last executing test programs: 3m26.393161519s ago: executing program 32 (id=1098): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800100000400000028000000", @ANYRES32, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000013000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x99) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 3m25.000204251s ago: executing program 4 (id=1123): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x6, 0x0) 3m24.8833886s ago: executing program 4 (id=1125): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) 3m24.88300722s ago: executing program 4 (id=1126): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r3, 0x0, 0x8) 3m24.822994255s ago: executing program 4 (id=1127): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c033, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000680)="aa420a6e72d6f1a174c1c7fe0c2af498babcc3673121c9300115fcee5fa077df4e7e090b7c4f7e54a301e2eb937d5f8717767fe7ada3f9792ffb8bf2c932223ceec469b8d7d83a7322bbf92691e8bceac90601ddec96a05c5b1ad4b11e090660409c4d5014ce321f82281607c16c384846696f224fa4fcba14842258e20538795b250938c5ed2584f862f21eb7583abb173e2733d79e0b0cd20cc4744eefcf49fdb6d92f07ede06383b27b39dbd07fff00fcce112cc93f07c3e5d5e2857162daf7961aee5c8e7931c4709617c2d1395bc2b5f63c52f41cfc50ab9f27d6f3cf5269da591607055230", 0xe8}, {&(0x7f0000000040)="432cbc99ad15d03aeb4a431686c182ba7633c1ff3ed18e79f0b67b607a6e11291501bba84ab787e03beffccac275807e303e4268ce917c47bf8e28210c3655c19951ed06901858919cffffa19707100412945e463e2e212d9db24a5768d8", 0x5e}, {&(0x7f0000000200)="70a272f0caedf720b9b155cc3ad7391e18fbc0e7a39e36eb8d885197215242bde30d89d20a5921d1b56f995f7aa30cca0581ff9ed92f", 0x36}, {&(0x7f0000000280)="11acb8a7ef081148049e7ae275649209228cb87078d13101827ea9345628a3005766f27d17e4be1e0bc81d7d8c29f577dbee5e0c1c33d1cadd2bc5c5c3fd96470a2277c566b16fe770a80d5ba083614b05626649a22c0595eac15995ad373d0c6af17ffc95fd16b639301f40ed24a9c2c64c27eefd468aa875a54749e21b2ed350e059d38911eb179a72d045151ff38a53527c5a44772c4851431b867d1027f179988da8622dc0caa45215", 0xab}, {&(0x7f0000000380)="6764a4287592f29d25b26279e672c9d8cccdb78866e0d7f65c7426793ae0bbf1cd98f9398b", 0x25}, {&(0x7f0000000780)="351c8d8a1c32d55c69f6aa52c98d01d645480d947aa46605680d57b853ad1e40a15e5aedd85114649e2133c33d605d8ea0486408161459168bffa58bdcb433e2d1446b418d3e4b2e3b6b4395ae73699e6319be6c48af35341439a0b3c10c52c903c7246c09b9cbdd3ec4a9fb71862224f53d0226722f35e64c3b43c537fbe8bf93741fea033364d9484e708a5ac93bc1e45ed0a5d897bde00fdb1777c48bc1094b0585822ed51a1d2b97a329d0da6937225a2775a54318f447f81357a33fa96b975c7a756a665f037b82048416ecf15b3afd82ac06d07dba631b0e76e839488904b399f7bcf018b62c6db6d5c820f0", 0xef}, {&(0x7f0000000880)="4c0f8eb7acb4230fe33d49e89b4d2a1d74644ac859aca749f873a89c4c5ff0f0c4d842a412104c66c16dc84a0c321588b1dc25f6eb2694902e63efa86eb7918f65eb0630e2b0639dc2cacb4d657023ff8fa2363842f7c9d6570d63ad106a5273b65b0c7b366be7edc10fcf85ac88b75fdaa610e6e620c19d8b37d5134f10ac1051f77762da9d92ad5e09751493ed29763ca1ffa10d91915ee7fc6d2604f90798139acc7997f7e26adb29fad39b6cc366dd79d92fbf60e166410af4dc70802757cea200bbff0f9407850236ec0e3a01ff86ed3b6841ae3b521a8a1c0af018520805", 0xe1}, {&(0x7f00000003c0)="e9c14f81e46acdb919f6f1", 0xb}], 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1060}, 0x4000080) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') set_mempolicy(0x2, &(0x7f0000000000)=0xf, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000001b00)=ANY=[@ANYBLOB="18283c5bd44c9f6133a73f42c04e9300000000000000000060df935a0c50e7760580e8ed1e896b5e3e68aa7313ecb2500f585371b757f3d3012b4817175091e9dff14cf0694497325f65cf4b3731f34c9fd3b5aed4f44d7819ab06e7b126227523d060b6b1ba769b924da245c8f0773166093cddf55c1f0005fbd4d24450c9c5ac7759db4b1c07c5809f9e68a387a1234da5e5a5be95a6e5853b55c944049b7384379f42936a2f5ba455de19fb692955728f3a6e60cc4b"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='bcache_btree_write\x00', r1, 0x0, 0x3}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) recvfrom(r5, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3m24.691646175s ago: executing program 4 (id=1128): setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000080)={0x1}, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000400)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r4, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='kfree\x00', r5, 0x0, 0x3}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 3m23.096756523s ago: executing program 33 (id=1142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x10) (rerun: 64) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) (async, rerun: 64) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r4, 0x65, 0x80000001, 0x0, 0x0) (async, rerun: 64) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x401800, 0x4b) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x0) (rerun: 32) socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x88c, 0x30, 0xffff, 0x2, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x2000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x14880, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7ffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xfffff7fe, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0xffffffff, 0x0, 0x6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x6, 0x2, 0x4, 0xfffffffe, 0x0, 0x0, 0x1, 0x25d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x76, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7, 0x0, 0x0, 0x8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1bde, 0x0, 0x1, 0x4, 0x0, 0x0, 0xffffff7d, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xbb02, 0x0, 0x0, 0x0, 0x1, 0x5, 0x2, 0x93d9]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x88c}}, 0x40844) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r6, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r6, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/reserved_size', 0x149a82, 0x1a1) writev(r10, &(0x7f00000001c0)=[{&(0x7f0000000380)='\f', 0x1}], 0x1) (async) signalfd4(r10, &(0x7f00000000c0)={[0x1]}, 0x8, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0xb81}, 0x18) 3m23.092510724s ago: executing program 2 (id=1144): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb63}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0xa, @val=@iter={0x0}}, 0x20) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = io_uring_setup(0x75c0, &(0x7f0000000980)={0x0, 0xdfef, 0x1000, 0x2, 0x3de}) r7 = syz_io_uring_setup(0xd0f, &(0x7f0000000900)={0x0, 0x66ab, 0x80, 0xffffffff, 0xbfdffffc, 0x0, r6}, &(0x7f0000000a00)=0x0, &(0x7f0000000700)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0xe000, 0xc0}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0x3) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) r12 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r12, 0x29, 0x1000000000021, &(0x7f0000001180)=0x5, 0x4) connect$inet6(r12, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) writev(r12, &(0x7f0000001100)=[{&(0x7f0000000f80)="5b1a127334a15bb722da0e35ef37b6d1b8fc852e20a02c4614d29a0aac35f75d86b7f6aba3049e391f4eae6c579b939f115e44bbccbce7fa6cf02b71407e81a011e2d82429d1264b61fa8c00a807a5c57a6e8e6dc32c6ab56d0a17ca16e6af9380c61efb8cc7d8b63e792ccf869848578e727f8398c2fd694ceb32bd6bdc74c845e915f09f32a749faea23bb31ccf22c3a8b3cfea588e7df9e4f8014292e141840b5ca4c5f", 0xa5}, {&(0x7f0000001040)="137322758281d13c3709498d8972b1d0a2492ea69b198bb98a6a8c34a377288bec6f2cf337adbd8bde55d90d61282043444a0650eba8077da6df15113eae3b8c06679ae19975441ebd9c40aaec1449c2afd54f6d4e59300f08e571806136498de1ed9255d292b3cb40ca41d7d2bfeb3de7b05ce079aff47255776108febbd1b5a1cef5ae9517b81eb6ffd9", 0x8b}], 0x2) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYRESOCT=r11, @ANYRESHEX=r10, @ANYRESDEC=r7], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x560, 0x0, 0x0, 0x338, 0xf0, 0x630, 0x630, 0x630, 0x630, 0x630, 0x6, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'gre0\x00', 'bond0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@private, 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x200, [0x1000, 0x3], 0x0, 0x30, 0x7, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @remote, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x20}, @dev={0xfe, 0x80, '\x00', 0x39}, @loopback, @loopback, @dev={0xfe, 0x80, '\x00', 0x1b}, @dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}], 0xf}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@loopback, 0x0, 0x3f}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, [0xffffffff, 0x0, 0xe979eab540ef6e66, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xff], 'lo\x00', 'batadv0\x00', {}, {0xff}, 0x16, 0xf9, 0x2, 0x40}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r14 = epoll_create1(0x0) vmsplice(r14, 0x0, 0x0, 0xa) symlink(0x0, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCVHANGUP(r10, 0x5437, 0x2) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 3m22.728404173s ago: executing program 2 (id=1146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000580)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p']) (fail_nth: 1) 3m22.649811799s ago: executing program 2 (id=1148): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) 3m22.64091824s ago: executing program 2 (id=1149): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 3m22.609851502s ago: executing program 2 (id=1151): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='asymmetric\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x617a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xf000000) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000010c0)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x5, 0x2, 0x29}, 0x2c) 3m22.209433034s ago: executing program 2 (id=1155): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000005f00)={0x40, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0x5, 0x4, '4'}]}]}, 0x40}}, 0x4004) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r7, 0xffffffff, 0x6}, &(0x7f00000014c0)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r4, 0x0, 0x100a}, 0x18) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3m22.196393675s ago: executing program 34 (id=1155): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000005f00)={0x40, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0x5, 0x4, '4'}]}]}, 0x40}}, 0x4004) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r7, 0xffffffff, 0x6}, &(0x7f00000014c0)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r4, 0x0, 0x100a}, 0x18) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3m20.853967633s ago: executing program 4 (id=1178): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r3, 0x0, 0x8) 3m20.853840223s ago: executing program 35 (id=1178): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r3, 0x0, 0x8) 2m36.814907902s ago: executing program 6 (id=2421): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wg0\x00', 0x0}) r2 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c4010000", @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf25190000000c00018008000300020000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020067656e657665300000000000000000001400020076657468315f746f5f626f6e640000001400020070696d36726567000000000000000000084647ad", @ANYRES32=0x0, @ANYBLOB="0c000180080003000200000038000180080003000100000008000300010000000800030002000000080003000200000014000200766c616e300000000000000000000000040001807800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32, @ANYBLOB="0800030001000000140002006970365f767469300000000000000000080003000000000008000100", @ANYRES32, @ANYBLOB="0800030000000000140002006970766c616e310000000000000000001400020076657468315f766c616e000000000000240001800800030002000000080003000000000008000100", @ANYRES32=r1, @ANYBLOB="08000300010000005c0001800800030000000000080003000000000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d3672656731000000000000000008000100", @ANYRES32, @ANYBLOB="1400020074756e6c3000000000000000000000000c0001800800030000000000"], 0x1c4}, 0x1, 0x0, 0x0, 0x24040001}, 0x48001) getgroups(0x0, 0x0) 2m36.692741742s ago: executing program 6 (id=2426): syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) 2m36.041765514s ago: executing program 6 (id=2442): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100), 0x6) 2m36.006502307s ago: executing program 6 (id=2443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x40000000}}}}}}, 0x0) 2m35.991912768s ago: executing program 6 (id=2444): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) 2m35.874592317s ago: executing program 6 (id=2449): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) 2m20.858639241s ago: executing program 36 (id=2449): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) 1m26.921841334s ago: executing program 7 (id=4228): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004014) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) capget(&(0x7f0000000200)={0x19971634}, 0x0) 1m26.865959878s ago: executing program 7 (id=4229): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$netlink(0x10, 0x3, 0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x6a6e81, 0x0) r4 = signalfd(r3, 0x0, 0x0) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext3\x00', &(0x7f00000000c0)='./file1\x00', 0x208041, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000001340)="$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") open(0x0, 0x145142, 0x0) open_tree(r4, &(0x7f0000000000)='./file1\x00', 0x1801) socket$kcm(0x11, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, r5, 0x5419c000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd21f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x9, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r7, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000000)={0x2, 0x5, @broadcast}, 0x10) connect(r8, &(0x7f0000000000)=@rc={0x1f, @none, 0x7}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) 1m24.649010466s ago: executing program 8 (id=4206): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) 1m24.526648426s ago: executing program 7 (id=4258): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) fstatfs(r1, &(0x7f0000000140)=""/166) 1m24.290815934s ago: executing program 8 (id=4260): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000700), 0x3, 0x4de, &(0x7f0000001080)="$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") newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3800) chown(&(0x7f0000000040)='./file1\x00', r1, r2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@discard}]}, 0x1, 0x609, &(0x7f0000000f80)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0xd9726125b1b199f, &(0x7f00000005c0)={[{@acl}, {@nomblk_io_submit}, {@lazytime}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@journal_async_commit}, {@nobh}, {@block_validity}]}, 0x66, 0x51c, &(0x7f0000001740)="$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") syz_usb_disconnect(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='mr_alloc\x00', r4, 0x0, 0x4}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000180081084e81f782db44b904021d0800fd007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffec62070000cbee5de6ccd44a677575a62cef352a92954b43370e9701ee1b6ec75a526c5d5b5701cf8773", 0xd8}], 0x1}, 0x400c0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="021300000200000000000000000000005274397444bac91ed587d3decfbc88658e0f128db10bec1c738dfd35f251456a4ffd89a877779e90ef7e2dcb73242afd2d15790f1da20c0b7d5124f4896b8d624590b00480e9df798c0a63339d7b5b275eaf51317f9d35afe70812065a0b4eb01b11dec75b08174af0e81afcd2d6d81d93ac69e184eab93fff474239691cb380277c12ec092c9230c5dcb324459b70162d689bbad7a6cb21cf074098a0b472079f789aa105ead4a94274f93d408795ffa24b29c1baa9dcf2a2e1cb96ed48"], 0x10}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="02120000020500000000ffff00000000"], 0x10}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) capget(&(0x7f0000000340)={0x19980330}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1m24.177084454s ago: executing program 7 (id=4263): openat$vcsu(0xffffffffffffff9c, 0x0, 0x181000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xffffffc9, &(0x7f0000000040)=[{&(0x7f0000000000), 