007f2319d75720 RCX: 0000001b33512f48 [ 71.261067][ T6112] RDX: 0000001b32f24220 RSI: 0000000000000008 RDI: 00007f2319d75720 [ 71.261080][ T6112] RBP: ffffffff844a5e41 R08: 00007f2319246038 R09: 00007f2319232000 [ 71.261092][ T6112] R10: 00007f2318a8f008 R11: 000000000000000b R12: 000000000000000b [ 71.261104][ T6112] R13: 0000000000000006 R14: ffffffff844a5cde R15: 0000000000000006 [ 71.261117][ T6112] ? __x64_sys_sendmsg+0xbe/0x160 [ 71.261137][ T6112] ? __ia32_sys_sendmsg+0xb1/0x160 [ 71.261160][ T6112] [ 71.261226][ T6112] memory: usage 307200kB, limit 307200kB, failcnt 6545 [ 71.528893][ T6112] memory+swap: usage 307564kB, limit 9007199254740988kB, failcnt 0 [ 71.536884][ T6112] kmem: usage 295716kB, limit 9007199254740988kB, failcnt 0 [ 71.544198][ T6112] Memory cgroup stats for /syz3: [ 71.665090][ T6112] cache 4096 [ 71.673446][ T6112] rss 11755520 [ 71.676908][ T6112] shmem 0 [ 71.679844][ T6112] mapped_file 0 [ 71.683470][ T6112] dirty 0 [ 71.686443][ T6112] writeback 0 [ 71.689777][ T6112] workingset_refault_anon 36 [ 71.694388][ T6112] workingset_refault_file 67 [ 71.698958][ T6112] swap 372736 [ 71.702284][ T6112] swapcached 0 [ 71.705936][ T6112] pgpgin 113610 [ 71.709843][ T6112] pgpgout 110739 [ 71.713439][ T6112] pgfault 87637 [ 71.716890][ T6112] pgmajfault 26 [ 71.720339][ T6112] inactive_anon 0 [ 71.724117][ T6112] active_anon 0 [ 71.727646][ T6112] inactive_file 11759616 [ 71.731963][ T6112] active_file 0 [ 71.735410][ T6112] unevictable 0 [ 71.738858][ T6112] hierarchical_memory_limit 314572800 [ 71.744250][ T6112] hierarchical_memsw_limit 9223372036854771712 [ 71.750393][ T6112] total_cache 4096 [ 71.754139][ T6112] total_rss 11755520 [ 71.758021][ T6112] total_shmem 0 [ 71.761467][ T6112] total_mapped_file 0 [ 71.765479][ T6112] total_dirty 0 [ 71.768933][ T6112] total_writeback 0 [ 71.772869][ T6112] total_workingset_refault_anon 36 [ 71.778009][ T6112] total_workingset_refault_file 67 [ 71.783156][ T6112] total_swap 372736 [ 71.787001][ T6112] total_swapcached 0 [ 71.790890][ T6112] total_pgpgin 113610 [ 71.794963][ T6112] total_pgpgout 110739 [ 71.799059][ T6112] total_pgfault 87637 [ 71.803311][ T6112] total_pgmajfault 26 [ 71.807589][ T6112] total_inactive_anon 0 [ 71.811853][ T6112] total_active_anon 0 [ 71.815831][ T6112] total_inactive_file 11759616 [ 71.820583][ T6112] total_active_file 0 [ 71.824604][ T6112] total_unevictable 0 [ 71.828805][ T6112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1002,pid=6112,uid=0 [ 71.843742][ T6112] Memory cgroup out of memory: Killed process 6112 (syz.3.1002) total-vm:95944kB, anon-rss:12416kB, file-rss:22320kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 72.002024][ T6268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1064'. [ 72.011147][ T6268] netem: change failed [ 72.314845][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1072'. [ 72.397117][ T6296] lo speed is unknown, defaulting to 1000 [ 72.449609][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'. [ 72.741679][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1083'. [ 72.767100][ T6322] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 72.965099][ T6114] syz.3.1002 (6114) used greatest stack depth: 9824 bytes left [ 73.090353][ T6113] syz.3.1002 (6113) used greatest stack depth: 7536 bytes left [ 73.143364][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1088'. [ 73.569565][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1102'. [ 73.611701][ T6376] process 'syz.1.1103' launched './file0' with NULL argv: empty string added [ 73.706585][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1109'. [ 73.754621][ T6393] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 73.944880][ T6405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1114'. [ 73.960984][ T6405] netem: change failed [ 74.155061][ T6432] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 74.233709][ T6440] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 74.244074][ T6446] Driver unsupported XDP return value 0 on prog (id 856) dev N/A, expect packet loss! [ 74.318987][ T6459] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1137'. [ 74.560676][ T29] kauditd_printk_skb: 578 callbacks suppressed [ 74.560692][ T29] audit: type=1326 audit(1755432609.824:7537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 74.591161][ T29] audit: type=1326 audit(1755432609.824:7538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 74.614728][ T29] audit: type=1326 audit(1755432609.824:7539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 74.638649][ T29] audit: type=1326 audit(1755432609.824:7540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 74.662503][ T29] audit: type=1326 audit(1755432609.824:7541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 74.686206][ T29] audit: type=1326 audit(1755432609.824:7542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 74.709718][ T29] audit: type=1326 audit(1755432609.824:7543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 74.733284][ T29] audit: type=1326 audit(1755432609.824:7544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 74.845197][ T29] audit: type=1326 audit(1755432610.104:7545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.1.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9997d9ebe9 code=0x7ffc0000 [ 74.868799][ T29] audit: type=1326 audit(1755432610.104:7546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.1.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9997d9ebe9 code=0x7ffc0000 [ 74.896319][ T6492] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 75.003250][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1150'. [ 75.034802][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'. [ 75.200483][ T6519] netlink: 'syz.3.1157': attribute type 1 has an invalid length. [ 75.208279][ T6519] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1157'. [ 75.263427][ T6519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1157'. [ 75.395114][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1163'. [ 75.453413][ T6551] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1169'. [ 75.525476][ T6560] lo speed is unknown, defaulting to 1000 [ 75.585145][ T6571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.599877][ T6571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.609767][ T6571] bond0 (unregistering): Released all slaves [ 75.628694][ T6567] lo speed is unknown, defaulting to 1000 [ 76.453160][ T6631] netem: change failed [ 76.614817][ T6649] lo speed is unknown, defaulting to 1000 [ 76.899215][ T6663] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 77.014196][ T6683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.023594][ T6683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.032758][ T6683] bond0 (unregistering): Released all slaves [ 77.161999][ T6685] syzkaller1: entered promiscuous mode [ 77.167593][ T6685] syzkaller1: entered allmulticast mode [ 77.192483][ T6691] bridge0: port 3(veth1_to_hsr) entered blocking state [ 77.199764][ T6691] bridge0: port 3(veth1_to_hsr) entered disabled state [ 77.207284][ T6691] veth1_to_hsr: entered allmulticast mode [ 77.213704][ T6691] veth1_to_hsr: entered promiscuous mode [ 77.222257][ T6691] veth1_to_hsr (unregistering): left allmulticast mode [ 77.229140][ T6691] veth1_to_hsr (unregistering): left promiscuous mode [ 77.236356][ T6691] bridge0: port 3(veth1_to_hsr) entered disabled state [ 77.246168][ T6691] hsr_slave_1 (unregistering): left promiscuous mode [ 77.273669][ T6694] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 77.413567][ T6703] FAULT_INJECTION: forcing a failure. [ 77.413567][ T6703] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 77.427074][ T6703] CPU: 0 UID: 0 PID: 6703 Comm: syz.3.1230 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 77.427098][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.427108][ T6703] Call Trace: [ 77.427113][ T6703] [ 77.427118][ T6703] __dump_stack+0x1d/0x30 [ 77.427139][ T6703] dump_stack_lvl+0xe8/0x140 [ 77.427207][ T6703] dump_stack+0x15/0x1b [ 77.427220][ T6703] should_fail_ex+0x265/0x280 [ 77.427237][ T6703] should_fail_alloc_page+0xf2/0x100 [ 77.427263][ T6703] __alloc_frozen_pages_noprof+0xff/0x360 [ 77.427297][ T6703] alloc_pages_mpol+0xb3/0x250 [ 77.427367][ T6703] folio_alloc_mpol_noprof+0x39/0x80 [ 77.427391][ T6703] shmem_get_folio_gfp+0x3cf/0xd60 [ 77.427427][ T6703] ? simple_xattr_get+0xb9/0x120 [ 77.427516][ T6703] shmem_write_begin+0xa8/0x190 [ 77.427537][ T6703] generic_perform_write+0x181/0x490 [ 77.427558][ T6703] shmem_file_write_iter+0xc5/0xf0 [ 77.427602][ T6703] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 77.427620][ T6703] vfs_write+0x527/0x960 [ 77.427644][ T6703] ksys_write+0xda/0x1a0 [ 77.427721][ T6703] __x64_sys_write+0x40/0x50 [ 77.427742][ T6703] x64_sys_call+0x27fe/0x2ff0 [ 77.427763][ T6703] do_syscall_64+0xd2/0x200 [ 77.427807][ T6703] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 77.427833][ T6703] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 77.427853][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.427869][ T6703] RIP: 0033:0x7f231901ebe9 [ 77.427883][ T6703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.427931][ T6703] RSP: 002b:00007f2317a87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.427948][ T6703] RAX: ffffffffffffffda RBX: 00007f2319245fa0 RCX: 00007f231901ebe9 [ 77.427959][ T6703] RDX: 000000000208e24b RSI: 0000200000000240 RDI: 0000000000000003 [ 77.427972][ T6703] RBP: 00007f2317a87090 R08: 0000000000000000 R09: 0000000000000000 [ 77.427999][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.428023][ T6703] R13: 00007f2319246038 R14: 00007f2319245fa0 R15: 00007ffe12955268 [ 77.428042][ T6703] [ 77.850356][ T6716] lo speed is unknown, defaulting to 1000 [ 77.886074][ T6716] lo speed is unknown, defaulting to 1000 [ 78.127708][ T6724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.180915][ T6724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.051829][ T6779] netlink: 'syz.2.1261': attribute type 1 has an invalid length. [ 79.059600][ T6779] __nla_validate_parse: 6 callbacks suppressed [ 79.059613][ T6779] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1261'. [ 79.079250][ T6779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1261'. [ 79.250095][ T6802] netlink: 'syz.2.1270': attribute type 3 has an invalid length. [ 79.305220][ T1036] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 79.312779][ T1036] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 79.320203][ T1036] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 79.328601][ T1036] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 79.358889][ T6806] bridge0: port 3(veth1_to_hsr) entered blocking state [ 79.365939][ T6806] bridge0: port 3(veth1_to_hsr) entered disabled state [ 79.373042][ T6806] veth1_to_hsr: entered allmulticast mode [ 79.379644][ T6806] veth1_to_hsr: entered promiscuous mode [ 79.387023][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1272'. [ 79.397776][ T6806] veth1_to_hsr (unregistering): left allmulticast mode [ 79.404931][ T6806] veth1_to_hsr (unregistering): left promiscuous mode [ 79.411828][ T6806] bridge0: port 3(veth1_to_hsr) entered disabled state [ 79.422035][ T6806] hsr_slave_1 (unregistering): left promiscuous mode [ 79.442112][ T6810] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 79.493701][ T6814] lo speed is unknown, defaulting to 1000 [ 79.510066][ T6816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.532159][ T6816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.588367][ T29] kauditd_printk_skb: 612 callbacks suppressed [ 79.588519][ T29] audit: type=1401 audit(1755432614.854:8159): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 79.712410][ T29] audit: type=1326 audit(1755432614.974:8160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f9997d9ebe9 code=0x7ffc0000 [ 79.736221][ T29] audit: type=1326 audit(1755432614.974:8161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9997d9ebe9 code=0x7ffc0000 [ 79.759948][ T29] audit: type=1326 audit(1755432614.974:8162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9997d9ebe9 code=0x7ffc0000 [ 79.787003][ T29] audit: type=1400 audit(1755432615.034:8163): avc: denied { setopt } for pid=6828 comm="syz.2.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.806727][ T29] audit: type=1401 audit(1755432615.034:8164): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 79.860731][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1283'. [ 79.869030][ T6839] netlink: 'syz.3.1284': attribute type 1 has an invalid length. [ 79.877668][ T6839] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1284'. [ 79.901609][ T6839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1284'. [ 79.911830][ T29] audit: type=1326 audit(1755432615.174:8165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.3.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231901ebe9 code=0x7ffc0000 [ 79.970267][ T29] audit: type=1326 audit(1755432615.184:8166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.3.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f231901ebe9 code=0x7ffc0000 [ 79.993845][ T29] audit: type=1326 audit(1755432615.184:8167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.3.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231901ebe9 code=0x7ffc0000 [ 80.017657][ T29] audit: type=1326 audit(1755432615.184:8168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.3.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f231901ebe9 code=0x7ffc0000 [ 80.145753][ T6858] block device autoloading is deprecated and will be removed. [ 80.207963][ T6862] bridge0: port 3(veth1_to_hsr) entered blocking state [ 80.215003][ T6862] bridge0: port 3(veth1_to_hsr) entered disabled state [ 80.222171][ T6862] veth1_to_hsr: entered allmulticast mode [ 80.228502][ T6862] veth1_to_hsr: entered promiscuous mode [ 80.235222][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'. [ 80.245397][ T6862] veth1_to_hsr (unregistering): left allmulticast mode [ 80.252411][ T6862] veth1_to_hsr (unregistering): left promiscuous mode [ 80.259198][ T6862] bridge0: port 3(veth1_to_hsr) entered disabled state [ 80.268248][ T6862] hsr_slave_1 (unregistering): left promiscuous mode [ 80.286842][ T6863] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 80.495037][ T6865] lo speed is unknown, defaulting to 1000 [ 80.565695][ T6870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1296'. [ 80.575880][ T6870] netem: change failed [ 80.832306][ T6894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1304'. [ 80.964296][ T6913] lo speed is unknown, defaulting to 1000 [ 81.177015][ T6927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1319'. [ 81.348191][ T6945] netem: change failed [ 81.356593][ T6949] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 81.472771][ T6963] lo speed is