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/17, 0x11}, 0x40010100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@lazytime}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x6b2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x10000000000]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = semget$private(0x0, 0x4, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)={0x28, r7, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x802}, 0x8080) semop(r3, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semtimedop(r3, &(0x7f0000000000)=[{0x0, 0x9, 0x800}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) 1m23.668776294s ago: executing program 7 (id=4277): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1m23.365325939s ago: executing program 7 (id=4288): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 1m23.334836711s ago: executing program 37 (id=4288): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 1m22.996655718s ago: executing program 8 (id=4293): r0 = socket$igmp6(0xa, 0x3, 0x3a) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x3, 0x4000010, 0xffffffffffffffff, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x4e20, 0x103, @private1, 0x9}, {0xa, 0x4e20, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0xf}, 0x2}, 0x1000, {[0x7, 0x0, 0x10000, 0xfffffef9, 0x0, 0x21, 0x2]}}, 0x5c) 1m22.8453069s ago: executing program 8 (id=4294): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x183000) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x183000) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0xa0, 0x8, 0x5, @time={0xff, 0x5}, {0xa, 0x80}, {0x6, 0xee}, @connect={{0x6, 0x9}, {0xc, 0x97}}}, {0xd, 0x3, 0x0, 0xd2, @tick=0xb198, {0x3, 0x72}, {0x80, 0x9}, @raw32={[0x7f, 0x4, 0x1]}}, {0x1, 0x7, 0x7, 0x7, @time={0x5, 0xe}, {0x1, 0x4}, {0x21, 0x3}, @raw8={"4086287480269bc2ecdff910"}}, {0x5, 0x9, 0x7, 0x1, @time={0x8, 0xfffffff9}, {0xcf, 0x1}, {0x0, 0x9}, @result={0x0, 0x1}}, {0x6, 0x9, 0x2, 0xf7, @time={0x6, 0x9}, {0x1, 0xe3}, {0x8, 0xa}, @raw32={[0xb7, 0x1, 0x4]}}, {0x6, 0xea, 0x81, 0x0, @time={0x2, 0xfff}, {0x46, 0x8}, {0x7, 0x4}, @note={0xf7, 0x3, 0x0, 0x4, 0xffffff7f}}], 0xa8) (async) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0xa0, 0x8, 0x5, @time={0xff, 0x5}, {0xa, 0x80}, {0x6, 0xee}, @connect={{0x6, 0x9}, {0xc, 0x97}}}, {0xd, 0x3, 0x0, 0xd2, @tick=0xb198, {0x3, 0x72}, {0x80, 0x9}, @raw32={[0x7f, 0x4, 0x1]}}, {0x1, 0x7, 0x7, 0x7, @time={0x5, 0xe}, {0x1, 0x4}, {0x21, 0x3}, @raw8={"4086287480269bc2ecdff910"}}, {0x5, 0x9, 0x7, 0x1, @time={0x8, 0xfffffff9}, {0xcf, 0x1}, {0x0, 0x9}, @result={0x0, 0x1}}, {0x6, 0x9, 0x2, 0xf7, @time={0x6, 0x9}, {0x1, 0xe3}, {0x8, 0xa}, @raw32={[0xb7, 0x1, 0x4]}}, {0x6, 0xea, 0x81, 0x0, @time={0x2, 0xfff}, {0x46, 0x8}, {0x7, 0x4}, @note={0xf7, 0x3, 0x0, 0x4, 0xffffff7f}}], 0xa8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) getxattr(&(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=@random={'security.', '%,\x00'}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socket$pppoe(0x18, 0x1, 0x0) (async) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) (async) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) (async) sendmmsg(r5, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x0) epoll_create(0x2) (async) epoll_create(0x2) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x1832b, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000002a80)) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r6, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) (async) setsockopt$inet6_int(r6, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r7, &(0x7f0000001440)="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", 0x5ad, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") write$selinux_context(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:cgroup_t:s0\x00', 0x1e) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m22.621349379s ago: executing program 8 (id=4295): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x20, 0x18}) 1m20.708032682s ago: executing program 8 (id=4316): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) (fail_nth: 7) 1m20.684289973s ago: executing program 38 (id=4316): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) (fail_nth: 7) 4.317846844s ago: executing program 5 (id=5938): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e20, 0x829, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffd}]}, &(0x7f0000000040)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000030000004d000000de43000003000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000058b94ae4000000000000000000000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="100089786a8a0400000000000000", @ANYRES16=r3, @ANYBLOB="0000000000000000b7080000610000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a35500009500000000000000", @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) setitimer(0x0, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4085}, 0x811) r5 = socket(0x39, 0x3, 0x801) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe, 0x12, r0, 0x6d49d000) shutdown(r0, 0x2) r6 = socket(0x23, 0x5, 0x101) ioperm(0x1, 0x9, 0xfffffffffffffff8) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = mq_open(&(0x7f0000000340)='!xselinux\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x113, &(0x7f00000002c0)={0x0, 0x1, 0x6, 0x1000}) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x19, 0x0, &(0x7f0000000180)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x20}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x21}]}}, 0x0, 0x42}, 0x28) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.431544955s ago: executing program 5 (id=5951): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x40, @vifc_lcl_ifindex, @multicast2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x158, 0x3a, 0x100, 0x70bd2c, 0x25dfdbfb, {0xb}, [@nested={0xe1, 0x68, 0x0, 0x1, [@typed={0x8, 0x11a, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x8, 0x137, 0x0, 0x0, @u32=0xb9}, @typed={0x4, 0xad}, @generic="3d7fafdfcf866169db67fd3eb58f6419796dca62e5d89dff54f5bb3342009c29a117dbbb37fed92419501b38e175d6101b592352fbf4d05415095f82d55afc259b0fcb792214edcece944d16f12a0344f0810c003d98cc89230c40a30cbc613cdd35d7194c38bf44b7cab102c0fe52130d3c86235365a005275dd7d85eede5dee4bdb52e77e6b8da140b2605dd640f40588bc7e5544ba3c1ad2871171ed546530ff5dde3923e6886f69708e76f67549a3ce356c54ab5bafefe618bccf4bac6a8bb590137eb495890ac"]}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xa0e}, @generic="bbfa04f513c7c85be6327dc9ce8e575d59c097d900047608b18140f9adc134991bd99df366f5a887c15620337120b85ab69f2fab8d1ecd81436e1609b1967e144d45648b112ed0191dad203118039cba534bd21896c409a9"]}, 0x158}, 0x1, 0x0, 0x0, 0x4002}, 0x24010010) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x30, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x19}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r6, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x9a}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x5a}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x81}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xcc}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x6}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x5}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x25}]}]}, 0x6c}}, 0x2004c050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 3.292111156s ago: executing program 0 (id=5954): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000ac00000083000000bf090000000000005509010000000000950000000000001fbf91000000000000b702000000005016ad5fbd160d1b0000b700000000000000956f26724ea31296f4d48fdc32e94b938423"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000100)={0x1d, r5}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, 0x0, 0xcdfbe0f30000c7d1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) ptrace(0x10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0xe0101, 0x0) sendto$unix(r7, &(0x7f00000001c0), 0x0, 0x8041, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r8 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f0000000180)=0x10, 0x0) getsockopt$sock_int(r8, 0x1, 0x23, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 3.257617839s ago: executing program 0 (id=5955): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x1fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.197444374s ago: executing program 9 (id=5956): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x28d2, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe8}, 0x0, 0x24040092}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 3.197097544s ago: executing program 0 (id=5957): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='/', 0x1}], 0x1}}], 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x15}, {0x15, 0x0, 0x0, 0x3}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0xeb1}}, './file0\x00'}) close(r0) 3.196355644s ago: executing program 5 (id=5958): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000700), 0x3, 0x4de, &(0x7f0000001080)="$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") newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3800) chown(&(0x7f0000000040)='./file1\x00', r0, r1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@discard}]}, 0x1, 0x609, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvzCZ5kzbvm/bl5cUWxYCHFqTbpBarXmzrwR4KFuxBxENDk9TQ7Q+aFGwtNAUPCgoiXkV68R/wLr17E0G9eRaqSEVBS1dmd7bdbHbTNc3uppnPByY7zzOz+zzfnX12npnJsxNAYU1mf9KIXRH3TiURE03LxqO+cDJf786v105nUxLV6uu/JJHkeY31k/xxe54YjYhvjkb8t7S63MUrV8/OVKp11yP2L527uH/xytV9C+dmzsydmTs/feCFg4emXpw+OL0hcW7PH48df+3Jj957+/n5byv7kjgcJ4ffnY2WODbKZEzGvTzE5vyhiDiUzbR5Xx43WyCEQivln8fhiPh/TESplqqbiIUPB1o5oKeqpYgqUFCJ9g8F1egHNI7tuzsOPtnjXkn/3D5SPwBaHf9Q/dxIjNaOjbbdSZqOjOrnNnZsQPlZGXev7f4sm2LFeYg/7m+doQ0op5PlGxHxRLv4k1rddtQizeJPV9QjiYipiBjJ6/fKI9QhaZrvxXmYtaw3/jQiDuePWf7RdZY/2ZLud/wAFNOtI/mOfDlLPdj/ZX2PRv8n2vR/xtvsu9Zj0Pu/zv2/xv5+tHaOPG3ph2V9lhPtX3K4NePHD4590qn85v5fNmXlN/qC/XD7RsTulvjfz4LN+z9Z/Emb7Z+tcupwd2W8+t3PxzotG3T81ZsRe9oe/zzolWZza1yf3D+/UJmbqv9tW8ZXX7/1Rafym+IfHdT239Yh/qbtn7Y+L3tPLnZZxpcnbp7rtCz7Hrlbvb7G9k9/Gknqx5sjec47M0tLl6YjRpLj+SpN+QfWrktjncZrZPHvfaZ9+1/x+b+x8nXGGl+ZXbj4xtk7nZat5/PfdDH5XrXLOnSSxT/78O2/qv1neR93Wcbvb15+qtOyteIfe5TAAAAAAAAAoIDS2jXYJC3fn0/Tcrk+XvZ/sS2tXFhcenb+wuXzsxF7a/8POZw2rnRP1NNJlp7O/x+2kT7Qkn4uInZGxKelsVq6fPpCZXbQwQMAAAAAAAAAAAAAAAAAAMAmsT0f/9+4T/Vvpfr4f6AgenmDOWBz67r9l3pbD6D/au1/1S2egCLQ/4fi0v6huLR/KC7tH4pL+4fi0v6huLR/KC7tHwAAAAC2pJ1P3/ohiYjll8ZqU2YkX2ZEEGxtw4OuADAwRvRDcd2/9K+zD4XTVf//z/zHAXtfHWAAknaZtc5Bde3Gf6vtMwEAAAAAAAAAAACAHtizq/P4f2ODYWsz7A+K6xHG//vpAHjM+el/KC7H+MDDRvGPdlpg/D8AAAAAAAAAAAAA9M14bUrScj4WeDzStFyO+HdE7IjhZH6hMjcVEf+JiO9Lw//K0tODrjQAAAAAAAAAAAAAAAAAAABsMYtXrp6dqVTmLjXP/LUqZ2vPNO6C2oeyXo5/+KxI+v+2jEXEwDdKz2aGmnKSiOVsy2+Kil1ajM1RjdrMgL+YAAAAAAAAAAAAAAAAAACggJrGHre3+/M+1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u/B/f97NzPoGAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx9PfAQAA//+BdkCC") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0xd9726125b1b199f, &(0x7f00000005c0)={[{@acl}, {@nomblk_io_submit}, {@lazytime}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@journal_async_commit}, {@nobh}, {@block_validity}]}, 0x66, 0x51c, &(0x7f0000001740)="$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") syz_usb_disconnect(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='mr_alloc\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000180081084e81f782db44b904021d0800fd007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffec62070000cbee5de6ccd44a677575a62cef352a92954b43370e9701ee1b6ec75a526c5d5b5701cf8773", 0xd8}], 0x1}, 0x400c0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="021300000200000000000000000000005274397444bac91ed587d3decfbc88658e0f128db10bec1c738dfd35f251456a4ffd89a877779e90ef7e2dcb73242afd2d15790f1da20c0b7d5124f4896b8d624590b00480e9df798c0a63339d7b5b275eaf51317f9d35afe70812065a0b4eb01b11dec75b08174af0e81afcd2d6d81d93ac69e184eab93fff474239691cb380277c12ec092c9230c5dcb324459b70162d689bbad7a6cb21cf074098a0b472079f789aa105ead4a94274f93d408795ffa24b29c1baa9dcf2a2e1cb96ed48"], 0x10}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="02120000020500000000ffff00000000"], 0x10}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) capget(&(0x7f0000000340)={0x19980330}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 2.598979612s ago: executing program 9 (id=5962): timer_create(0x7, &(0x7f0000000280)={0x0, 0x3d, 0x1}, &(0x7f0000000300)=0x0) timer_gettime(r0, &(0x7f0000000340)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00ba0100380a040028d41280090001007600000000180002800600d76c411bd328c6eadf2e8fd83563e0bab19198c0e7ce6ab9682500000c00ebb88255535e21939a6eefcc48bbcf8e73ec92ef21416346e67879ffc2481b70570400000055cf76fb4bfa375c6bdfcce6d5425812f55056727a5f30de36514e12471e175f83ed7a0fd15deb", @ANYRES32=r2, @ANYBLOB="0500110002000000"], 0x58}}, 0x8000002) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000001100000000005aa3bf0f37ac0e8f2519059f784f0837e9f5362b3ebe493213a4cec4bab68a4f290a376de41f6cf1edea024a113ad708d54b4e3845c62944e386ff40d6ae45dcfc241088c8b62e243d0d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x200000, 0x0) bind$vsock_stream(r5, &(0x7f0000000540)={0x28, 0x0, 0xffffffff, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet6(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) syz_io_uring_setup(0x28d2, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000004c0)={0x1, &(0x7f0000000240)=[{0x2, 0x1, 0x5, 0x4e6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) 2.385649779s ago: executing program 9 (id=5964): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x108) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.347354892s ago: executing program 0 (id=5965): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) syz_io_uring_setup(0x1881, &(0x7f0000000880)={0x0, 0x17ec, 0x400, 0x2, 0x3c2}, &(0x7f0000000580), &(0x7f0000000900)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000140)={0x4, 0x0, {0x0, 0x0, 0xfffffffe, 0x18, 0xfffffffe, 0x60}}) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.265140418s ago: executing program 9 (id=5967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x5}, 0x18) r2 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r4, 0x0, 0x200000000000006}, 0x18) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r5, r5, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000240)={'pim6reg0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r9}, 0x18) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) r11 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) rt_sigsuspend(&(0x7f0000000000), 0x8) tkill(r11, 0x16) tkill(r2, 0x7) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214000000110001"], 0xe4}}, 0x200000d4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x5, 0x80510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x8}, 0x200, 0x10000, 0x0, 0x0, 0x9, 0x20004, 0xc, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.862461771s ago: executing program 3 (id=5968): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x94) (async) r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='((!)') (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010471bc30b00000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001001000000000000000000000000208000a00f0"], 0x54}}, 0x40000084) (rerun: 64) 1.414306627s ago: executing program 5 (id=5970): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000380)=0x2) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 1.345591432s ago: executing program 1 (id=5973): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) (async) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520002a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000003000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000012"], 0x48) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000000400850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3b}, @initr0]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) (rerun: 64) 1.301893076s ago: executing program 0 (id=5974): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000001700)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) (fail_nth: 6) 1.274065598s ago: executing program 3 (id=5975): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) close_range(r2, 0xffffffffffffffff, 0x0) 1.271934648s ago: executing program 0 (id=5976): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2c800000080000000c000000ffffffff0100000076c4a7ddddb6231978f9d7118ac4133a9c1d1b00aec98a7ef4ef7ef0f9e000c38bafd827235065e252876b32abbdfc908628b360d83de5474e58c6579d500d1ced1280ebf2d5698325ca916f211c6e34457b7d7cb60750bf62f32b05d67ae163cd06c23cd3e6e437b448efdd864d7d7fa377a93a5b4c487b9c19ef322cf5ef84b78cc3a1f42ae658a3be148137c7260ee7f6b0229a911faaf6ecef088b562f170fe143f971b8b81243f6f8648f6136432115b76e3967", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000000000)="04", 0x1) r3 = syz_usbip_server_init(0x5) sendfile(r3, r1, 0x0, 0x8349) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000500000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r4, r0}, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e0095e5028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) 1.261255009s ago: executing program 9 (id=5977): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x17e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xd, &(0x7f0000000b40)=@framed={{}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x4}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}]}, &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) unshare(0x2c060000) unshare(0x2c020400) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) lseek(r1, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket$inet6(0xa, 0x3, 0x8000000003c) r7 = syz_io_uring_setup(0x747f, &(0x7f0000000980)={0x0, 0x2b0c, 0x100, 0x3, 0x3ce}, &(0x7f0000000400), &(0x7f0000000a00)) syz_io_uring_setup(0x7290, &(0x7f0000000a40)={0x0, 0xd257, 0x20000, 0x0, 0x1af, 0x0, r7}, &(0x7f0000000ac0), &(0x7f0000000b00)) sendfile(0xffffffffffffffff, r1, 0x0, 0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r6, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0xffa6, 0x0, 0xd0}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) pipe2(&(0x7f00000000c0), 0x0) epoll_create1(0x80000) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) 1.070702414s ago: executing program 5 (id=5978): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x108) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.014245669s ago: executing program 3 (id=5979): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) close_range(r2, 0xffffffffffffffff, 0x0) (fail_nth: 1) 931.023936ms ago: executing program 1 (id=5980): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) fchmodat(0xffffffffffffffff, &(0x7f0000000200)='./file0/../file0\x00', 0x10c) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e21, @loopback}}}, 0x90) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r9}, 0x18) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x4}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) close_range(r2, 0xffffffffffffffff, 0x0) 809.792555ms ago: executing program 5 (id=5981): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000700), 0x3, 0x4de, &(0x7f0000001080)="$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") newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3800) chown(&(0x7f0000000040)='./file1\x00', r0, r1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@discard}]}, 0x1, 0x609, &(0x7f0000000f80)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0xd9726125b1b199f, &(0x7f00000005c0)={[{@acl}, {@nomblk_io_submit}, {@lazytime}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@journal_async_commit}, {@nobh}, {@block_validity}]}, 0x66, 0x51c, &(0x7f0000001740)="$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") syz_usb_disconnect(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='mr_alloc\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000180081084e81f782db44b904021d0800fd007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffec62070000cbee5de6ccd44a677575a62cef352a92954b43370e9701ee1b6ec75a526c5d5b5701cf8773", 0xd8}], 0x1}, 0x400c0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="021300000200000000000000000000005274397444bac91ed587d3decfbc88658e0f128db10bec1c738dfd35f251456a4ffd89a877779e90ef7e2dcb73242afd2d15790f1da20c0b7d5124f4896b8d624590b00480e9df798c0a63339d7b5b275eaf51317f9d35afe70812065a0b4eb01b11dec75b08174af0e81afcd2d6d81d93ac69e184eab93fff474239691cb380277c12ec092c9230c5dcb324459b70162d689bbad7a6cb21cf074098a0b472079f789aa105ead4a94274f93d408795ffa24b29c1baa9dcf2a2e1cb96ed48"], 0x10}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="02120000020500000000ffff00000000"], 0x10}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) capget(&(0x7f0000000340)={0x19980330}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 325.392304ms ago: executing program 9 (id=5982): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x67, 0x0, &(0x7f00000010c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xf8, 0x587, &(0x7f0000002100)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mlockall(0x7) shutdown(r0, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000200)={@id={0x2, 0x0, @auto="7f4985c7bef7c104e0a3685144698767"}}) open$dir(&(0x7f0000000400)='./file1\x00', 0x400, 0x140) 257.962049ms ago: executing program 3 (id=5983): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x240800, 0x40) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) 257.479119ms ago: executing program 3 (id=5984): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) statx(0xffffffffffffffff, 0x0, 0x6000, 0x400, 0x0) 245.30418ms ago: executing program 3 (id=5985): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0xffffffffffffff22, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x76) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x6}, 0x18) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) 148.712368ms ago: executing program 1 (id=5986): creat(&(0x7f0000000080)='./file0\x00', 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2], 0x52) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f0000000780)={[{@nodelalloc}, {@min_batch_time}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@noblock_validity}]}, 0xfe, 0x4f7, &(0x7f0000000180)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) socket$packet(0x11, 0x3, 0x300) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0xb, &(0x7f0000000800)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='reclaim_retry_zone\x00', r5}, 0x18) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0) r6 = getegid() keyctl$chown(0x4, 0x0, 0x0, r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 61.563545ms ago: executing program 1 (id=5987): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}], 0x1, 0x44008004) (fail_nth: 6) 27.314658ms ago: executing program 1 (id=5988): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='block_bio_complete\x00', r0, 0x0, 0x1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="18"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x2f}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0xf, 0x4) setrlimit(0x7, 0x0) 0s ago: executing program 1 (id=5989): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000380)=0x2) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) kernel console output (not intermixed with test programs): kaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 260.515903][T18265] Tainted: [W]=WARN [ 260.515911][T18265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 260.515986][T18265] Call Trace: [ 260.515994][T18265] [ 260.516003][T18265] __dump_stack+0x1d/0x30 [ 260.516029][T18265] dump_stack_lvl+0xe8/0x140 [ 260.516048][T18265] dump_stack+0x15/0x1b [ 260.516066][T18265] should_fail_ex+0x265/0x280 [ 260.516086][T18265] should_fail+0xb/0x20 [ 260.516103][T18265] should_fail_usercopy+0x1a/0x20 [ 260.516125][T18265] _copy_to_user+0x20/0xa0 [ 260.516150][T18265] simple_read_from_buffer+0xb5/0x130 [ 260.516247][T18265] proc_fail_nth_read+0x10e/0x150 [ 260.516274][T18265] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.516300][T18265] vfs_read+0x1a8/0x770 [ 260.516385][T18265] ? __rcu_read_unlock+0x4f/0x70 [ 260.516408][T18265] ? __fget_files+0x184/0x1c0 [ 260.516441][T18265] ksys_read+0xda/0x1a0 [ 260.516490][T18265] __x64_sys_read+0x40/0x50 [ 260.516509][T18265] x64_sys_call+0x27bc/0x2ff0 [ 260.516528][T18265] do_syscall_64+0xd2/0x200 [ 260.516574][T18265] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 260.516598][T18265] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 260.516697][T18265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.516720][T18265] RIP: 0033:0x7ffb1d6fd5fc [ 260.516790][T18265] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 260.516809][T18265] RSP: 002b:00007ffb1c167030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 260.516831][T18265] RAX: ffffffffffffffda RBX: 00007ffb1d925fa0 RCX: 00007ffb1d6fd5fc [ 260.516844][T18265] RDX: 000000000000000f RSI: 00007ffb1c1670a0 RDI: 0000000000000007 [ 260.516856][T18265] RBP: 00007ffb1c167090 R08: 0000000000000000 R09: 0000000000000000 [ 260.516868][T18265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.516879][T18265] R13: 00007ffb1d926038 R14: 00007ffb1d925fa0 R15: 00007fff331c8d78 [ 260.516917][T18265] [ 260.773676][T13868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.793491][T18258] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.831959][T18258] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.865913][T13874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.992491][T18300] FAULT_INJECTION: forcing a failure. [ 260.992491][T18300] name failslab, interval 1, probability 0, space 0, times 0 [ 261.005732][T18300] CPU: 0 UID: 0 PID: 18300 Comm: syz.5.5611 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 261.005774][T18300] Tainted: [W]=WARN [ 261.005781][T18300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 261.005795][T18300] Call Trace: [ 261.005801][T18300] [ 261.005809][T18300] __dump_stack+0x1d/0x30 [ 261.005834][T18300] dump_stack_lvl+0xe8/0x140 [ 261.005855][T18300] dump_stack+0x15/0x1b [ 261.005872][T18300] should_fail_ex+0x265/0x280 [ 261.005895][T18300] should_failslab+0x8c/0xb0 [ 261.005921][T18300] kmem_cache_alloc_noprof+0x50/0x310 [ 261.005949][T18300] ? vm_area_alloc+0x2c/0xb0 [ 261.005975][T18300] vm_area_alloc+0x2c/0xb0 [ 261.006002][T18300] mmap_region+0xaa2/0x1630 [ 261.006049][T18300] do_mmap+0x9b3/0xbe0 [ 261.006080][T18300] vm_mmap_pgoff+0x17a/0x2e0 [ 261.006108][T18300] ksys_mmap_pgoff+0xc2/0x310 [ 261.006137][T18300] ? __x64_sys_mmap+0x49/0x70 [ 261.006162][T18300] x64_sys_call+0x14a3/0x2ff0 [ 261.006183][T18300] do_syscall_64+0xd2/0x200 [ 261.006206][T18300] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 261.006227][T18300] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 261.006249][T18300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.006271][T18300] RIP: 0033:0x7feea399ec23 [ 261.006287][T18300] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 261.006306][T18300] RSP: 002b:00007feea2406e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 261.006328][T18300] RAX: ffffffffffffffda RBX: 0000000000000517 RCX: 00007feea399ec23 [ 261.006340][T18300] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 261.006351][T18300] RBP: 00002000000009c2 R08: 00000000ffffffff R09: 0000000000000000 [ 261.006364][T18300] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 261.006378][T18300] R13: 00007feea2406ef0 R14: 00007feea2406eb0 R15: 0000200000000100 [ 261.006398][T18300] [ 261.255397][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 261.255457][ T29] audit: type=1400 audit(1755508842.141:15133): avc: denied { write } for pid=18306 comm="syz.5.5622" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 261.294958][T18309] block device autoloading is deprecated and will be removed. [ 261.400428][ T29] audit: type=1400 audit(1755508842.281:15134): avc: denied { remount } for pid=18257 comm="syz.9.5597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 261.430981][T18258] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 261.453498][ T29] audit: type=1326 audit(1755508842.331:15135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18257 comm="syz.9.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f035ebe9 code=0x7ffc0000 [ 261.477824][ T29] audit: type=1326 audit(1755508842.331:15136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18257 comm="syz.9.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f035ebe9 code=0x7ffc0000 [ 261.502615][ T29] audit: type=1326 audit(1755508842.331:15137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18257 comm="syz.9.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6f035ebe9 code=0x7ffc0000 [ 261.526671][ T29] audit: type=1326 audit(1755508842.331:15138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18257 comm="syz.9.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f035ebe9 code=0x7ffc0000 [ 261.550831][ T29] audit: type=1326 audit(1755508842.331:15139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18257 comm="syz.9.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f035ebe9 code=0x7ffc0000 [ 261.575649][ T29] audit: type=1326 audit(1755508842.331:15140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18257 comm="syz.9.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6f035ebe9 code=0x7ffc0000 [ 261.600778][ T29] audit: type=1326 audit(1755508842.331:15141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18257 comm="syz.9.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f035ebe9 code=0x7ffc0000 [ 261.625519][ T29] audit: type=1326 audit(1755508842.331:15142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18257 comm="syz.9.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f035ebe9 code=0x7ffc0000 [ 261.983048][T18334] bridge0: port 3(bond0) entered disabled state [ 261.990441][T18334] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.998093][T18334] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.035369][T18334] bridge0: port 3(bond0) entered blocking state [ 262.042051][T18334] bridge0: port 3(bond0) entered forwarding state [ 262.048919][T18334] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.056229][T18334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.063935][T18334] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.071242][T18334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.131881][T18320] loop3: detected capacity change from 0 to 32768 [ 262.139600][T18334] bridge0: port 3(bond0) entered disabled state [ 262.146066][T18334] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.153308][T18334] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.200111][T17977] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.265657][T18350] FAULT_INJECTION: forcing a failure. [ 262.265657][T18350] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 262.279166][T18350] CPU: 0 UID: 0 PID: 18350 Comm: syz.9.5623 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 262.279206][T18350] Tainted: [W]=WARN [ 262.279215][T18350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.279228][T18350] Call Trace: [ 262.279237][T18350] [ 262.279246][T18350] __dump_stack+0x1d/0x30 [ 262.279270][T18350] dump_stack_lvl+0xe8/0x140 [ 262.279287][T18350] dump_stack+0x15/0x1b [ 262.279339][T18350] should_fail_ex+0x265/0x280 [ 262.279364][T18350] should_fail_alloc_page+0xf2/0x100 [ 262.279390][T18350] __alloc_frozen_pages_noprof+0xff/0x360 [ 262.279442][T18350] alloc_pages_mpol+0xb3/0x250 [ 262.279478][T18350] alloc_pages_noprof+0x90/0x130 [ 262.279511][T18350] __pud_alloc+0x47/0x4c0 [ 262.279544][T18350] handle_mm_fault+0x1882/0x2c20 [ 262.279565][T18350] ? __rcu_read_unlock+0x4f/0x70 [ 262.279595][T18350] do_user_addr_fault+0x3fe/0x1090 [ 262.279719][T18350] exc_page_fault+0x62/0xa0 [ 262.279743][T18350] asm_exc_page_fault+0x26/0x30 [ 262.279761][T18350] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 262.279797][T18350] Code: c4 10 e9 c4 f6 01 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d f6 01 00 66 2e [ 262.279817][T18350] RSP: 0018:ffffc90002553c40 EFLAGS: 00050202 [ 