unknown, defaulting to 1000 [ 81.777331][ T6986] netem: change failed [ 81.837538][ T6995] netlink: 'syz.0.1343': attribute type 3 has an invalid length. [ 81.932450][ T2977] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 81.939898][ T2977] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 81.947554][ T2977] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 81.955546][ T2977] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 82.266784][ T7027] netlink: 'syz.4.1356': attribute type 1 has an invalid length. [ 82.426935][ T7044] bridge0: port 3(veth1_to_hsr) entered blocking state [ 82.433960][ T7044] bridge0: port 3(veth1_to_hsr) entered disabled state [ 82.441658][ T7044] veth1_to_hsr: entered allmulticast mode [ 82.448148][ T7044] veth1_to_hsr: entered promiscuous mode [ 82.461373][ T7041] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 82.488632][ T7044] veth1_to_hsr (unregistering): left allmulticast mode [ 82.496143][ T7044] veth1_to_hsr (unregistering): left promiscuous mode [ 82.503064][ T7044] bridge0: port 3(veth1_to_hsr) entered disabled state [ 82.513635][ T7044] hsr_slave_1 (unregistering): left promiscuous mode [ 82.543144][ T7052] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 82.777066][ T7061] netlink: 'syz.1.1369': attribute type 1 has an invalid length. [ 83.050903][ T7075] netem: change failed [ 83.208828][ T7096] random: crng reseeded on system resumption [ 83.301326][ T7103] netem: change failed [ 83.477613][ T7132] FAULT_INJECTION: forcing a failure. [ 83.477613][ T7132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.490736][ T7132] CPU: 0 UID: 0 PID: 7132 Comm: syz.0.1395 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 83.490845][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.490857][ T7132] Call Trace: [ 83.490863][ T7132] [ 83.490871][ T7132] __dump_stack+0x1d/0x30 [ 83.490892][ T7132] dump_stack_lvl+0xe8/0x140 [ 83.490989][ T7132] dump_stack+0x15/0x1b [ 83.491066][ T7132] should_fail_ex+0x265/0x280 [ 83.491087][ T7132] should_fail+0xb/0x20 [ 83.491104][ T7132] should_fail_usercopy+0x1a/0x20 [ 83.491126][ T7132] _copy_to_user+0x20/0xa0 [ 83.491157][ T7132] simple_read_from_buffer+0xb5/0x130 [ 83.491205][ T7132] proc_fail_nth_read+0x10e/0x150 [ 83.491231][ T7132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.491253][ T7132] vfs_read+0x1a5/0x770 [ 83.491269][ T7132] ? __rcu_read_unlock+0x4f/0x70 [ 83.491359][ T7132] ? __fget_files+0x184/0x1c0 [ 83.491381][ T7132] ksys_read+0xda/0x1a0 [ 83.491404][ T7132] __x64_sys_read+0x40/0x50 [ 83.491479][ T7132] x64_sys_call+0x27bc/0x2ff0 [ 83.491500][ T7132] do_syscall_64+0xd2/0x200 [ 83.491528][ T7132] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.491549][ T7132] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 83.491573][ T7132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.491610][ T7132] RIP: 0033:0x7ffb28f5d5fc [ 83.491626][ T7132] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 83.491723][ T7132] RSP: 002b:00007ffb279c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.491743][ T7132] RAX: ffffffffffffffda RBX: 00007ffb29185fa0 RCX: 00007ffb28f5d5fc [ 83.491756][ T7132] RDX: 000000000000000f RSI: 00007ffb279c70a0 RDI: 0000000000000007 [ 83.491815][ T7132] RBP: 00007ffb279c7090 R08: 0000000000000000 R09: 0000000000000000 [ 83.491826][ T7132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.491836][ T7132] R13: 00007ffb29186038 R14: 00007ffb29185fa0 R15: 00007ffd97c1be28 [ 83.491853][ T7132] [ 83.922632][ T7149] block device autoloading is deprecated and will be removed. [ 84.035615][ T7157] FAULT_INJECTION: forcing a failure. [ 84.035615][ T7157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.048874][ T7157] CPU: 0 UID: 0 PID: 7157 Comm: syz.3.1407 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 84.048984][ T7157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.048996][ T7157] Call Trace: [ 84.049002][ T7157] [ 84.049010][ T7157] __dump_stack+0x1d/0x30 [ 84.049028][ T7157] dump_stack_lvl+0xe8/0x140 [ 84.049044][ T7157] dump_stack+0x15/0x1b [ 84.049097][ T7157] should_fail_ex+0x265/0x280 [ 84.049118][ T7157] should_fail+0xb/0x20 [ 84.049132][ T7157] should_fail_usercopy+0x1a/0x20 [ 84.049212][ T7157] strncpy_from_user+0x25/0x230 [ 84.049239][ T7157] ? kmem_cache_alloc_noprof+0x186/0x310 [ 84.049261][ T7157] ? getname_flags+0x80/0x3b0 [ 84.049356][ T7157] getname_flags+0xae/0x3b0 [ 84.049380][ T7157] do_sys_openat2+0x60/0x110 [ 84.049436][ T7157] __x64_sys_creat+0x65/0x90 [ 84.049464][ T7157] x64_sys_call+0x2d94/0x2ff0 [ 84.049602][ T7157] do_syscall_64+0xd2/0x200 [ 84.049656][ T7157] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 84.049675][ T7157] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 84.049734][ T7157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.049828][ T7157] RIP: 0033:0x7f231901ebe9 [ 84.049841][ T7157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.049857][ T7157] RSP: 002b:00007f2317a87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 84.049878][ T7157] RAX: ffffffffffffffda RBX: 00007f2319245fa0 RCX: 00007f231901ebe9 [ 84.050003][ T7157] RDX: 0000000000000000 RSI: c9028ba210c11ff0 RDI: 00002000000000c0 [ 84.050017][ T7157] RBP: 00007f2317a87090 R08: 0000000000000000 R09: 0000000000000000 [ 84.050029][ T7157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.050038][ T7157] R13: 00007f2319246038 R14: 00007f2319245fa0 R15: 00007ffe12955268 [ 84.050098][ T7157] [ 84.358182][ T7169] lo speed is unknown, defaulting to 1000 [ 84.618914][ T29] kauditd_printk_skb: 515 callbacks suppressed [ 84.618928][ T29] audit: type=1326 audit(1755432619.884:8684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 84.651644][ T29] audit: type=1326 audit(1755432619.894:8685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 84.676503][ T29] audit: type=1326 audit(1755432619.924:8686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 84.678010][ T7192] SELinux: Context system_u:object_r:modules_object_t:s0 is not valid (left unmapped). [ 84.700178][ T29] audit: type=1326 audit(1755432619.924:8687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 84.733282][ T29] audit: type=1326 audit(1755432619.944:8688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 84.769326][ T29] audit: type=1400 audit(1755432619.944:8689): avc: denied { relabelfrom } for pid=7191 comm="syz.2.1415" name="UDPv6" dev="sockfs" ino=19782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 84.792445][ T29] audit: type=1400 audit(1755432619.984:8690): avc: denied { relabelto } for pid=7191 comm="syz.2.1415" name="UDPv6" dev="sockfs" ino=19782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:modules_object_t:s0" [ 84.829501][ T7199] __nla_validate_parse: 15 callbacks suppressed [ 84.829516][ T7199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1423'. [ 84.867348][ T7205] FAULT_INJECTION: forcing a failure. [ 84.867348][ T7205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.880610][ T7205] CPU: 0 UID: 0 PID: 7205 Comm: syz.4.1425 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 84.880687][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.880756][ T7205] Call Trace: [ 84.880762][ T7205] [ 84.880769][ T7205] __dump_stack+0x1d/0x30 [ 84.880869][ T7205] dump_stack_lvl+0xe8/0x140 [ 84.880889][ T7205] dump_stack+0x15/0x1b [ 84.880905][ T7205] should_fail_ex+0x265/0x280 [ 84.880979][ T7205] should_fail+0xb/0x20 [ 84.880993][ T7205] should_fail_usercopy+0x1a/0x20 [ 84.881012][ T7205] _copy_to_user+0x20/0xa0 [ 84.881034][ T7205] simple_read_from_buffer+0xb5/0x130 [ 84.881053][ T7205] proc_fail_nth_read+0x10e/0x150 [ 84.881104][ T7205] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.881126][ T7205] vfs_read+0x1a5/0x770 [ 84.881143][ T7205] ? __rcu_read_unlock+0x4f/0x70 [ 84.881235][ T7205] ? __fget_files+0x184/0x1c0 [ 84.881320][ T7205] ksys_read+0xda/0x1a0 [ 84.881409][ T7205] __x64_sys_read+0x40/0x50 [ 84.881430][ T7205] x64_sys_call+0x27bc/0x2ff0 [ 84.881451][ T7205] do_syscall_64+0xd2/0x200 [ 84.881484][ T7205] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 84.881553][ T7205] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 84.881627][ T7205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.881644][ T7205] RIP: 0033:0x7ff187a8d5fc [ 84.881658][ T7205] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 84.881674][ T7205] RSP: 002b:00007ff1864ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.881754][ T7205] RAX: ffffffffffffffda RBX: 00007ff187cb5fa0 RCX: 00007ff187a8d5fc [ 84.881766][ T7205] RDX: 000000000000000f RSI: 00007ff1864ef0a0 RDI: 0000000000000008 [ 84.881777][ T7205] RBP: 00007ff1864ef090 R08: 0000000000000000 R09: 0000000000000000 [ 84.881787][ T7205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.881798][ T7205] R13: 00007ff187cb6038 R14: 00007ff187cb5fa0 R15: 00007ffc0d359148 [ 84.881873][ T7205] [ 85.102058][ T7209] random: crng reseeded on system resumption [ 85.142806][ T7213] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7213 comm=syz.4.1428 [ 85.157283][ T7213] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7213 comm=syz.4.1428 [ 85.170370][ T7213] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7213 comm=syz.4.1428 [ 85.257950][ T7222] block device autoloading is deprecated and will be removed. [ 85.300951][ T29] audit: type=1326 audit(1755432620.564:8691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3246ebe9 code=0x7ffc0000 [ 85.324656][ T29] audit: type=1326 audit(1755432620.564:8692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3246ebe9 code=0x7ffc0000 [ 85.471607][ T29] audit: type=1326 audit(1755432620.614:8693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b3246ebe9 code=0x7ffc0000 [ 85.870947][ T7249] netlink: 'syz.3.1443': attribute type 3 has an invalid length. [ 86.260405][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'. [ 86.351194][ T7291] FAULT_INJECTION: forcing a failure. [ 86.351194][ T7291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.364454][ T7291] CPU: 0 UID: 0 PID: 7291 Comm: syz.0.1458 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 86.364542][ T7291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 86.364551][ T7291] Call Trace: [ 86.364557][ T7291] [ 86.364564][ T7291] __dump_stack+0x1d/0x30 [ 86.364584][ T7291] dump_stack_lvl+0xe8/0x140 [ 86.364603][ T7291] dump_stack+0x15/0x1b [ 86.364618][ T7291] should_fail_ex+0x265/0x280 [ 86.364638][ T7291] should_fail+0xb/0x20 [ 86.364715][ T7291] should_fail_usercopy+0x1a/0x20 [ 86.364733][ T7291] _copy_to_user+0x20/0xa0 [ 86.364759][ T7291] simple_read_from_buffer+0xb5/0x130 [ 86.364780][ T7291] proc_fail_nth_read+0x10e/0x150 [ 86.364937][ T7291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.364960][ T7291] vfs_read+0x1a5/0x770 [ 86.364978][ T7291] ? __rcu_read_unlock+0x4f/0x70 [ 86.364998][ T7291] ? __fget_files+0x184/0x1c0 [ 86.365059][ T7291] ksys_read+0xda/0x1a0 [ 86.365079][ T7291] __x64_sys_read+0x40/0x50 [ 86.365096][ T7291] x64_sys_call+0x27bc/0x2ff0 [ 86.365113][ T7291] do_syscall_64+0xd2/0x200 [ 86.365204][ T7291] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 86.365223][ T7291] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 86.365243][ T7291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.365279][ T7291] RIP: 0033:0x7ffb28f5d5fc [ 86.365308][ T7291] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 86.365322][ T7291] RSP: 002b:00007ffb279c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.365339][ T7291] RAX: ffffffffffffffda RBX: 00007ffb29185fa0 RCX: 00007ffb28f5d5fc [ 86.365350][ T7291] RDX: 000000000000000f RSI: 00007ffb279c70a0 RDI: 0000000000000003 [ 86.365360][ T7291] RBP: 00007ffb279c7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.365371][ T7291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.365383][ T7291] R13: 00007ffb29186038 R14: 00007ffb29185fa0 R15: 00007ffd97c1be28 [ 86.365430][ T7291] [ 86.476453][ T7309] FAULT_INJECTION: forcing a failure. [ 86.476453][ T7309] name failslab, interval 1, probability 0, space 0, times 0 [ 86.631673][ T7309] CPU: 0 UID: 0 PID: 7309 Comm: syz.4.1466 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 86.631699][ T7309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 86.631710][ T7309] Call Trace: [ 86.631716][ T7309] [ 86.631723][ T7309] __dump_stack+0x1d/0x30 [ 86.631759][ T7309] dump_stack_lvl+0xe8/0x140 [ 86.631783][ T7309] dump_stack+0x15/0x1b [ 86.631800][ T7309] should_fail_ex+0x265/0x280 [ 86.631821][ T7309] should_failslab+0x8c/0xb0 [ 86.631919][ T7309] kmem_cache_alloc_noprof+0x50/0x310 [ 86.631952][ T7309] ? getname_flags+0x80/0x3b0 [ 86.631977][ T7309] getname_flags+0x80/0x3b0 [ 86.631998][ T7309] do_sys_openat2+0x60/0x110 [ 86.632042][ T7309] __x64_sys_openat+0xf2/0x120 [ 86.632070][ T7309] x64_sys_call+0x2e9c/0x2ff0 [ 86.632091][ T7309] do_syscall_64+0xd2/0x200 [ 86.632116][ T7309] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 86.632237][ T7309] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 86.632260][ T7309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.632278][ T7309] RIP: 0033:0x7ff187a8ebe9 [ 86.632291][ T7309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.632305][ T7309] RSP: 002b:00007ff1864ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 86.632358][ T7309] RAX: ffffffffffffffda RBX: 00007ff187cb5fa0 RCX: 00007ff187a8ebe9 [ 86.632372][ T7309] RDX: 0000000000004002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 86.632384][ T7309] RBP: 00007ff1864ef090 R08: 0000000000000000 R09: 0000000000000000 [ 86.632397][ T7309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.632409][ T7309] R13: 00007ff187cb6038 R14: 00007ff187cb5fa0 R15: 00007ffc0d359148 [ 86.632426][ T7309] [ 86.879005][ T7316] netlink: 'syz.4.1468': attribute type 3 has an invalid length. [ 86.907138][ T7317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1467'. [ 86.926566][ T7317] netem: change failed [ 87.028349][ T7323] netlink: 'syz.3.1471': attribute type 3 has an invalid length. [ 87.045904][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1470'. [ 87.117997][ T2977] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 87.125440][ T2977] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 87.132871][ T2977] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 87.143650][ T2977] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 87.166479][ T7339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1476'. [ 87.227170][ T7344] netlink: 'syz.1.1478': attribute type 3 has an invalid length. [ 87.270504][ T7357] netlink: 'syz.4.1483': attribute type 3 has an invalid length. [ 87.295176][ T9] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 87.302767][ T9] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 87.310532][ T9] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 87.324627][ T7362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1486'. [ 