262.279856][T18350] RAX: ffff888116c24ca0 RBX: 0000000000000004 RCX: 0000000000000004 [ 262.279922][T18350] RDX: 0000000000000001 RSI: 0000200000000340 RDI: ffffc90002553ccc [ 262.279937][T18350] RBP: 0000000000000001 R08: 00000000000001de R09: 0000000000000000 [ 262.279952][T18350] R10: 0001c90002553ccc R11: 0001c90002553ccf R12: 0000200000000340 [ 262.279968][T18350] R13: 0000000000000039 R14: ffffc90002553ccc R15: 0000200000000340 [ 262.279987][T18350] _copy_from_user+0x6f/0xb0 [ 262.280018][T18350] do_ipv6_setsockopt+0x124/0x2160 [ 262.280088][T18350] ? kstrtoull+0x111/0x140 [ 262.280108][T18350] ? __rcu_read_unlock+0x4f/0x70 [ 262.280132][T18350] ? avc_has_perm_noaudit+0x1b1/0x200 [ 262.280193][T18350] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 262.280229][T18350] ipv6_setsockopt+0x59/0x130 [ 262.280247][T18350] tcp_setsockopt+0x95/0xb0 [ 262.280270][T18350] sock_common_setsockopt+0x69/0x80 [ 262.280362][T18350] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 262.280392][T18350] __sys_setsockopt+0x181/0x200 [ 262.280443][T18350] __x64_sys_setsockopt+0x64/0x80 [ 262.280465][T18350] x64_sys_call+0x20ec/0x2ff0 [ 262.280546][T18350] do_syscall_64+0xd2/0x200 [ 262.280572][T18350] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 262.280595][T18350] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 262.280692][T18350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.280715][T18350] RIP: 0033:0x7fc6f035ebe9 [ 262.280733][T18350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.280751][T18350] RSP: 002b:00007fc6eedc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 262.280777][T18350] RAX: ffffffffffffffda RBX: 00007fc6f0585fa0 RCX: 00007fc6f035ebe9 [ 262.280790][T18350] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000003 [ 262.280803][T18350] RBP: 00007fc6eedc7090 R08: 0000000000000048 R09: 0000000000000000 [ 262.280816][T18350] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 262.280830][T18350] R13: 00007fc6f0586038 R14: 00007fc6f0585fa0 R15: 00007ffca7a867c8 [ 262.280927][T18350] [ 262.689158][T18366] validate_nla: 4 callbacks suppressed [ 262.689179][T18366] netlink: 'syz.9.5629': attribute type 2 has an invalid length. [ 262.702937][T18366] netlink: 'syz.9.5629': attribute type 1 has an invalid length. [ 262.711018][T18366] __nla_validate_parse: 14 callbacks suppressed [ 262.711058][T18366] netlink: 199820 bytes leftover after parsing attributes in process `syz.9.5629'. [ 262.768229][T18372] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5627'. [ 262.770228][T18378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5634'. [ 262.945725][T13857] net_ratelimit: 60 callbacks suppressed [ 262.945745][T13857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.105223][T18399] loop3: detected capacity change from 0 to 2048 [ 263.115576][T18397] block device autoloading is deprecated and will be removed. [ 263.151701][T18399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.173416][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5643'. [ 263.217849][T14843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.226568][T18413] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5645'. [ 263.336321][T18426] loop3: detected capacity change from 0 to 512 [ 263.344686][T18421] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5649'. [ 263.364113][T18429] netlink: 'syz.9.5652': attribute type 2 has an invalid length. [ 263.372378][T18429] netlink: 'syz.9.5652': attribute type 1 has an invalid length. [ 263.380574][T18429] netlink: 199820 bytes leftover after parsing attributes in process `syz.9.5652'. [ 263.390766][T18430] FAULT_INJECTION: forcing a failure. [ 263.390766][T18430] name failslab, interval 1, probability 0, space 0, times 0 [ 263.404086][T18430] CPU: 0 UID: 0 PID: 18430 Comm: syz.1.5650 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 263.404200][T18430] Tainted: [W]=WARN [ 263.404207][T18430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.404221][T18430] Call Trace: [ 263.404230][T18430] [ 263.404240][T18430] __dump_stack+0x1d/0x30 [ 263.404267][T18430] dump_stack_lvl+0xe8/0x140 [ 263.404289][T18430] dump_stack+0x15/0x1b [ 263.404306][T18430] should_fail_ex+0x265/0x280 [ 263.404383][T18430] should_failslab+0x8c/0xb0 [ 263.404409][T18430] kmem_cache_alloc_node_noprof+0x57/0x320 [ 263.404436][T18430] ? __alloc_skb+0x101/0x320 [ 263.404502][T18430] ? __rtnl_unlock+0x95/0xb0 [ 263.404612][T18430] __alloc_skb+0x101/0x320 [ 263.404718][T18430] netlink_ack+0xfd/0x500 [ 263.404739][T18430] netlink_rcv_skb+0x192/0x220 [ 263.404755][T18430] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 263.404872][T18430] rtnetlink_rcv+0x1c/0x30 [ 263.404897][T18430] netlink_unicast+0x5bd/0x690 [ 263.405206][T18430] netlink_sendmsg+0x58b/0x6b0 [ 263.405245][T18430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.405269][T18430] __sock_sendmsg+0x142/0x180 [ 263.405306][T18430] ____sys_sendmsg+0x31e/0x4e0 [ 263.405330][T18430] ___sys_sendmsg+0x17b/0x1d0 [ 263.405362][T18430] __x64_sys_sendmsg+0xd4/0x160 [ 263.405401][T18430] x64_sys_call+0x191e/0x2ff0 [ 263.405423][T18430] do_syscall_64+0xd2/0x200 [ 263.405447][T18430] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 263.405480][T18430] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 263.405504][T18430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.405524][T18430] RIP: 0033:0x7f5d0b59ebe9 [ 263.405540][T18430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.405557][T18430] RSP: 002b:00007f5d09fde038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.405599][T18430] RAX: ffffffffffffffda RBX: 00007f5d0b7c6090 RCX: 00007f5d0b59ebe9 [ 263.405613][T18430] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 263.405627][T18430] RBP: 00007f5d09fde090 R08: 0000000000000000 R09: 0000000000000000 [ 263.405641][T18430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.405655][T18430] R13: 00007f5d0b7c6128 R14: 00007f5d0b7c6090 R15: 00007ffe0dc35398 [ 263.405675][T18430] [ 263.725974][T18442] netlink: 16402 bytes leftover after parsing attributes in process `,$.-%^-@[#&#'. [ 263.753761][T18446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5658'. [ 263.810134][T18449] loop3: detected capacity change from 0 to 512 [ 263.834365][T13852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.857191][T18450] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 263.863784][T18450] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 263.871515][T18450] vhci_hcd vhci_hcd.0: Device attached [ 263.910397][T18462] netlink: 'syz.9.5663': attribute type 2 has an invalid length. [ 263.912164][T18450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5659'. [ 263.918495][T18462] netlink: 'syz.9.5663': attribute type 1 has an invalid length. [ 263.984572][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.986728][T18473] FAULT_INJECTION: forcing a failure. [ 263.986728][T18473] name failslab, interval 1, probability 0, space 0, times 0 [ 264.006509][T18473] CPU: 0 UID: 0 PID: 18473 Comm: syz.5.5667 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 264.006585][T18473] Tainted: [W]=WARN [ 264.006668][T18473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.006681][T18473] Call Trace: [ 264.006690][T18473] [ 264.006700][T18473] __dump_stack+0x1d/0x30 [ 264.006726][T18473] dump_stack_lvl+0xe8/0x140 [ 264.006748][T18473] dump_stack+0x15/0x1b [ 264.006767][T18473] should_fail_ex+0x265/0x280 [ 264.006856][T18473] should_failslab+0x8c/0xb0 [ 264.006879][T18473] kmem_cache_alloc_node_noprof+0x57/0x320 [ 264.006908][T18473] ? __alloc_skb+0x101/0x320 [ 264.007060][T18473] __alloc_skb+0x101/0x320 [ 264.007090][T18473] ? audit_log_start+0x365/0x6c0 [ 264.007189][T18473] audit_log_start+0x380/0x6c0 [ 264.007216][T18473] ? shmem_setattr+0x64f/0x840 [ 264.007296][T18473] audit_seccomp+0x48/0x100 [ 264.007320][T18473] ? __seccomp_filter+0x68c/0x10d0 [ 264.007420][T18473] __seccomp_filter+0x69d/0x10d0 [ 264.007719][T18473] ? mntput_no_expire+0x6f/0x460 [ 264.007843][T18473] ? mntput+0x4b/0x80 [ 264.007874][T18473] __secure_computing+0x82/0x150 [ 264.007907][T18473] syscall_trace_enter+0xcf/0x1e0 [ 264.007944][T18473] do_syscall_64+0xac/0x200 [ 264.008117][T18473] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 264.008201][T18473] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 264.008265][T18473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.008464][T18473] RIP: 0033:0x7feea399d5fc [ 264.008490][T18473] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 264.008573][T18473] RSP: 002b:00007feea2407030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 264.008595][T18473] RAX: ffffffffffffffda RBX: 00007feea3bc5fa0 RCX: 00007feea399d5fc [ 264.008608][T18473] RDX: 000000000000000f RSI: 00007feea24070a0 RDI: 0000000000000008 [ 264.008679][T18473] RBP: 00007feea2407090 R08: 0000000000000000 R09: 0000000000000000 [ 264.008693][T18473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.008704][T18473] R13: 00007feea3bc6038 R14: 00007feea3bc5fa0 R15: 00007ffcb880ddb8 [ 264.008725][T18473] [ 264.402288][T13867] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 264.702119][T18455] vhci_hcd: connection reset by peer [ 264.713978][ T4652] vhci_hcd: stop threads [ 264.718530][ T4652] vhci_hcd: release socket [ 264.723097][ T4652] vhci_hcd: disconnect device [ 264.743679][T18542] FAULT_INJECTION: forcing a failure. [ 264.743679][T18542] name failslab, interval 1, probability 0, space 0, times 0 [ 264.756889][T18542] CPU: 1 UID: 0 PID: 18542 Comm: syz.5.5678 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 264.756962][T18542] Tainted: [W]=WARN [ 264.756970][T18542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.756984][T18542] Call Trace: [ 264.756994][T18542] [ 264.757004][T18542] __dump_stack+0x1d/0x30 [ 264.757064][T18542] dump_stack_lvl+0xe8/0x140 [ 264.757167][T18542] dump_stack+0x15/0x1b [ 264.757183][T18542] should_fail_ex+0x265/0x280 [ 264.757209][T18542] should_failslab+0x8c/0xb0 [ 264.757238][T18542] __kmalloc_noprof+0xa5/0x3e0 [ 264.757264][T18542] ? ethnl_default_doit+0x112/0x970 [ 264.757333][T18542] ethnl_default_doit+0x112/0x970 [ 264.757358][T18542] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 264.757442][T18542] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 264.757501][T18542] genl_family_rcv_msg_doit+0x143/0x1b0 [ 264.757538][T18542] genl_rcv_msg+0x422/0x460 [ 264.757636][T18542] ? __pfx_ethnl_default_doit+0x10/0x10 [ 264.757661][T18542] netlink_rcv_skb+0x123/0x220 [ 264.757682][T18542] ? __pfx_genl_rcv_msg+0x10/0x10 [ 264.757711][T18542] genl_rcv+0x28/0x40 [ 264.757801][T18542] netlink_unicast+0x5bd/0x690 [ 264.757835][T18542] netlink_sendmsg+0x58b/0x6b0 [ 264.757860][T18542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.757883][T18542] __sock_sendmsg+0x142/0x180 [ 264.757976][T18542] ____sys_sendmsg+0x31e/0x4e0 [ 264.757999][T18542] ___sys_sendmsg+0x17b/0x1d0 [ 264.758112][T18542] __x64_sys_sendmsg+0xd4/0x160 [ 264.758135][T18542] x64_sys_call+0x191e/0x2ff0 [ 264.758233][T18542] do_syscall_64+0xd2/0x200 [ 264.758263][T18542] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 264.758291][T18542] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 264.758344][T18542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.758364][T18542] RIP: 0033:0x7feea399ebe9 [ 264.758394][T18542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.758414][T18542] RSP: 002b:00007feea2407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.758434][T18542] RAX: ffffffffffffffda RBX: 00007feea3bc5fa0 RCX: 00007feea399ebe9 [ 264.758446][T18542] RDX: 0000000004008800 RSI: 0000200000000840 RDI: 0000000000000005 [ 264.758458][T18542] RBP: 00007feea2407090 R08: 0000000000000000 R09: 0000000000000000 [ 264.758470][T18542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.758485][T18542] R13: 00007feea3bc6038 R14: 00007feea3bc5fa0 R15: 00007ffcb880ddb8 [ 264.758515][T18542] [ 265.030664][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.213139][T18551] netlink: 'syz.9.5680': attribute type 2 has an invalid length. [ 265.221183][T18551] netlink: 'syz.9.5680': attribute type 1 has an invalid length. [ 265.404670][T18546] netlink: 'syz.5.5679': attribute type 21 has an invalid length. [ 265.533779][T18575] smc: net device bond0 applied user defined pnetid SYZ2 [ 265.894266][T18592] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.987369][T18592] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.057490][T18592] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.117064][T18592] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.301523][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.328501][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.338609][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.356117][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.529517][T18599] netlink: 'syz.5.5691': attribute type 21 has an invalid length. [ 266.555016][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 266.555096][ T29] audit: type=1326 audit(1755508847.441:15403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.5.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 266.585397][ T29] audit: type=1326 audit(1755508847.441:15404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.5.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 266.609673][ T29] audit: type=1326 audit(1755508847.441:15405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.5.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 266.633379][ T29] audit: type=1326 audit(1755508847.441:15406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.5.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 266.657223][ T29] audit: type=1326 audit(1755508847.441:15407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.5.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 266.681012][ T29] audit: type=1326 audit(1755508847.441:15408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.5.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 266.704852][ T29] audit: type=1326 audit(1755508847.441:15409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.5.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 266.729203][ T29] audit: type=1326 audit(1755508847.441:15410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.5.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 266.753175][ T29] audit: type=1326 audit(1755508847.441:15411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.5.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 266.777291][ T29] audit: type=1326 audit(1755508847.441:15412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.5.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 266.815219][T13875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.942217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.062043][T18618] FAULT_INJECTION: forcing a failure. [ 267.062043][T18618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.075752][T18618] CPU: 1 UID: 0 PID: 18618 Comm: syz.9.5698 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 267.075827][T18618] Tainted: [W]=WARN [ 267.075835][T18618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.075849][T18618] Call Trace: [ 267.075858][T18618] [ 267.075867][T18618] __dump_stack+0x1d/0x30 [ 267.075964][T18618] dump_stack_lvl+0xe8/0x140 [ 267.075990][T18618] dump_stack+0x15/0x1b [ 267.076006][T18618] should_fail_ex+0x265/0x280 [ 267.076026][T18618] should_fail+0xb/0x20 [ 267.076044][T18618] should_fail_usercopy+0x1a/0x20 [ 267.076070][T18618] _copy_to_user+0x20/0xa0 [ 267.076139][T18618] simple_read_from_buffer+0xb5/0x130 [ 267.076281][T18618] proc_fail_nth_read+0x10e/0x150 [ 267.076306][T18618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.076329][T18618] vfs_read+0x1a8/0x770 [ 267.076352][T18618] ? __rcu_read_unlock+0x4f/0x70 [ 267.076378][T18618] ? __fget_files+0x184/0x1c0 [ 267.076436][T18618] ksys_read+0xda/0x1a0 [ 267.076537][T18618] __x64_sys_read+0x40/0x50 [ 267.076577][T18618] x64_sys_call+0x27bc/0x2ff0 [ 267.076654][T18618] do_syscall_64+0xd2/0x200 [ 267.076688][T18618] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 267.076714][T18618] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 267.076791][T18618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.076812][T18618] RIP: 0033:0x7fc6f035d5fc [ 267.076839][T18618] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 267.076864][T18618] RSP: 002b:00007fc6eedc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 267.076888][T18618] RAX: ffffffffffffffda RBX: 00007fc6f0585fa0 RCX: 00007fc6f035d5fc [ 267.076903][T18618] RDX: 000000000000000f RSI: 00007fc6eedc70a0 RDI: 0000000000000006 [ 267.076917][T18618] RBP: 00007fc6eedc7090 R08: 0000000000000000 R09: 0000000000000000 [ 267.076929][T18618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.076959][T18618] R13: 00007fc6f0586038 R14: 00007fc6f0585fa0 R15: 00007ffca7a867c8 [ 267.077010][T18618] [ 267.401150][T18626] FAULT_INJECTION: forcing a failure. [ 267.401150][T18626] name failslab, interval 1, probability 0, space 0, times 0 [ 267.414224][T18626] CPU: 1 UID: 0 PID: 18626 Comm: syz.1.5702 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 267.414265][T18626] Tainted: [W]=WARN [ 267.414273][T18626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.414378][T18626] Call Trace: [ 267.414389][T18626] [ 267.414400][T18626] __dump_stack+0x1d/0x30 [ 267.414427][T18626] dump_stack_lvl+0xe8/0x140 [ 267.414445][T18626] dump_stack+0x15/0x1b [ 267.414461][T18626] should_fail_ex+0x265/0x280 [ 267.414499][T18626] should_failslab+0x8c/0xb0 [ 267.414525][T18626] __kmalloc_noprof+0xa5/0x3e0 [ 267.414549][T18626] ? security_inode_init_security+0xc5/0x330 [ 267.414628][T18626] ? current_umask+0x2f/0x40 [ 267.414654][T18626] security_inode_init_security+0xc5/0x330 [ 267.414682][T18626] ? __pfx_shmem_initxattrs+0x10/0x10 [ 267.414743][T18626] shmem_mknod+0xad/0x180 [ 267.414769][T18626] shmem_mkdir+0x33/0x70 [ 267.414840][T18626] vfs_mkdir+0x213/0x340 [ 267.414865][T18626] do_mkdirat+0x132/0x3f0 [ 267.414889][T18626] __x64_sys_mkdir+0x42/0x50 [ 267.414912][T18626] x64_sys_call+0x2daa/0x2ff0 [ 267.414942][T18626] do_syscall_64+0xd2/0x200 [ 267.414966][T18626] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 267.415067][T18626] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 267.415094][T18626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.415119][T18626] RIP: 0033:0x7f5d0b59ebe9 [ 267.415175][T18626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.415245][T18626] RSP: 002b:00007f5d09fff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 267.415277][T18626] RAX: ffffffffffffffda RBX: 00007f5d0b7c5fa0 RCX: 00007f5d0b59ebe9 [ 267.415289][T18626] RDX: 0000000000000000 RSI: be9bac6d2d0f4e0b RDI: 0000200000000000 [ 267.415301][T18626] RBP: 00007f5d09fff090 R08: 0000000000000000 R09: 0000000000000000 [ 267.415314][T18626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.415393][T18626] R13: 00007f5d0b7c6038 R14: 00007f5d0b7c5fa0 R15: 00007ffe0dc35398 [ 267.415415][T18626] [ 267.767037][T18636] validate_nla: 2 callbacks suppressed [ 267.767131][T18636] netlink: 'syz.9.5708': attribute type 2 has an invalid length. [ 267.780661][T18636] netlink: 'syz.9.5708': attribute type 1 has an invalid length. [ 267.788460][T18636] __nla_validate_parse: 10 callbacks suppressed [ 267.788477][T18636] netlink: 199820 bytes leftover after parsing attributes in process `syz.9.5708'. [ 268.176544][T18649] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5713'. [ 268.293026][T13868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.301461][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.309740][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.567129][T18635] Set syz1 is full, maxelem 65536 reached [ 268.702430][T18678] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5725'. [ 268.723176][T18680] loop9: detected capacity change from 0 to 512 [ 268.723795][T18682] FAULT_INJECTION: forcing a failure. [ 268.723795][T18682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.743898][T18682] CPU: 0 UID: 0 PID: 18682 Comm: syz.1.5726 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 268.743966][T18682] Tainted: [W]=WARN [ 268.743974][T18682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.743988][T18682] Call Trace: [ 268.743997][T18682] [ 268.744085][T18682] __dump_stack+0x1d/0x30 [ 268.744117][T18682] dump_stack_lvl+0xe8/0x140 [ 268.744138][T18682] dump_stack+0x15/0x1b [ 268.744218][T18682] should_fail_ex+0x265/0x280 [ 268.744241][T18682] should_fail+0xb/0x20 [ 268.744261][T18682] should_fail_usercopy+0x1a/0x20 [ 268.744286][T18682] _copy_from_user+0x1c/0xb0 [ 268.744313][T18682] ___sys_sendmsg+0xc1/0x1d0 [ 268.744375][T18682] __x64_sys_sendmsg+0xd4/0x160 [ 268.744404][T18682] x64_sys_call+0x191e/0x2ff0 [ 268.744428][T18682] do_syscall_64+0xd2/0x200 [ 268.744517][T18682] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 268.744544][T18682] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 268.744639][T18682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.744662][T18682] RIP: 0033:0x7f5d0b59ebe9 [ 268.744679][T18682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.744699][T18682] RSP: 002b:00007f5d09fff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.744733][T18682] RAX: ffffffffffffffda RBX: 00007f5d0b7c5fa0 RCX: 00007f5d0b59ebe9 [ 268.744747][T18682] RDX: 0000000000004004 RSI: 0000200000000040 RDI: 0000000000000003 [ 268.744771][T18682] RBP: 00007f5d09fff090 R08: 0000000000000000 R09: 0000000000000000 [ 268.744848][T18682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.744861][T18682] R13: 00007f5d0b7c6038 R14: 00007f5d0b7c5fa0 R15: 00007ffe0dc35398 [ 268.744880][T18682] [ 269.225948][T18705] netlink: 'syz.1.5735': attribute type 4 has an invalid length. [ 269.279542][T18714] SELinux: security_context_str_to_sid () failed with errno=-22 [ 269.344437][T13875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.345058][T18714] lo: entered allmulticast mode [ 269.365786][T18714] tunl0: entered allmulticast mode [ 269.372637][T18714] gre0: entered allmulticast mode [ 269.386678][T18714] gretap0: entered allmulticast mode [ 269.393461][T18714] erspan0: entered allmulticast mode [ 269.399657][T18714] ip_vti0: entered allmulticast mode [ 269.407797][T18714] ip6_vti0: entered allmulticast mode [ 269.415702][T18714] sit0: entered allmulticast mode [ 269.422889][T13867] usb 7-1: enqueue for inactive port 0 [ 269.430860][T18714] ip6tnl0: entered allmulticast mode [ 269.437855][T13867] usb 7-1: enqueue for inactive port 0 [ 269.445167][T18714] ip6gre0: entered allmulticast mode [ 269.452559][T18714] syz_tun: entered allmulticast mode [ 269.458519][T18724] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5741'. [ 269.458958][T18714] ip6gretap0: entered allmulticast mode [ 269.475273][T18714] bridge0: entered allmulticast mode [ 269.481399][T18714] vcan0: entered allmulticast mode [ 269.487414][T18714] bond0: entered allmulticast mode [ 269.492665][T18714] bond_slave_0: entered allmulticast mode [ 269.498487][T18714] bond_slave_1: entered allmulticast mode [ 269.507989][T18714] team0: entered allmulticast mode [ 269.513432][T18714] team_slave_0: entered allmulticast mode [ 269.519292][T18714] team_slave_1: entered allmulticast mode [ 269.527900][T13867] vhci_hcd: vhci_device speed not set [ 269.533806][T18714] dummy0: entered allmulticast mode [ 269.540154][T18714] nlmon0: entered allmulticast mode [ 269.546857][T18714] caif0: entered allmulticast mode [ 269.552183][T18714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.633234][T18738] FAULT_INJECTION: forcing a failure. [ 269.633234][T18738] name failslab, interval 1, probability 0, space 0, times 0 [ 269.646485][T18738] CPU: 0 UID: 0 PID: 18738 Comm: syz.1.5744 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 269.646587][T18738] Tainted: [W]=WARN [ 269.646640][T18738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.646648][T18738] Call Trace: [ 269.646654][T18738] [ 269.646661][T18738] __dump_stack+0x1d/0x30 [ 269.646752][T18738] dump_stack_lvl+0xe8/0x140 [ 269.646771][T18738] dump_stack+0x15/0x1b [ 269.646787][T18738] should_fail_ex+0x265/0x280 [ 269.646810][T18738] should_failslab+0x8c/0xb0 [ 269.646891][T18738] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 269.646912][T18738] ? kstrdup_const+0x3e/0x50 [ 269.646929][T18738] kstrdup+0x3e/0xd0 [ 269.646945][T18738] kstrdup_const+0x3e/0x50 [ 269.647001][T18738] kvasprintf_const+0x98/0x130 [ 269.647025][T18738] kobject_set_name_vargs+0x44/0xe0 [ 269.647124][T18738] kobject_init_and_add+0x11f/0x1f0 [ 269.647147][T18738] ? bus_add_driver+0x11f/0x450 [ 269.647170][T18738] bus_add_driver+0x1a7/0x450 [ 269.647257][T18738] driver_register+0x162/0x220 [ 269.647284][T18738] usb_gadget_register_driver_owner+0x92/0x1a0 [ 269.647352][T18738] raw_ioctl+0xc5c/0x1dc0 [ 269.647442][T18738] ? ioctl_has_perm+0x257/0x2a0 [ 269.647457][T18738] ? do_vfs_ioctl+0x866/0xe10 [ 269.647530][T18738] ? selinux_file_ioctl+0x308/0x3a0 [ 269.647543][T18738] ? __fget_files+0x184/0x1c0 [ 269.647560][T18738] ? __pfx_raw_ioctl+0x10/0x10 [ 269.647611][T18738] __se_sys_ioctl+0xcb/0x140 [ 269.647638][T18738] __x64_sys_ioctl+0x43/0x50 [ 269.647657][T18738] x64_sys_call+0x1816/0x2ff0 [ 269.647671][T18738] do_syscall_64+0xd2/0x200 [ 269.647717][T18738] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 269.647734][T18738] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 269.647769][T18738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.647784][T18738] RIP: 0033:0x7f5d0b59e7eb [ 269.647798][T18738] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 269.647835][T18738] RSP: 002b:00007f5d09ffcf10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.647851][T18738] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f5d0b59e7eb [ 269.647859][T18738] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 269.647920][T18738] RBP: 00007f5d09ffdfe0 R08: 0000000000000000 R09: 00312e6364755f79 [ 269.647932][T18738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.647950][T18738] R13: 00007f5d09ffcfb0 R14: 0000200000000740 R15: 00007f5d0b8f0320 [ 269.647970][T18738] [ 269.647978][T18738] kobject: can not set name properly! [ 269.720700][T18742] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 269.721648][T18738] UDC core: USB Raw Gadget: driver registration failed: -12 [ 269.721670][T18738] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 269.950055][T18742] program syz.3.5746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.064248][T18754] vhci_hcd: invalid port number 254 [ 270.069531][T18754] vhci_hcd: invalid port number 254 [ 270.125913][T18756] netlink: 'syz.5.5753': attribute type 2 has an invalid length. [ 270.133809][T18756] netlink: 'syz.5.5753': attribute type 1 has an invalid length. [ 270.141696][T18756] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.5753'. [ 270.151938][T13852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.355003][T18770] FAULT_INJECTION: forcing a failure. [ 270.355003][T18770] name failslab, interval 1, probability 0, space 0, times 0 [ 270.367950][T18770] CPU: 0 UID: 0 PID: 18770 Comm: syz.9.5758 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 270.368048][T18770] Tainted: [W]=WARN [ 270.368052][T18770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.368063][T18770] Call Trace: [ 270.368070][T18770] [ 270.368076][T18770] __dump_stack+0x1d/0x30 [ 270.368093][T18770] dump_stack_lvl+0xe8/0x140 [ 270.368144][T18770] dump_stack+0x15/0x1b [ 270.368154][T18770] should_fail_ex+0x265/0x280 [ 270.368169][T18770] should_failslab+0x8c/0xb0 [ 270.368186][T18770] kmem_cache_alloc_noprof+0x50/0x310 [ 270.368203][T18770] ? skb_clone+0x151/0x1f0 [ 270.368278][T18770] skb_clone+0x151/0x1f0 [ 270.368292][T18770] __netlink_deliver_tap+0x2c9/0x500 [ 270.368310][T18770] netlink_unicast+0x66b/0x690 [ 270.368355][T18770] netlink_sendmsg+0x58b/0x6b0 [ 270.368370][T18770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.368384][T18770] __sock_sendmsg+0x142/0x180 [ 270.368402][T18770] ____sys_sendmsg+0x31e/0x4e0 [ 270.368447][T18770] ___sys_sendmsg+0x17b/0x1d0 [ 270.368468][T18770] __x64_sys_sendmsg+0xd4/0x160 [ 270.368504][T18770] x64_sys_call+0x191e/0x2ff0 [ 270.368517][T18770] do_syscall_64+0xd2/0x200 [ 270.368538][T18770] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 270.368596][T18770] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 270.368643][T18770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.368658][T18770] RIP: 0033:0x7fc6f035ebe9 [ 270.368702][T18770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.368715][T18770] RSP: 002b:00007fc6eedc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.368730][T18770] RAX: ffffffffffffffda RBX: 00007fc6f0585fa0 RCX: 00007fc6f035ebe9 [ 270.368844][T18770] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 270.368853][T18770] RBP: 00007fc6eedc7090 R08: 0000000000000000 R09: 0000000000000000 [ 270.368861][T18770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.368870][T18770] R13: 00007fc6f0586038 R14: 00007fc6f0585fa0 R15: 00007ffca7a867c8 [ 270.368959][T18770] [ 270.434517][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.477310][T18776] loop9: detected capacity change from 0 to 256 [ 270.627606][T18782] loop3: detected capacity change from 0 to 1024 [ 270.635369][T18782] EXT4-fs: Ignoring removed nobh option [ 270.657098][T18782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.658474][T18784] loop0: detected capacity change from 0 to 2048 [ 270.697050][T18784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.720508][T18784] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.5762: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 270.739515][T18784] EXT4-fs (loop0): Remounting filesystem read-only [ 270.769920][T10830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.782035][T14843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.816723][T18801] team_slave_0: entered promiscuous mode [ 270.822802][T18801] team_slave_1: entered promiscuous mode [ 270.830176][T18801] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 270.852948][ T23] IPVS: starting estimator thread 0... [ 270.853543][T18802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=18802 comm=syz.1.5769 [ 270.909317][T18810] loop3: detected capacity change from 0 to 512 [ 270.918169][T18810] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 270.931288][T18810] EXT4-fs (loop3): 1 truncate cleaned up [ 270.937672][T18810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.952147][T18806] IPVS: using max 2832 ests per chain, 141600 per kthread [ 271.006687][T18815] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5773'. [ 271.007824][T14843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.040421][T18817] loop3: detected capacity change from 0 to 512 [ 271.066960][T18817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.080114][T18817] ext4 filesystem being mounted at /275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 271.117590][T18817] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.5774: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 271.138554][T18817] EXT4-fs (loop3): Remounting filesystem read-only [ 271.421592][T18827] 9pnet_fd: Insufficient options for proto=fd [ 271.501231][T18845] loop9: detected capacity change from 0 to 1024 [ 271.515253][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.535426][T18845] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 271.558853][T18854] FAULT_INJECTION: forcing a failure. [ 271.558853][T18854] name failslab, interval 1, probability 0, space 0, times 0 [ 271.571972][T18854] CPU: 1 UID: 0 PID: 18854 Comm: syz.1.5787 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 271.572096][T18854] Tainted: [W]=WARN [ 271.572104][T18854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.572118][T18854] Call Trace: [ 271.572126][T18854] [ 271.572136][T18854] __dump_stack+0x1d/0x30 [ 271.572165][T18854] dump_stack_lvl+0xe8/0x140 [ 271.572188][T18854] dump_stack+0x15/0x1b [ 271.572268][T18854] should_fail_ex+0x265/0x280 [ 271.572301][T18854] ? nci_hci_allocate+0x33/0x180 [ 271.572319][T18854] should_failslab+0x8c/0xb0 [ 