87.454066][ T9] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 87.549097][ T7384] serio: Serial port ptm0 [ 87.783522][ T7402] lo speed is unknown, defaulting to 1000 [ 87.932003][ T7419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1506'. [ 87.941066][ T7419] netem: change failed [ 88.164201][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1512'. [ 88.176763][ T7437] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 88.417946][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1513'. [ 88.434543][ T7442] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 88.612588][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1517'. [ 88.791083][ T7462] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7462 comm=syz.2.1520 [ 89.178871][ T7484] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 89.254898][ T7495] sch_tbf: burst 3 is lower than device macvtap0 mtu (1514) ! [ 89.438557][ T7516] FAULT_INJECTION: forcing a failure. [ 89.438557][ T7516] name failslab, interval 1, probability 0, space 0, times 0 [ 89.451278][ T7516] CPU: 0 UID: 0 PID: 7516 Comm: syz.0.1539 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 89.451319][ T7516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.451326][ T7516] Call Trace: [ 89.451329][ T7516] [ 89.451333][ T7516] __dump_stack+0x1d/0x30 [ 89.451347][ T7516] dump_stack_lvl+0xe8/0x140 [ 89.451415][ T7516] dump_stack+0x15/0x1b [ 89.451423][ T7516] should_fail_ex+0x265/0x280 [ 89.451435][ T7516] ? __se_sys_memfd_create+0x1cc/0x590 [ 89.451446][ T7516] should_failslab+0x8c/0xb0 [ 89.451459][ T7516] __kmalloc_cache_noprof+0x4c/0x320 [ 89.451565][ T7516] ? fput+0x8f/0xc0 [ 89.451590][ T7516] __se_sys_memfd_create+0x1cc/0x590 [ 89.451602][ T7516] __x64_sys_memfd_create+0x31/0x40 [ 89.451634][ T7516] x64_sys_call+0x2abe/0x2ff0 [ 89.451646][ T7516] do_syscall_64+0xd2/0x200 [ 89.451660][ T7516] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 89.451701][ T7516] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 89.451714][ T7516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.451725][ T7516] RIP: 0033:0x7ffb28f5ebe9 [ 89.451734][ T7516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.451744][ T7516] RSP: 002b:00007ffb279c6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 89.451756][ T7516] RAX: ffffffffffffffda RBX: 000000000000056a RCX: 00007ffb28f5ebe9 [ 89.451763][ T7516] RDX: 00007ffb279c6ef0 RSI: 0000000000000000 RDI: 00007ffb28fe27e8 [ 89.451833][ T7516] RBP: 00002000000015c0 R08: 00007ffb279c6bb7 R09: 00007ffb279c6e40 [ 89.451840][ T7516] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 89.451846][ T7516] R13: 00007ffb279c6ef0 R14: 00007ffb279c6eb0 R15: 0000200000000200 [ 89.451856][ T7516] [ 89.648306][ T29] kauditd_printk_skb: 754 callbacks suppressed [ 89.648322][ T29] audit: type=1326 audit(1755432624.914:9446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7519 comm="syz.0.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 89.678658][ T29] audit: type=1326 audit(1755432624.914:9447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7519 comm="syz.0.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 89.690116][ T7520] lo speed is unknown, defaulting to 1000 [ 89.702472][ T29] audit: type=1326 audit(1755432624.934:9448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7519 comm="syz.0.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 89.731841][ T29] audit: type=1326 audit(1755432624.934:9449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7519 comm="syz.0.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 89.755521][ T29] audit: type=1326 audit(1755432624.934:9450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7519 comm="syz.0.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 89.779254][ T29] audit: type=1326 audit(1755432624.934:9451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7519 comm="syz.0.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 89.803061][ T29] audit: type=1326 audit(1755432624.934:9452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7519 comm="syz.0.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 89.826701][ T29] audit: type=1326 audit(1755432624.934:9453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7519 comm="syz.0.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 89.850201][ T29] audit: type=1326 audit(1755432624.934:9454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7519 comm="syz.0.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 89.873770][ T29] audit: type=1326 audit(1755432624.934:9455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7519 comm="syz.0.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb28f5ebe9 code=0x7ffc0000 [ 90.070570][ T7534] __nla_validate_parse: 1 callbacks suppressed [ 90.070586][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1545'. [ 90.113572][ T7543] FAULT_INJECTION: forcing a failure. [ 90.113572][ T7543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.127191][ T7543] CPU: 0 UID: 0 PID: 7543 Comm: syz.1.1548 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 90.127226][ T7543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.127238][ T7543] Call Trace: [ 90.127244][ T7543] [ 90.127319][ T7543] __dump_stack+0x1d/0x30 [ 90.127338][ T7543] dump_stack_lvl+0xe8/0x140 [ 90.127357][ T7543] dump_stack+0x15/0x1b [ 90.127371][ T7543] should_fail_ex+0x265/0x280 [ 90.127389][ T7543] should_fail+0xb/0x20 [ 90.127403][ T7543] should_fail_usercopy+0x1a/0x20 [ 90.127455][ T7543] _copy_to_user+0x20/0xa0 [ 90.127481][ T7543] simple_read_from_buffer+0xb5/0x130 [ 90.127503][ T7543] proc_fail_nth_read+0x10e/0x150 [ 90.127545][ T7543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.127596][ T7543] vfs_read+0x1a5/0x770 [ 90.127612][ T7543] ? __rcu_read_unlock+0x4f/0x70 [ 90.127684][ T7543] ? __fget_files+0x184/0x1c0 [ 90.127783][ T7543] ksys_read+0xda/0x1a0 [ 90.127803][ T7543] __x64_sys_read+0x40/0x50 [ 90.127820][ T7543] x64_sys_call+0x27bc/0x2ff0 [ 90.127838][ T7543] do_syscall_64+0xd2/0x200 [ 90.127862][ T7543] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 90.128009][ T7543] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.128029][ T7543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.128046][ T7543] RIP: 0033:0x7f9997d9d5fc [ 90.128096][ T7543] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 90.128145][ T7543] RSP: 002b:00007f9996807030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.128161][ T7543] RAX: ffffffffffffffda RBX: 00007f9997fc5fa0 RCX: 00007f9997d9d5fc [ 90.128172][ T7543] RDX: 000000000000000f RSI: 00007f99968070a0 RDI: 0000000000000007 [ 90.128182][ T7543] RBP: 00007f9996807090 R08: 0000000000000000 R09: 0000000000000000 [ 90.128194][ T7543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.128207][ T7543] R13: 00007f9997fc6038 R14: 00007f9997fc5fa0 R15: 00007ffcd4f5a1c8 [ 90.128224][ T7543] [ 90.419270][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 90.447881][ T7547] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 90.612788][ T7574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1561'. [ 90.730866][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 90.782012][ T7582] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 90.909393][ T7596] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1569'. [ 91.214158][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1574'. [ 91.259373][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1575'. [ 