271.572345][T18854] __kmalloc_cache_noprof+0x4c/0x320 [ 271.572419][T18854] nci_hci_allocate+0x33/0x180 [ 271.572437][T18854] nci_allocate_device+0x156/0x200 [ 271.572468][T18854] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 271.572577][T18854] virtual_ncidev_open+0x55/0x140 [ 271.572623][T18854] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 271.572645][T18854] misc_open+0x1d3/0x200 [ 271.572667][T18854] chrdev_open+0x2eb/0x3a0 [ 271.572711][T18854] do_dentry_open+0x646/0xa20 [ 271.572745][T18854] ? __pfx_chrdev_open+0x10/0x10 [ 271.572853][T18854] vfs_open+0x37/0x1e0 [ 271.572964][T18854] path_openat+0x1c5e/0x2170 [ 271.572990][T18854] do_filp_open+0x109/0x230 [ 271.573014][T18854] do_sys_openat2+0xa6/0x110 [ 271.573046][T18854] __x64_sys_openat+0xf2/0x120 [ 271.573092][T18854] x64_sys_call+0x2e9c/0x2ff0 [ 271.573112][T18854] do_syscall_64+0xd2/0x200 [ 271.573141][T18854] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 271.573168][T18854] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 271.573220][T18854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.573241][T18854] RIP: 0033:0x7f5d0b59ebe9 [ 271.573257][T18854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.573276][T18854] RSP: 002b:00007f5d09fff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 271.573300][T18854] RAX: ffffffffffffffda RBX: 00007f5d0b7c5fa0 RCX: 00007f5d0b59ebe9 [ 271.573335][T18854] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 271.573350][T18854] RBP: 00007f5d09fff090 R08: 0000000000000000 R09: 0000000000000000 [ 271.573438][T18854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.573452][T18854] R13: 00007f5d0b7c6038 R14: 00007f5d0b7c5fa0 R15: 00007ffe0dc35398 [ 271.573473][T18854] [ 271.585527][T18856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5788'. [ 271.752191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.757680][T18845] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.895898][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 271.895916][ T29] audit: type=1400 audit(1755508852.781:15697): avc: denied { read append } for pid=18842 comm="syz.9.5783" path="/52/file1/blkio.bfq.time_recursive" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.020325][ T29] audit: type=1400 audit(1755508852.871:15698): avc: denied { map } for pid=18842 comm="syz.9.5783" path="/52/file1/blkio.bfq.time_recursive" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.046549][T14843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.056440][T18873] FAULT_INJECTION: forcing a failure. [ 272.056440][T18873] name failslab, interval 1, probability 0, space 0, times 0 [ 272.069812][T18873] CPU: 1 UID: 0 PID: 18873 Comm: syz.5.5793 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 272.069857][T18873] Tainted: [W]=WARN [ 272.069893][T18873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.069907][T18873] Call Trace: [ 272.069915][T18873] [ 272.069923][T18873] __dump_stack+0x1d/0x30 [ 272.069946][T18873] dump_stack_lvl+0xe8/0x140 [ 272.069964][T18873] dump_stack+0x15/0x1b [ 272.069981][T18873] should_fail_ex+0x265/0x280 [ 272.070003][T18873] should_failslab+0x8c/0xb0 [ 272.070026][T18873] __kmalloc_cache_node_noprof+0x54/0x320 [ 272.070066][T18873] ? __get_vm_area_node+0x106/0x1d0 [ 272.070132][T18873] __get_vm_area_node+0x106/0x1d0 [ 272.070228][T18873] __vmalloc_node_range_noprof+0x273/0xe00 [ 272.070256][T18873] ? sel_write_load+0x158/0x380 [ 272.070278][T18873] ? common_lsm_audit+0x1ca/0x230 [ 272.070324][T18873] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 272.070355][T18873] ? sel_write_load+0x158/0x380 [ 272.070452][T18873] vmalloc_noprof+0x82/0xc0 [ 272.070485][T18873] ? sel_write_load+0x158/0x380 [ 272.070582][T18873] sel_write_load+0x158/0x380 [ 272.070610][T18873] ? __pfx_sel_write_load+0x10/0x10 [ 272.070638][T18873] vfs_write+0x269/0x960 [ 272.070724][T18873] ? __rcu_read_unlock+0x4f/0x70 [ 272.070749][T18873] ? __fget_files+0x184/0x1c0 [ 272.070846][T18873] ksys_write+0xda/0x1a0 [ 272.070868][T18873] __x64_sys_write+0x40/0x50 [ 272.070890][T18873] x64_sys_call+0x27fe/0x2ff0 [ 272.070912][T18873] do_syscall_64+0xd2/0x200 [ 272.071048][T18873] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 272.071076][T18873] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 272.071106][T18873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.071156][T18873] RIP: 0033:0x7feea399ebe9 [ 272.071173][T18873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.071190][T18873] RSP: 002b:00007feea2407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 272.071293][T18873] RAX: ffffffffffffffda RBX: 00007feea3bc5fa0 RCX: 00007feea399ebe9 [ 272.071305][T18873] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000006 [ 272.071318][T18873] RBP: 00007feea2407090 R08: 0000000000000000 R09: 0000000000000000 [ 272.071329][T18873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.071342][T18873] R13: 00007feea3bc6038 R14: 00007feea3bc5fa0 R15: 00007ffcb880ddb8 [ 272.071431][T18873] [ 272.071819][T18873] syz.5.5793: vmalloc error: size 101, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 272.116893][ T29] audit: type=1400 audit(1755508852.941:15699): avc: denied { load_policy } for pid=18872 comm="syz.5.5793" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 272.120413][T18873] ,cpuset=/,mems_allowed=0 [ 272.213987][ T29] audit: type=1326 audit(1755508853.101:15700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.0.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b73ebe9 code=0x7ffc0000 [ 272.217297][T18873] [ 272.217321][T18873] CPU: 1 UID: 0 PID: 18873 Comm: syz.5.5793 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 272.217352][T18873] Tainted: [W]=WARN [ 272.217359][T18873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.217371][T18873] Call Trace: [ 272.217379][T18873] [ 272.217387][T18873] __dump_stack+0x1d/0x30 [ 272.217455][T18873] dump_stack_lvl+0xe8/0x140 [ 272.217487][T18873] dump_stack+0x15/0x1b [ 272.217504][T18873] warn_alloc+0x12b/0x1a0 [ 272.217604][T18873] __vmalloc_node_range_noprof+0x297/0xe00 [ 272.217636][T18873] ? common_lsm_audit+0x1ca/0x230 [ 272.217667][T18873] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 272.217705][T18873] ? sel_write_load+0x158/0x380 [ 272.217729][T18873] vmalloc_noprof+0x82/0xc0 [ 272.217756][T18873] ? sel_write_load+0x158/0x380 [ 272.217778][T18873] sel_write_load+0x158/0x380 [ 272.217863][T18873] ? __pfx_sel_write_load+0x10/0x10 [ 272.217886][T18873] vfs_write+0x269/0x960 [ 272.217907][T18873] ? __rcu_read_unlock+0x4f/0x70 [ 272.217950][T18873] ? __fget_files+0x184/0x1c0 [ 272.217975][T18873] ksys_write+0xda/0x1a0 [ 272.217997][T18873] __x64_sys_write+0x40/0x50 [ 272.218027][T18873] x64_sys_call+0x27fe/0x2ff0 [ 272.218049][T18873] do_syscall_64+0xd2/0x200 [ 272.218081][T18873] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 272.218167][T18873] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 272.218191][T18873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.218213][T18873] RIP: 0033:0x7feea399ebe9 [ 272.218230][T18873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.218248][T18873] RSP: 002b:00007feea2407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 272.218305][T18873] RAX: ffffffffffffffda RBX: 00007feea3bc5fa0 RCX: 00007feea399ebe9 [ 272.218318][T18873] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000006 [ 272.218331][T18873] RBP: 00007feea2407090 R08: 0000000000000000 R09: 0000000000000000 [ 272.218344][T18873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.218356][T18873] R13: 00007feea3bc6038 R14: 00007feea3bc5fa0 R15: 00007ffcb880ddb8 [ 272.218402][T18873] [ 272.218409][T18873] Mem-Info: [ 272.223054][T18883] FAULT_INJECTION: forcing a failure. [ 272.223054][T18883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.226780][T18873] active_anon:16858 inactive_anon:4 isolated_anon:0 [ 272.226780][T18873] active_file:10973 inactive_file:19518 isolated_file:0 [ 272.226780][T18873] unevictable:4 dirty:524 writeback:0 [ 272.226780][T18873] slab_reclaimable:3627 slab_unreclaimable:43190 [ 272.226780][T18873] mapped:29554 shmem:1160 pagetables:1308 [ 272.226780][T18873] sec_pagetables:0 bounce:0 [ 272.226780][T18873] kernel_misc_reclaimable:0 [ 272.226780][T18873] free:1817842 free_pcp:16996 free_cma:0 [ 272.233112][T18883] CPU: 0 UID: 0 PID: 18883 Comm: syz.0.5796 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 272.233144][T18883] Tainted: [W]=WARN [ 272.233156][T18883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.233168][T18883] Call Trace: [ 272.233175][T18883] [ 272.233183][T18883] __dump_stack+0x1d/0x30 [ 272.233203][T18883] dump_stack_lvl+0xe8/0x140 [ 272.233222][T18883] dump_stack+0x15/0x1b [ 272.233237][T18883] should_fail_ex+0x265/0x280 [ 272.233259][T18883] should_fail+0xb/0x20 [ 272.233391][T18883] should_fail_usercopy+0x1a/0x20 [ 272.233412][T18883] _copy_to_user+0x20/0xa0 [ 272.233440][T18883] simple_read_from_buffer+0xb5/0x130 [ 272.233537][T18883] proc_fail_nth_read+0x10e/0x150 [ 272.233564][T18883] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 272.233589][T18883] vfs_read+0x1a8/0x770 [ 272.233619][T18883] ? __rcu_read_unlock+0x4f/0x70 [ 272.233641][T18883] ? __fget_files+0x184/0x1c0 [ 272.233666][T18883] ksys_read+0xda/0x1a0 [ 272.233688][T18883] __x64_sys_read+0x40/0x50 [ 272.233710][T18883] x64_sys_call+0x27bc/0x2ff0 [ 272.233841][T18883] do_syscall_64+0xd2/0x200 [ 272.233873][T18883] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 272.233949][T18883] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 272.233972][T18883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.234027][T18883] RIP: 0033:0x7ff64b73d5fc [ 272.234042][T18883] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 272.234060][T18883] RSP: 002b:00007ff64a1a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 272.234112][T18883] RAX: ffffffffffffffda RBX: 00007ff64b965fa0 RCX: 00007ff64b73d5fc [ 272.234124][T18883] RDX: 000000000000000f RSI: 00007ff64a1a70a0 RDI: 0000000000000006 [ 272.234199][T18883] RBP: 00007ff64a1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 272.234211][T18883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.234223][T18883] R13: 00007ff64b966038 R14: 00007ff64b965fa0 R15: 00007fff21650c58 [ 272.234242][T18883] [ 272.234325][ T29] audit: type=1326 audit(1755508853.111:15701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.0.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff64b73d550 code=0x7ffc0000 [ 272.239204][T18873] Node 0 active_anon:67432kB inactive_anon:16kB active_file:43892kB inactive_file:78072kB unevictable:16kB isolated(anon):0kB isolated(file):0kB mapped:118216kB dirty:2096kB writeback:0kB shmem:4640kB kernel_stack:4960kB pagetables:5232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 272.245501][ T29] audit: type=1326 audit(1755508853.111:15702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.0.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff64b73d69f code=0x7ffc0000 [ 272.249872][T18873] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 272.269940][ T29] audit: type=1326 audit(1755508853.111:15703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.0.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7ff64b73ebe9 code=0x7ffc0000 [ 272.278937][T18873] lowmem_reserve[]: 0 2883 7862 7862 [ 272.278973][T18873] Node 0 DMA32 free:2949212kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952844kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 272.287258][ T29] audit: type=1326 audit(1755508853.111:15704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.0.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff64b73d5fc code=0x7ffc0000 [ 272.295321][T18873] lowmem_reserve[]: [ 272.334756][ T29] audit: type=1326 audit(1755508853.191:15705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.0.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff64b73d69f code=0x7ffc0000 [ 272.355503][T18873] 0 0 4978 4978 [ 272.355600][T18873] Node 0 Normal free:4306796kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:67432kB inactive_anon:16kB active_file:43892kB inactive_file:78072kB unevictable:16kB writepending:2096kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:64356kB local_pcp:57132kB free_cma:0kB [ 272.360144][ T29] audit: type=1326 audit(1755508853.191:15706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.0.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff64b73d69f code=0x7ffc0000 [ 272.385064][T18873] lowmem_reserve[]: 0 0 0 0 [ 272.385108][T18873] Node 0 DMA: [ 272.401422][T17977] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.402486][T18873] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 273.196268][T18873] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949212kB [ 273.212496][T18873] Node 0 Normal: 1075*4kB (UM) 292*8kB (UM) 126*16kB (UM) 167*32kB (UM) 409*64kB (UME) 149*128kB (UME) 182*256kB (UME) 93*512kB (UME) 78*1024kB (UM) 55*2048kB (UM) 967*4096kB (UM) = 4306796kB [ 273.232191][T18873] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 273.241589][T18873] 31654 total pagecache pages [ 273.246602][T18873] 18 pages in swap cache [ 273.250881][T18873] Free swap = 124760kB [ 273.255149][T18873] Total swap = 124996kB [ 273.259397][T18873] 2097051 pages RAM [ 273.263341][T18873] 0 pages HighMem/MovableOnly [ 273.268315][T18873] 80440 pages reserved [ 273.297263][T18886] loop0: detected capacity change from 0 to 512 [ 273.304054][T18886] EXT4-fs: Ignoring removed nobh option [ 273.309730][T18886] EXT4-fs: Ignoring removed oldalloc option [ 273.317803][T18886] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 273.328279][T18886] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 273.345360][T18891] wireguard0: entered promiscuous mode [ 273.350923][T18891] wireguard0: entered allmulticast mode [ 273.378103][T18894] loop9: detected capacity change from 0 to 512 [ 273.415715][T18894] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.433901][T18901] net_ratelimit: 55 callbacks suppressed [ 273.433921][T18901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.447971][T18901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.449681][T18894] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.476505][T18901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.500541][T18905] loop3: detected capacity change from 0 to 1024 [ 273.533782][T18905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.578137][T18901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.601618][T18901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.626336][T18900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.641306][T18916] netlink: 'syz.0.5806': attribute type 3 has an invalid length. [ 273.649330][T18916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5806'. [ 273.681791][T14843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.703580][T18918] FAULT_INJECTION: forcing a failure. [ 273.703580][T18918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.717223][T18918] CPU: 0 UID: 0 PID: 18918 Comm: syz.5.5808 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 273.717275][T18918] Tainted: [W]=WARN [ 273.717283][T18918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 273.717306][T18918] Call Trace: [ 273.717315][T18918] [ 273.717325][T18918] __dump_stack+0x1d/0x30 [ 273.717348][T18918] dump_stack_lvl+0xe8/0x140 [ 273.717409][T18918] dump_stack+0x15/0x1b [ 273.717433][T18918] should_fail_ex+0x265/0x280 [ 273.717455][T18918] should_fail+0xb/0x20 [ 273.717472][T18918] should_fail_usercopy+0x1a/0x20 [ 273.717492][T18918] _copy_to_user+0x20/0xa0 [ 273.717557][T18918] simple_read_from_buffer+0xb5/0x130 [ 273.717579][T18918] proc_fail_nth_read+0x10e/0x150 [ 273.717605][T18918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.717697][T18918] vfs_read+0x1a8/0x770 [ 273.717751][T18918] ? __rcu_read_unlock+0x4f/0x70 [ 273.717836][T18918] ? __fget_files+0x184/0x1c0 [ 273.717860][T18918] ksys_read+0xda/0x1a0 [ 273.717880][T18918] __x64_sys_read+0x40/0x50 [ 273.717946][T18918] x64_sys_call+0x27bc/0x2ff0 [ 273.717967][T18918] do_syscall_64+0xd2/0x200 [ 