91.864961][ T7650] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1592'. [ 91.901759][ T7652] FAULT_INJECTION: forcing a failure. [ 91.901759][ T7652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.908481][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1588'. [ 91.915029][ T7652] CPU: 0 UID: 0 PID: 7652 Comm: syz.4.1593 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 91.915057][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.915139][ T7652] Call Trace: [ 91.915145][ T7652] [ 91.915151][ T7652] __dump_stack+0x1d/0x30 [ 91.915172][ T7652] dump_stack_lvl+0xe8/0x140 [ 91.915191][ T7652] dump_stack+0x15/0x1b [ 91.915207][ T7652] should_fail_ex+0x265/0x280 [ 91.915231][ T7652] should_fail+0xb/0x20 [ 91.915247][ T7652] should_fail_usercopy+0x1a/0x20 [ 91.915267][ T7652] _copy_from_user+0x1c/0xb0 [ 91.915293][ T7652] ___sys_sendmsg+0xc1/0x1d0 [ 91.915327][ T7652] __x64_sys_sendmsg+0xd4/0x160 [ 91.915350][ T7652] x64_sys_call+0x191e/0x2ff0 [ 91.915370][ T7652] do_syscall_64+0xd2/0x200 [ 91.915394][ T7652] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 91.915417][ T7652] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 91.915505][ T7652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.915525][ T7652] RIP: 0033:0x7ff187a8ebe9 [ 91.915539][ T7652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.915585][ T7652] RSP: 002b:00007ff1864ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.915604][ T7652] RAX: ffffffffffffffda RBX: 00007ff187cb5fa0 RCX: 00007ff187a8ebe9 [ 91.915616][ T7652] RDX: 0000000000000044 RSI: 00002000000007c0 RDI: 0000000000000005 [ 91.915628][ T7652] RBP: 00007ff1864ef090 R08: 0000000000000000 R09: 0000000000000000 [ 91.915640][ T7652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.915652][ T7652] R13: 00007ff187cb6038 R14: 00007ff187cb5fa0 R15: 00007ffc0d359148 [ 91.915681][ T7652] [ 92.143306][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1596'. [ 92.198530][ T7670] lo speed is unknown, defaulting to 1000 [ 92.436542][ T7684] netlink: 'syz.0.1601': attribute type 3 has an invalid length. [ 92.499094][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 92.506543][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 92.514129][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 92.522728][ T9] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 92.847576][ T7707] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 92.923228][ T7723] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 92.941485][ T7727] lo speed is unknown, defaulting to 1000 [ 93.462017][ T7751] netlink: 'syz.3.1624': attribute type 3 has an invalid length. [ 93.469033][ T7748] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 93.919686][ T7781] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 93.947825][ T7785] netlink: 'syz.1.1637': attribute type 3 has an invalid length. [ 94.470190][ T7811] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 94.496339][ T7815] lo speed is unknown, defaulting to 1000 [ 94.507960][ T7816] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 94.543956][ T7822] FAULT_INJECTION: forcing a failure. [ 94.543956][ T7822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.557122][ T7822] CPU: 1 UID: 0 PID: 7822 Comm: syz.2.1651 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 94.557161][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.557221][ T7822] Call Trace: [ 94.557225][ T7822] [ 94.557231][ T7822] __dump_stack+0x1d/0x30 [ 94.557257][ T7822] dump_stack_lvl+0xe8/0x140 [ 94.557273][ T7822] dump_stack+0x15/0x1b [ 94.557315][ T7822] should_fail_ex+0x265/0x280 [ 94.557333][ T7822] should_fail+0xb/0x20 [ 94.557347][ T7822] should_fail_usercopy+0x1a/0x20 [ 94.557436][ T7822] _copy_from_user+0x1c/0xb0 [ 94.557461][ T7822] ___sys_sendmsg+0xc1/0x1d0 [ 94.557493][ T7822] __x64_sys_sendmsg+0xd4/0x160 [ 94.557519][ T7822] x64_sys_call+0x191e/0x2ff0 [ 94.557541][ T7822] do_syscall_64+0xd2/0x200 [ 94.557573][ T7822] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.557592][ T7822] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 94.557643][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.557660][ T7822] RIP: 0033:0x7f1b3246ebe9 [ 94.557672][ T7822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.557686][ T7822] RSP: 002b:00007f1b30ed7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.557726][ T7822] RAX: ffffffffffffffda RBX: 00007f1b32695fa0 RCX: 00007f1b3246ebe9 [ 94.557739][ T7822] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 94.557752][ T7822] RBP: 00007f1b30ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.557764][ T7822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.557777][ T7822] R13: 00007f1b32696038 R14: 00007f1b32695fa0 R15: 00007ffe0bbf5818 [ 94.557796][ T7822] [ 94.819990][ T29] kauditd_printk_skb: 691 callbacks suppressed [ 94.820012][ T29] audit: type=1326 audit(1755432630.084:10145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.4.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff187a8ebe9 code=0x7ffc0000 [ 94.903679][ T29] audit: type=1326 audit(1755432630.124:10146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.4.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff187a8ebe9 code=0x7ffc0000 [ 94.927240][ T29] audit: type=1400 audit(1755432630.164:10147): avc: denied { getopt } for pid=7831 comm="syz.1.1654" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.947827][ T29] audit: type=1400 audit(1755432630.164:10148): avc: denied { create } for pid=7831 comm="syz.1.1654" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.972522][ T29] audit: type=1326 audit(1755432630.174:10149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9997d9ebe9 code=0x7ffc0000 [ 94.996748][ T29] audit: type=1326 audit(1755432630.174:10150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9997d9ebe9 code=0x7ffc0000 [ 95.020357][ T29] audit: type=1326 audit(1755432630.174:10151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9997d9ebe9 code=0x7ffc0000 [ 95.044156][ T29] audit: type=1326 audit(1755432630.174:10152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9997d9ebe9 code=0x7ffc0000 [ 95.067835][ T29] audit: type=1326 audit(1755432630.174:10153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9997d9ebe9 code=0x7ffc0000 [ 95.091634][ T29] audit: type=1326 audit(1755432630.174:10154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9997d9ebe9 code=0x7ffc0000 [ 95.158460][ T7842] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 95.190190][ T7844] __nla_validate_parse: 10 callbacks suppressed [ 95.190205][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1658'. [ 95.307911][ T7852] bridge_slave_0: left allmulticast mode [ 95.313708][ T7852] bridge_slave_0: left promiscuous mode [ 95.319454][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.340977][ T7858] netlink: 'syz.1.1664': attribute type 10 has an invalid length. [ 95.363165][ T7852] bridge_slave_1: left allmulticast mode [ 95.368987][ T7852] bridge_slave_1: left promiscuous mode [ 95.375273][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.384892][ T7852] bond0: (slave bond_slave_0): Releasing backup interface [ 95.394054][ T7852] bond0: (slave bond_slave_1): Releasing backup interface [ 95.402933][ T7852] team0: Port device team_slave_0 removed [ 95.409929][ T7852] team0: Port device team_slave_1 removed [ 95.422441][ T7852] team0: Port device vlan2 removed [ 95.435876][ T7858] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 95.445727][ T7858] team0: Failed to send options change via netlink (err -105) [ 95.453433][ T7858] team0: Port device dummy0 added [ 95.467635][ T7852] team0: Mode changed to "loadbalance" [ 95.620260][ T7878] FAULT_INJECTION: forcing a failure. [ 95.620260][ T7878] name failslab, interval 1, probability 0, space 0, times 0 [ 95.633144][ T7878] CPU: 0 UID: 0 PID: 7878 Comm: syz.1.1668 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 95.633175][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 95.633187][ T7878] Call Trace: [ 95.633192][ T7878] [ 95.633199][ T7878] __dump_stack+0x1d/0x30 [ 95.633219][ T7878] dump_stack_lvl+0xe8/0x140 [ 95.633234][ T7878] dump_stack+0x15/0x1b [ 95.633248][ T7878] should_fail_ex+0x265/0x280 [ 95.633331][ T7878] ? __se_sys_memfd_create+0x1cc/0x590 [ 95.633348][ T7878] should_failslab+0x8c/0xb0 [ 95.633367][ T7878] __kmalloc_cache_noprof+0x4c/0x320 [ 95.633393][ T7878] ? fput+0x8f/0xc0 [ 95.633488][ T7878] __se_sys_memfd_create+0x1cc/0x590 [ 95.633518][ T7878] __x64_sys_memfd_create+0x31/0x40 [ 95.633534][ T7878] x64_sys_call+0x2abe/0x2ff0 [ 95.633551][ T7878] do_syscall_64+0xd2/0x200 [ 95.633573][ T7878] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 95.633660][ T7878] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 95.633680][ T7878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.633697][ T7878] RIP: 0033:0x7f9997d9ebe9 [ 95.633710][ T7878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.633724][ T7878] RSP: 002b:00007f9996806e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 95.633783][ T7878] RAX: ffffffffffffffda RBX: 000000000000056a RCX: 00007f9997d9ebe9 [ 95.633797][ T7878] RDX: 00007f9996806ef0 RSI: 0000000000000000 RDI: 00007f9997e227e8 [ 95.633871][ T7878] RBP: 00002000000015c0 R08: 00007f9996806bb7 R09: 00007f9996806e40 [ 95.633884][ T7878] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 95.633897][ T7878] R13: 00007f9996806ef0 R14: 00007f9996806eb0 R15: 0000200000000200 [ 95.633913][ T7878] [ 95.940832][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 95.952987][ T7892] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 95.985029][ T7898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=7898 comm=syz.4.1676 [ 96.018765][ T7901] FAULT_INJECTION: forcing a failure. [ 96.018765][ T7901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.032053][ T7901] CPU: 1 UID: 0 PID: 7901 Comm: syz.2.1677 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 96.032078][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.032186][ T7901] Call Trace: [ 96.032192][ T7901] [ 96.032198][ T7901] __dump_stack+0x1d/0x30 [ 96.032219][ T7901] dump_stack_lvl+0xe8/0x140 [ 96.032237][ T7901] dump_stack+0x15/0x1b [ 96.032312][ T7901] should_fail_ex+0x265/0x280 [ 96.032330][ T7901] should_fail+0xb/0x20 [ 96.032424][ T7901] should_fail_usercopy+0x1a/0x20 [ 96.032480][ T7901] _copy_from_user+0x1c/0xb0 [ 96.032505][ T7901] ___sys_sendmsg+0xc1/0x1d0 [ 96.032535][ T7901] __x64_sys_sendmsg+0xd4/0x160 [ 96.032557][ T7901] x64_sys_call+0x191e/0x2ff0 [ 96.032574][ T7901] do_syscall_64+0xd2/0x200 [ 96.032606][ T7901] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 96.032628][ T7901] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 96.032649][ T7901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.032668][ T7901] RIP: 0033:0x7f1b3246ebe9 [ 96.032701][ T7901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.032833][ T7901] RSP: 002b:00007f1b30ed7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.032855][ T7901] RAX: ffffffffffffffda RBX: 00007f1b32695fa0 RCX: 00007f1b3246ebe9 [ 96.032867][ T7901] RDX: 0000000000000000 RSI: 0000200000000e40 RDI: 0000000000000003 [ 96.032879][ T7901] RBP: 00007f1b30ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 96.032891][ T7901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.032902][ T7901] R13: 00007f1b32696038 R14: 00007f1b32695fa0 R15: 00007ffe0bbf5818 [ 96.032918][ T7901] [ 96.402735][ T7910] lo speed is unknown, defaulting to 1000 [ 96.530385][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1682'. [ 96.631032][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1684'. [ 96.685949][ T7932] FAULT_INJECTION: forcing a failure. [ 96.685949][ T7932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.699267][ T7932] CPU: 1 UID: 0 PID: 7932 Comm: syz.3.1688 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 96.699354][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.699361][ T7932] Call Trace: [ 96.699364][ T7932] [ 96.699368][ T7932] __dump_stack+0x1d/0x30 [ 96.699381][ T7932] dump_stack_lvl+0xe8/0x140 [ 96.699391][ T7932] dump_stack+0x15/0x1b [ 96.699420][ T7932] should_fail_ex+0x265/0x280 [ 96.699431][ T7932] should_fail+0xb/0x20 [ 96.699440][ T7932] should_fail_usercopy+0x1a/0x20 [ 96.699477][ T7932] _copy_to_user+0x20/0xa0 [ 96.699507][ T7932] simple_read_from_buffer+0xb5/0x130 [ 96.699520][ T7932] proc_fail_nth_read+0x10e/0x150 [ 96.699588][ T7932] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.699645][ T7932] vfs_read+0x1a5/0x770 [ 96.699689][ T7932] ? kmem_cache_free+0xdf/0x300 [ 96.699704][ T7932] ? inode_to_bdi+0x47/0xa0 [ 96.699717][ T7932] ? generic_fadvise+0x197/0x430 [ 96.699729][ T7932] ksys_read+0xda/0x1a0 [ 96.699880][ T7932] __x64_sys_read+0x40/0x50 [ 96.699891][ T7932] x64_sys_call+0x27bc/0x2ff0 [ 96.699922][ T7932] do_syscall_64+0xd2/0x200 [ 96.699978][ T7932] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 96.699991][ T7932] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 96.700004][ T7932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.700016][ T7932] RIP: 0033:0x7f231901d5fc [ 96.700025][ T7932] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 96.700066][ T7932] RSP: 002b:00007f2317a87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.700077][ T7932] RAX: ffffffffffffffda RBX: 00007f2319245fa0 RCX: 00007f231901d5fc [ 96.700084][ T7932] RDX: 000000000000000f RSI: 00007f2317a870a0 RDI: 0000000000000005 [ 96.700091][ T7932] RBP: 00007f2317a87090 R08: 0000000000000000 R09: 0000000000000000 [ 96.700098][ T7932] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 96.700104][ T7932] R13: 00007f2319246038 R14: 00007f2319245fa0 R15: 00007ffe12955268 [ 96.700120][ T7932] [ 97.052096][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1694'. [ 97.166211][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1696'. [ 97.331730][ T7963] FAULT_INJECTION: forcing a failure. [ 97.331730][ T7963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.344924][ T7963] CPU: 0 UID: 0 PID: 7963 Comm: syz.3.1701 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 97.344949][ T7963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 97.344961][ T7963] Call Trace: [ 97.345024][ T7963] [ 97.345031][ T7963] __dump_stack+0x1d/0x30 [ 97.345065][ T7963] dump_stack_lvl+0xe8/0x140 [ 97.345082][ T7963] dump_stack+0x15/0x1b [ 97.345099][ T7963] should_fail_ex+0x265/0x280 [ 97.345120][ T7963] should_fail+0xb/0x20 [ 97.345138][ T7963] should_fail_usercopy+0x1a/0x20 [ 97.345213][ T7963] _copy_from_user+0x1c/0xb0 [ 97.345236][ T7963] get_timespec64+0x4c/0x100 [ 97.345253][ T7963] __se_sys_clock_nanosleep+0x10b/0x250 [ 97.345313][ T7963] __x64_sys_clock_nanosleep+0x55/0x70 [ 97.345345][ T7963] x64_sys_call+0x272d/0x2ff0 [ 97.345366][ T7963] do_syscall_64+0xd2/0x200 [ 97.345414][ T7963] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 97.345435][ T7963] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 97.345469][ T7963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.345490][ T7963] RIP: 0033:0x7f231901ebe9 [ 97.345509][ T7963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.345527][ T7963] RSP: 002b:00007f2317a87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 97.345556][ T7963] RAX: ffffffffffffffda RBX: 00007f2319245fa0 RCX: 00007f231901ebe9 [ 97.345569][ T7963] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 00000000fffffff2 [ 97.345659][ T7963] RBP: 00007f2317a87090 R08: 0000000000000000 R09: 0000000000000000 [ 97.345707][ T7963] R10: 9999999999999999 R11: 0000000000000246 R12: 0000000000000001 [ 97.345717][ T7963] R13: 00007f2319246038 R14: 00007f2319245fa0 R15: 00007ffe12955268 [ 97.345733][ T7963] [ 97.815677][ T7981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1708'. [ 97.891468][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1709'. [ 97.986759][ T7998] FAULT_INJECTION: forcing a failure. [ 97.986759][ T7998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.000041][ T7998] CPU: 0 UID: 0 PID: 7998 Comm: syz.4.1714 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 98.000067][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.000077][ T7998] Call Trace: [ 98.000081][ T7998] [ 98.000161][ T7998] __dump_stack+0x1d/0x30 [ 98.000227][ T7998] dump_stack_lvl+0xe8/0x140 [ 98.000247][ T7998] dump_stack+0x15/0x1b [ 98.000260][ T7998] should_fail_ex+0x265/0x280 [ 98.000276][ T7998] should_fail+0xb/0x20 [ 98.000290][ T7998] should_fail_usercopy+0x1a/0x20 [ 98.000383][ T7998] _copy_from_user+0x1c/0xb0 [ 98.000403][ T7998] ___sys_sendmsg+0xc1/0x1d0 [ 98.000468][ T7998] __sys_sendmmsg+0x178/0x300 [ 98.000491][ T7998] __x64_sys_sendmmsg+0x57/0x70 [ 98.000537][ T7998] x64_sys_call+0x1c4a/0x2ff0 [ 98.000553][ T7998] do_syscall_64+0xd2/0x200 [ 98.000573][ T7998] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 98.000592][ T7998] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 98.000610][ T7998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.000629][ T7998] RIP: 0033:0x7ff187a8ebe9 [ 98.000667][ T7998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.000682][ T7998] RSP: 002b:00007ff1864ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 98.000698][ T7998] RAX: ffffffffffffffda RBX: 00007ff187cb5fa0 RCX: 00007ff187a8ebe9 [ 98.000771][ T7998] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000005 [ 98.000782][ T7998] RBP: 00007ff1864ef090 R08: 0000000000000000 R09: 0000000000000000 [ 98.000792][ T7998] R10: 0000000020080058 R11: 0000000000000246 R12: 0000000000000001 [ 98.000832][ T7998] R13: 00007ff187cb6038 R14: 00007ff187cb5fa0 R15: 00007ffc0d359148 [ 98.000849][ T7998] [ 98.197121][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1715'. [ 98.248681][ T8008] netlink: 'syz.0.1717': attribute type 3 has an invalid length. [ 98.296838][ T8010] netlink: 'syz.4.1718': attribute type 3 has an invalid length. [ 98.373145][ T8015] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 98.610568][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1723'. [ 98.713256][ T8029] can0: slcan on ttyS3. [ 98.742610][ T8029] can0 (unregistered): slcan off ttyS3. [ 98.929125][ T8031] tipc: New replicast peer: 255.255.255.83 [ 98.935274][ T8031] tipc: Enabled bearer , priority 10 [ 99.493618][ T8069] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8069 comm=syz.3.1736 [ 99.676225][ T8078] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 99.825874][ T8082] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 99.833443][ T29] kauditd_printk_skb: 803 callbacks suppressed [ 99.833457][ T29] audit: type=1326 audit(1755432635.104:10958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff187a8ebe9 code=0x7ffc0000 [ 99.863938][ T29] audit: type=1326 audit(1755432635.144:10959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff187a8ebe9 code=0x7ffc0000 [ 99.888092][ T29] audit: type=1326 audit(1755432635.164:10960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff187a8ebe9 code=0x7ffc0000 [ 99.928210][ T29] audit: type=1326 audit(1755432635.184:10961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff187a8ebe9 code=0x7ffc0000 [ 99.951822][ T29] audit: type=1326 audit(1755432635.194:10962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff187a8ebe9 code=0x7ffc0000 [ 99.975578][ T29] audit: type=1326 audit(1755432635.194:10963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff187a8ebe9 code=0x7ffc0000 [ 99.999094][ T29] audit: type=1326 audit(1755432635.194:10964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff187a8ebe9 code=0x7ffc0000 [ 100.022878][ T29] audit: type=1326 audit(1755432635.224:10965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff187a8ebe9 code=0x7ffc0000 [ 100.046540][ T29] audit: type=1326 audit(1755432635.224:10966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff187a8ebe9 code=0x7ffc0000 [ 100.070727][ T29] audit: type=1326 audit(1755432635.224:10967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.4.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff187a8ebe9 code=0x7ffc0000 [ 100.094554][ T3389] tipc: Node number set to 3763746321 [ 100.326024][ T8097] __nla_validate_parse: 2 callbacks suppressed [ 100.326040][ T8097] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1744'. [ 100.528176][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1748'. [ 100.711370][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1749'. [ 100.769185][ T8124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1751'. [ 100.780004][ T8128] ================================================================== [ 100.788104][ T8128] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 100.795392][ T8128] [ 100.797720][ T8128] write to 0xffff888102340600 of 8 bytes by task 8121 on cpu 1: [ 100.805350][ T8128] mas_wmb_replace+0x20d/0x14a0 [ 100.810220][ T8128] mas_wr_store_entry+0x1773/0x2b50 [ 100.815448][ T8128] mas_store_prealloc+0x74d/0x9e0 [ 100.820555][ T8128] vma_iter_store_new+0x1c5/0x200 [ 100.825587][ T8128] vma_complete+0x125/0x580 [ 100.830078][ T8128] __split_vma+0x5d9/0x650 [ 100.834484][ T8128] vma_modify+0x3f2/0xc80 [ 100.838813][ T8128] vma_modify_flags+0x101/0x130 [ 100.843656][ T8128] mprotect_fixup+0x2cc/0x570 [ 100.848321][ T8128] do_mprotect_pkey+0x6d6/0x980 [ 100.853169][ T8128] __x64_sys_mprotect+0x48/0x60 [ 100.858023][ T8128] x64_sys_call+0x274e/0x2ff0 [ 100.862691][ T8128] do_syscall_64+0xd2/0x200 [ 100.867198][ T8128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.873177][ T8128] [ 100.875581][ T8128] read to 0xffff888102340600 of 8 bytes by task 8128 on cpu 0: [ 100.883115][ T8128] mas_state_walk+0x485/0x650 [ 100.887790][ T8128] mas_walk+0x60/0x150 [ 100.891844][ T8128] lock_vma_under_rcu+0x8d/0x160 [ 100.896785][ T8128] do_user_addr_fault+0x233/0x1090 [ 100.901902][ T8128] exc_page_fault+0x62/0xa0 [ 100.906393][ T8128] asm_exc_page_fault+0x26/0x30 [ 100.911231][ T8128] [ 100.913544][ T8128] value changed: 0xffff8881096cbf81 -> 0xffff888102340600 [ 100.920632][ T8128] [ 100.922939][ T8128] Reported by Kernel Concurrency Sanitizer on: [ 100.929099][ T8128] CPU: 0 UID: 0 PID: 8128 Comm: syz.2.1752 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 100.941596][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.951650][ T8128] ==================================================================