273.717992][T18918] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 273.718014][T18918] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 273.718114][T18918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.718145][T18918] RIP: 0033:0x7feea399d5fc [ 273.718163][T18918] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 273.718180][T18918] RSP: 002b:00007feea2407030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.718200][T18918] RAX: ffffffffffffffda RBX: 00007feea3bc5fa0 RCX: 00007feea399d5fc [ 273.718286][T18918] RDX: 000000000000000f RSI: 00007feea24070a0 RDI: 0000000000000005 [ 273.718298][T18918] RBP: 00007feea2407090 R08: 0000000000000000 R09: 0000000000000000 [ 273.718310][T18918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.718322][T18918] R13: 00007feea3bc6038 R14: 00007feea3bc5fa0 R15: 00007ffcb880ddb8 [ 273.718339][T18918] [ 274.033656][T18926] FAULT_INJECTION: forcing a failure. [ 274.033656][T18926] name failslab, interval 1, probability 0, space 0, times 0 [ 274.046916][T18926] CPU: 0 UID: 0 PID: 18926 Comm: syz.5.5810 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 274.047020][T18926] Tainted: [W]=WARN [ 274.047027][T18926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.047072][T18926] Call Trace: [ 274.047081][T18926] [ 274.047090][T18926] __dump_stack+0x1d/0x30 [ 274.047114][T18926] dump_stack_lvl+0xe8/0x140 [ 274.047133][T18926] dump_stack+0x15/0x1b [ 274.047148][T18926] should_fail_ex+0x265/0x280 [ 274.047193][T18926] should_failslab+0x8c/0xb0 [ 274.047216][T18926] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 274.047288][T18926] ? __d_alloc+0x3d/0x340 [ 274.047314][T18926] __d_alloc+0x3d/0x340 [ 274.047400][T18926] d_alloc_parallel+0x53/0xc60 [ 274.047427][T18926] ? __rcu_read_unlock+0x4f/0x70 [ 274.047526][T18926] ? __d_lookup+0x316/0x340 [ 274.047551][T18926] ? try_to_unlazy+0x25e/0x3a0 [ 274.047579][T18926] path_openat+0x6b5/0x2170 [ 274.047610][T18926] do_filp_open+0x109/0x230 [ 274.047646][T18926] do_sys_openat2+0xa6/0x110 [ 274.047725][T18926] __x64_sys_open+0xe6/0x110 [ 274.047751][T18926] x64_sys_call+0x1457/0x2ff0 [ 274.047770][T18926] do_syscall_64+0xd2/0x200 [ 274.047818][T18926] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 274.047849][T18926] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 274.047873][T18926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.047972][T18926] RIP: 0033:0x7feea399ebe9 [ 274.047988][T18926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.048006][T18926] RSP: 002b:00007feea23e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 274.048027][T18926] RAX: ffffffffffffffda RBX: 00007feea3bc6090 RCX: 00007feea399ebe9 [ 274.048040][T18926] RDX: 00000000000001b0 RSI: 0000000000000000 RDI: 00002000000000c0 [ 274.048053][T18926] RBP: 00007feea23e6090 R08: 0000000000000000 R09: 0000000000000000 [ 274.048090][T18926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.048143][T18926] R13: 00007feea3bc6128 R14: 00007feea3bc6090 R15: 00007ffcb880ddb8 [ 274.048161][T18926] [ 274.275875][T17977] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.302175][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.314543][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.362410][T18932] SELinux: security_context_str_to_sid () failed with errno=-22 [ 274.515725][T18940] loop0: detected capacity change from 0 to 512 [ 274.547524][T18940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.555101][T18947] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18947 comm=syz.3.5819 [ 274.572942][T18940] ext4 filesystem being mounted at /599/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 274.625618][T13852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.649775][T18940] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.5817: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 274.673072][T18948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.701610][T18951] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 18: comm syz.0.5817: lblock 23 mapped to illegal pblock 18 (length 1) [ 274.719439][T18940] EXT4-fs (loop0): Remounting filesystem read-only [ 274.745185][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5822'. [ 274.892985][T18966] netlink: 'syz.5.5826': attribute type 3 has an invalid length. [ 274.901080][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5826'. [ 274.923263][T18968] SELinux: security_context_str_to_sid () failed with errno=-22 [ 275.162463][T18954] loop9: detected capacity change from 0 to 1024 [ 275.181848][T18954] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 275.234949][T18954] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 275.259721][T18954] EXT4-fs (loop9): orphan cleanup on readonly fs [ 275.289353][T18954] EXT4-fs error (device loop9): __ext4_get_inode_loc:4861: comm syz.9.5822: Invalid inode table block 0 in block_group 0 [ 275.366872][T18985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5831'. [ 275.387947][T18985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5831'. [ 275.484278][T18954] EXT4-fs (loop9): Remounting filesystem read-only [ 275.496549][T18978] netlink: 'syz.5.5830': attribute type 21 has an invalid length. [ 275.507407][T18954] EXT4-fs (loop9): 1 truncate cleaned up [ 275.513506][T18978] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5830'. [ 275.522634][T18978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5830'. [ 275.534147][T18954] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.758277][T18993] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5834'. [ 275.788917][T18993] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5834'. [ 276.012566][T17977] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.237888][T10830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.824490][T19011] chnl_net:caif_netlink_parms(): no params data found [ 276.910498][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 276.910525][ T29] audit: type=1326 audit(1755508857.791:15837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19023 comm="syz.5.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 276.983353][ T29] audit: type=1326 audit(1755508857.861:15838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19023 comm="syz.5.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 277.007983][ T29] audit: type=1326 audit(1755508857.861:15839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19023 comm="syz.5.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feea399ec23 code=0x7ffc0000 [ 277.083572][T19011] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.090937][T19011] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.122308][T19011] bridge_slave_0: entered allmulticast mode [ 277.153644][T19011] bridge_slave_0: entered promiscuous mode [ 277.161771][T19011] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.169113][T19011] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.190309][T19011] bridge_slave_1: entered allmulticast mode [ 277.197668][T19011] bridge_slave_1: entered promiscuous mode [ 277.225295][ T29] audit: type=1326 audit(1755508858.071:15840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19023 comm="syz.5.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feea399d69f code=0x7ffc0000 [ 277.255652][T19011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.273754][T19011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.346410][T19011] team0: Port device team_slave_0 added [ 277.393550][T19011] team0: Port device team_slave_1 added [ 277.491963][ T29] audit: type=1326 audit(1755508858.371:15841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19023 comm="syz.5.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7feea399ec77 code=0x7ffc0000 [ 277.537481][T19011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.544903][T19011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.571947][T19011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.590461][T19043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5845'. [ 278.014100][ T29] audit: type=1326 audit(1755508858.611:15842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19023 comm="syz.5.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feea399d550 code=0x7ffc0000 [ 278.014248][T19047] loop3: detected capacity change from 0 to 512 [ 278.038428][ T29] audit: type=1326 audit(1755508858.621:15843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19023 comm="syz.5.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7feea399d84a code=0x7ffc0000 [ 278.095766][ T4685] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.107218][ T29] audit: type=1326 audit(1755508858.971:15844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19023 comm="syz.5.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 278.131386][ T29] audit: type=1326 audit(1755508858.981:15845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19023 comm="syz.5.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 278.155962][ T29] audit: type=1326 audit(1755508858.981:15846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19023 comm="syz.5.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 278.256123][T19011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.263369][T19011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.290289][T19011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.321975][T19047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.338523][T19047] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.361005][ T4685] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.443917][T19011] hsr_slave_0: entered promiscuous mode [ 278.450195][T19011] hsr_slave_1: entered promiscuous mode [ 278.471322][T19011] debugfs: 'hsr0' already exists in 'hsr' [ 278.477192][T19011] Cannot create hsr debugfs directory [ 278.484253][ T4685] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.545438][ T4685] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.589175][T19047] netlink: 'syz.3.5846': attribute type 21 has an invalid length. [ 278.632814][T19047] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 278.729029][T19067] loop9: detected capacity change from 0 to 1024 [ 278.738347][T19067] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 278.749321][ T4685] bond0: left allmulticast mode [ 278.754336][ T4685] bond_slave_0: left allmulticast mode [ 278.759986][ T4685] bond_slave_1: left allmulticast mode [ 278.765713][ T4685] bond0: left promiscuous mode [ 278.770493][ T4685] bond_slave_0: left promiscuous mode [ 278.775977][ T4685] bond_slave_1: left promiscuous mode [ 278.781711][ T4685] bridge0: port 3(bond0) entered disabled state [ 278.796278][ T4685] bridge_slave_1: left allmulticast mode [ 278.802533][ T4685] bridge_slave_1: left promiscuous mode [ 278.808430][ T4685] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.821227][ T4685] bridge_slave_0: left allmulticast mode [ 278.827020][ T4685] bridge_slave_0: left promiscuous mode [ 278.832870][ T4685] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.015040][ T4685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.025367][ T4685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.035224][ T4685] bond0 (unregistering): Released all slaves [ 279.043440][T19067] __nla_validate_parse: 3 callbacks suppressed [ 279.043457][T19067] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5852'. [ 279.090485][ T4685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.098116][ T4685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.107153][ T4685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.114862][ T4685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.125902][ T4685] team_slave_0: left promiscuous mode [ 279.131537][ T4685] team_slave_1: left promiscuous mode [ 279.145195][T19087] FAULT_INJECTION: forcing a failure. [ 279.145195][T19087] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 279.158708][T19087] CPU: 0 UID: 0 PID: 19087 Comm: syz.1.5859 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 279.158716][ T4685] veth1_macvtap: left promiscuous mode [ 279.158748][T19087] Tainted: [W]=WARN [ 279.158755][T19087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 279.158747][ T4685] veth0_macvtap: left promiscuous mode [ 279.158769][T19087] Call Trace: [ 279.158777][T19087] [ 279.158786][T19087] __dump_stack+0x1d/0x30 [ 279.158880][T19087] dump_stack_lvl+0xe8/0x140 [ 279.158899][T19087] dump_stack+0x15/0x1b [ 279.158952][T19087] should_fail_ex+0x265/0x280 [ 279.158975][T19087] should_fail_alloc_page+0xf2/0x100 [ 279.159001][T19087] __alloc_frozen_pages_noprof+0xff/0x360 [ 279.159102][T19087] alloc_pages_mpol+0xb3/0x250 [ 279.159132][T19087] folio_alloc_noprof+0x97/0x150 [ 279.159161][T19087] filemap_alloc_folio_noprof+0x66/0x210 [ 279.159226][T19087] __filemap_get_folio+0x28f/0x6b0 [ 279.159302][T19087] ? aio_setup_ring+0x1e8/0x760 [ 279.159328][T19087] aio_setup_ring+0x26c/0x760 [ 279.159383][T19087] ioctx_alloc+0x2c4/0x4e0 [ 279.159405][T19087] ? fput+0x8f/0xc0 [ 279.159443][T19087] __se_sys_io_setup+0x6b/0x1b0 [ 279.159465][T19087] __x64_sys_io_setup+0x31/0x40 [ 279.159487][T19087] x64_sys_call+0x2eff/0x2ff0 [ 279.159549][T19087] do_syscall_64+0xd2/0x200 [ 279.159581][T19087] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 279.159605][T19087] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 279.159628][T19087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.159670][T19087] RIP: 0033:0x7f5d0b59ebe9 [ 279.159687][T19087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.159704][T19087] RSP: 002b:00007f5d09fff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 279.159725][T19087] RAX: ffffffffffffffda RBX: 00007f5d0b7c5fa0 RCX: 00007f5d0b59ebe9 [ 279.159737][T19087] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 279.159750][T19087] RBP: 00007f5d09fff090 R08: 0000000000000000 R09: 0000000000000000 [ 279.159762][T19087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 279.159840][T19087] R13: 00007f5d0b7c6038 R14: 00007f5d0b7c5fa0 R15: 00007ffe0dc35398 [ 279.159858][T19087] [ 279.262189][T13867] net_ratelimit: 8 callbacks suppressed [ 279.262239][T13867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.289918][T14843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.371744][T19100] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5862'. [ 279.379686][T13875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.504204][ T4685] pimreg (unregistering): left allmulticast mode [ 279.518817][T19104] 9pnet_fd: Insufficient options for proto=fd [ 279.548356][ T4685] team0 (unregistering): Port device team_slave_1 removed [ 279.559109][ T4685] team0 (unregistering): Port device team_slave_0 removed [ 279.608284][T19098] veth0_to_team: entered promiscuous mode [ 279.618523][T19103] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608) [ 279.629516][T19103] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 279.831035][T19011] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 279.867515][T19011] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 279.907211][T19011] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 279.937944][T19011] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 279.957271][ T4685] IPVS: stop unused estimator thread 0... [ 280.049052][T19011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.087566][T19011] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.106616][ T4685] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.114363][ T4685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.164617][ T4685] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.171846][ T4685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.334353][T19011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.384390][T13875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.393136][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.404416][T19139] netlink: 'syz.1.5873': attribute type 21 has an invalid length. [ 280.416128][T19139] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5873'. [ 280.425331][T19139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5873'. [ 280.484152][T19011] veth0_vlan: entered promiscuous mode [ 280.501860][T19011] veth1_vlan: entered promiscuous mode [ 280.549873][T19011] veth0_macvtap: entered promiscuous mode [ 280.556847][T19172] FAULT_INJECTION: forcing a failure. [ 280.556847][T19172] name failslab, interval 1, probability 0, space 0, times 0 [ 280.558519][T19011] veth1_macvtap: entered promiscuous mode [ 280.569825][T19172] CPU: 1 UID: 0 PID: 19172 Comm: syz.9.5883 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 280.569941][T19172] Tainted: [W]=WARN [ 280.569948][T19172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 280.569960][T19172] Call Trace: [ 280.569967][T19172] [ 280.569975][T19172] __dump_stack+0x1d/0x30 [ 280.569999][T19172] dump_stack_lvl+0xe8/0x140 [ 280.570025][T19172] dump_stack+0x15/0x1b [ 280.570111][T19172] should_fail_ex+0x265/0x280 [ 280.570133][T19172] should_failslab+0x8c/0xb0 [ 280.570158][T19172] kmem_cache_alloc_noprof+0x50/0x310 [ 280.570184][T19172] ? getname_flags+0x80/0x3b0 [ 280.570270][T19172] getname_flags+0x80/0x3b0 [ 280.570294][T19172] do_sys_openat2+0x60/0x110 [ 280.570389][T19172] __x64_sys_openat+0xf2/0x120 [ 280.570419][T19172] x64_sys_call+0x2e9c/0x2ff0 [ 280.570480][T19172] do_syscall_64+0xd2/0x200 [ 280.570535][T19172] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 280.570560][T19172] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 280.570585][T19172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.570610][T19172] RIP: 0033:0x7fc6f035d550 [ 280.570627][T19172] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 280.570646][T19172] RSP: 002b:00007fc6eedc6f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 280.570708][T19172] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc6f035d550 [ 280.570722][T19172] RDX: 0000000000000000 RSI: 00007fc6eedc6fa0 RDI: 00000000ffffff9c [ 280.570734][T19172] RBP: 00007fc6eedc6fa0 R08: 0000000000000000 R09: 0000000000000000 [ 280.570747][T19172] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 280.570839][T19172] R13: 00007fc6f0586038 R14: 00007fc6f0585fa0 R15: 00007ffca7a867c8 [ 280.570857][T19172] [ 280.769712][T19176] FAULT_INJECTION: forcing a failure. [ 280.769712][T19176] name failslab, interval 1, probability 0, space 0, times 0 [ 280.777844][T19011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.782895][T19176] CPU: 0 UID: 0 PID: 19176 Comm: syz.9.5884 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 280.782932][T19176] Tainted: [W]=WARN [ 280.782939][T19176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 280.783023][T19176] Call Trace: [ 280.783032][T19176] [ 280.783041][T19176] __dump_stack+0x1d/0x30 [ 280.783065][T19176] dump_stack_lvl+0xe8/0x140 [ 280.783130][T19176] dump_stack+0x15/0x1b [ 280.783147][T19176] should_fail_ex+0x265/0x280 [ 280.783169][T19176] should_failslab+0x8c/0xb0 [ 280.783197][T19176] kmem_cache_alloc_noprof+0x50/0x310 [ 280.783224][T19176] ? key_alloc+0x27d/0x9a0 [ 280.783261][T19176] key_alloc+0x27d/0x9a0 [ 280.783291][T19176] keyring_alloc+0x45/0xb0 [ 280.783321][T19176] join_session_keyring+0xe8/0x2a0 [ 280.783399][T19176] lookup_user_key+0x399/0xd10 [ 280.783417][T19176] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 280.783437][T19176] __se_sys_add_key+0x263/0x350 [ 280.783453][T19176] __x64_sys_add_key+0x67/0x80 [ 280.783510][T19176] x64_sys_call+0x28c4/0x2ff0 [ 280.783532][T19176] do_syscall_64+0xd2/0x200 [ 280.783557][T19176] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 280.783581][T19176] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 280.783606][T19176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.783660][T19176] RIP: 0033:0x7fc6f035ebe9 [ 280.783678][T19176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.783696][T19176] RSP: 002b:00007fc6eedc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 280.783716][T19176] RAX: ffffffffffffffda RBX: 00007fc6f0585fa0 RCX: 00007fc6f035ebe9 [ 280.783729][T19176] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000200000000040 [ 280.783742][T19176] RBP: 00007fc6eedc7090 R08: fffffffffffffffd R09: 0000000000000000 [ 280.783777][T19176] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 280.783790][T19176] R13: 00007fc6f0586038 R14: 00007fc6f0585fa0 R15: 00007ffca7a867c8 [ 280.783821][T19176] [ 281.010136][T19011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.075554][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.115405][T19194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5891'. [ 281.132898][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.177727][ T4647] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.187656][T19198] netlink: 'syz.5.5894': attribute type 29 has an invalid length. [ 281.199379][T19202] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5893'. [ 281.200299][T19206] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5897'. [ 281.219185][T19203] loop9: detected capacity change from 0 to 512 [ 281.221839][T19206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5897'. [ 281.237852][ T4647] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.247165][T19207] netlink: 'syz.5.5894': attribute type 29 has an invalid length. [ 281.258174][T19202] 0·: renamed from hsr0 (while UP) [ 281.265682][T19202] 0·: entered allmulticast mode [ 281.270820][T19202] hsr_slave_0: entered allmulticast mode [ 281.273305][T19203] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.277689][T19202] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 281.302153][T19198] netlink: 'syz.5.5894': attribute type 2 has an invalid length. [ 281.305483][T19203] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.312846][T19198] netlink: 'syz.5.5894': attribute type 8 has an invalid length. [ 281.331554][T19198] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5894'. [ 281.352462][T19215] FAULT_INJECTION: forcing a failure. [ 281.352462][T19215] name failslab, interval 1, probability 0, space 0, times 0 [ 281.361432][T19217] SELinux: security_context_str_to_sid () failed with errno=-22 [ 281.365615][T19215] CPU: 0 UID: 0 PID: 19215 Comm: syz.1.5898 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 281.365715][T19215] Tainted: [W]=WARN [ 281.365722][T19215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.365734][T19215] Call Trace: [ 281.365741][T19215] [ 281.365749][T19215] __dump_stack+0x1d/0x30 [ 281.365786][T19215] dump_stack_lvl+0xe8/0x140 [ 281.365806][T19215] dump_stack+0x15/0x1b [ 281.365823][T19215] should_fail_ex+0x265/0x280 [ 281.365845][T19215] should_failslab+0x8c/0xb0 [ 281.365869][T19215] kmem_cache_alloc_noprof+0x50/0x310 [ 281.365954][T19215] ? skb_clone+0x151/0x1f0 [ 281.365976][T19215] skb_clone+0x151/0x1f0 [ 281.365996][T19215] pfkey_sendmsg+0x2cc/0x900 [ 281.366076][T19215] ? avc_has_perm+0xf7/0x180 [ 281.366105][T19215] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 281.366128][T19215] __sock_sendmsg+0x142/0x180 [ 281.366229][T19215] ____sys_sendmsg+0x31e/0x4e0 [ 281.366253][T19215] ___sys_sendmsg+0x17b/0x1d0 [ 281.366350][T19215] __x64_sys_sendmsg+0xd4/0x160 [ 281.366374][T19215] x64_sys_call+0x191e/0x2ff0 [ 281.366394][T19215] do_syscall_64+0xd2/0x200 [ 281.366501][T19215] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 281.366525][T19215] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 281.366621][T19215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.366643][T19215] RIP: 0033:0x7f5d0b59ebe9 [ 281.366660][T19215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.366692][T19215] RSP: 002b:00007f5d09fff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.366714][T19215] RAX: ffffffffffffffda RBX: 00007f5d0b7c5fa0 RCX: 00007f5d0b59ebe9 [ 281.366780][T19215] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 281.366793][T19215] RBP: 00007f5d09fff090 R08: 0000000000000000 R09: 0000000000000000 [ 281.366805][T19215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.366817][T19215] R13: 00007f5d0b7c6038 R14: 00007f5d0b7c5fa0 R15: 00007ffe0dc35398 [ 281.366835][T19215] [ 281.553094][T19203] netlink: 'syz.9.5896': attribute type 21 has an invalid length. [ 281.562317][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.571964][T19203] netlink: 156 bytes leftover after parsing attributes in process `syz.9.5896'. [ 281.632526][T19230] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 281.652488][T19234] netlink: 'syz.0.5901': attribute type 1 has an invalid length. [ 281.693039][T19243] FAULT_INJECTION: forcing a failure. [ 281.693039][T19243] name failslab, interval 1, probability 0, space 0, times 0 [ 281.706605][T19243] CPU: 1 UID: 0 PID: 19243 Comm: syz.5.5905 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 281.706789][T19243] Tainted: [W]=WARN [ 281.706796][T19243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.706808][T19243] Call Trace: [ 281.706817][T19243] [ 281.706825][T19243] __dump_stack+0x1d/0x30 [ 281.706852][T19243] dump_stack_lvl+0xe8/0x140 [ 281.706873][T19243] dump_stack+0x15/0x1b [ 281.706891][T19243] should_fail_ex+0x265/0x280 [ 281.706933][T19243] ? netlbl_mgmt_add_common+0x3b/0x960 [ 281.706954][T19243] should_failslab+0x8c/0xb0 [ 281.707060][T19243] __kmalloc_cache_noprof+0x4c/0x320 [ 281.707092][T19243] netlbl_mgmt_add_common+0x3b/0x960 [ 281.707144][T19243] ? __nla_parse+0x40/0x60 [ 281.707167][T19243] ? selinux_current_getlsmprop_subj+0x6e/0x80 [ 281.707196][T19243] netlbl_mgmt_add+0x1a2/0x1d0 [ 281.707217][T19243] genl_family_rcv_msg_doit+0x143/0x1b0 [ 281.707249][T19243] genl_rcv_msg+0x422/0x460 [ 281.707394][T19243] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 281.707416][T19243] netlink_rcv_skb+0x123/0x220 [ 281.707509][T19243] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.707541][T19243] genl_rcv+0x28/0x40 [ 281.707561][T19243] netlink_unicast+0x5bd/0x690 [ 281.707595][T19243] netlink_sendmsg+0x58b/0x6b0 [ 281.707687][T19243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.707710][T19243] __sock_sendmsg+0x142/0x180 [ 281.707745][T19243] ____sys_sendmsg+0x31e/0x4e0 [ 281.707770][T19243] ___sys_sendmsg+0x17b/0x1d0 [ 281.707797][T19243] __x64_sys_sendmsg+0xd4/0x160 [ 281.707832][T19243] x64_sys_call+0x191e/0x2ff0 [ 281.707846][T19243] do_syscall_64+0xd2/0x200 [ 281.707944][T19243] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 281.707961][T19243] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 281.708102][T19243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.708117][T19243] RIP: 0033:0x7feea399ebe9 [ 281.708171][T19243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.708184][T19243] RSP: 002b:00007feea2407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.708200][T19243] RAX: ffffffffffffffda RBX: 00007feea3bc5fa0 RCX: 00007feea399ebe9 [ 281.708209][T19243] RDX: 0000000000000080 RSI: 0000200000000a00 RDI: 0000000000000007 [ 281.708218][T19243] RBP: 00007feea2407090 R08: 0000000000000000 R09: 0000000000000000 [ 281.708226][T19243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.708234][T19243] R13: 00007feea3bc6038 R14: 00007feea3bc5fa0 R15: 00007ffcb880ddb8 [ 281.708327][T19243] [ 282.065580][T19251] wireguard0: entered promiscuous mode [ 282.071257][T19251] wireguard0: entered allmulticast mode [ 282.100478][T19254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54558 sclass=netlink_route_socket pid=19254 comm=syz.5.5906 [ 282.215483][T19258] SELinux: security_context_str_to_sid () failed with errno=-22 [ 282.405266][T17977] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.454887][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 282.454908][ T29] audit: type=1400 audit(1755508863.341:16034): avc: denied { connect } for pid=19269 comm="syz.5.5914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 282.528252][ T29] audit: type=1326 audit(1755508863.411:16035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19276 comm="syz.5.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 282.543788][T19268] loop0: detected capacity change from 0 to 8192 [ 282.552369][ T29] audit: type=1326 audit(1755508863.411:16036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19276 comm="syz.5.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 282.623979][T13875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.652316][ T29] audit: type=1326 audit(1755508863.411:16037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19276 comm="syz.5.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 282.676475][ T29] audit: type=1326 audit(1755508863.411:16038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19276 comm="syz.5.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 282.700713][ T29] audit: type=1326 audit(1755508863.411:16039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19276 comm="syz.5.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 282.724926][ T29] audit: type=1326 audit(1755508863.411:16040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19276 comm="syz.5.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 282.749241][ T29] audit: type=1326 audit(1755508863.411:16041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19276 comm="syz.5.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 282.773373][ T29] audit: type=1326 audit(1755508863.411:16042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19276 comm="syz.5.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 282.797591][ T29] audit: type=1326 audit(1755508863.411:16043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19276 comm="syz.5.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea399ebe9 code=0x7ffc0000 [ 282.913116][T19296] FAULT_INJECTION: forcing a failure. [ 282.913116][T19296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.926799][T19296] CPU: 1 UID: 0 PID: 19296 Comm: syz.9.5924 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 282.926842][T19296] Tainted: [W]=WARN [ 282.926851][T19296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.926866][T19296] Call Trace: [ 282.926875][T19296] [ 282.926885][T19296] __dump_stack+0x1d/0x30 [ 282.926973][T19296] dump_stack_lvl+0xe8/0x140 [ 282.926996][T19296] dump_stack+0x15/0x1b [ 282.927016][T19296] should_fail_ex+0x265/0x280 [ 282.927040][T19296] should_fail+0xb/0x20 [ 282.927083][T19296] should_fail_usercopy+0x1a/0x20 [ 282.927103][T19296] _copy_from_user+0x1c/0xb0 [ 282.927128][T19296] ___sys_sendmsg+0xc1/0x1d0 [ 282.927165][T19296] __x64_sys_sendmsg+0xd4/0x160 [ 282.927265][T19296] x64_sys_call+0x191e/0x2ff0 [ 282.927290][T19296] do_syscall_64+0xd2/0x200 [ 282.927321][T19296] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 282.927382][T19296] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 282.927482][T19296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.927507][T19296] RIP: 0033:0x7fc6f035ebe9 [ 282.927523][T19296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.927542][T19296] RSP: 002b:00007fc6eedc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.927646][T19296] RAX: ffffffffffffffda RBX: 00007fc6f0585fa0 RCX: 00007fc6f035ebe9 [ 282.927658][T19296] RDX: 0000000000000044 RSI: 0000200000000080 RDI: 0000000000000004 [ 282.927670][T19296] RBP: 00007fc6eedc7090 R08: 0000000000000000 R09: 0000000000000000 [ 282.927763][T19296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.927777][T19296] R13: 00007fc6f0586038 R14: 00007fc6f0585fa0 R15: 00007ffca7a867c8 [ 282.927826][T19296] [ 283.209044][T19303] SELinux: security_context_str_to_sid () failed with errno=-22 [ 283.237475][T19305] loop9: detected capacity change from 0 to 512 [ 283.256475][T19305] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.275276][T19305] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.317502][T19313] FAULT_INJECTION: forcing a failure. [ 283.317502][T19313] name failslab, interval 1, probability 0, space 0, times 0 [ 283.330577][T19313] CPU: 0 UID: 0 PID: 19313 Comm: syz.3.5930 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 283.330675][T19313] Tainted: [W]=WARN [ 283.330681][T19313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.330694][T19313] Call Trace: [ 283.330703][T19313] [ 283.330711][T19313] __dump_stack+0x1d/0x30 [ 283.330812][T19313] dump_stack_lvl+0xe8/0x140 [ 283.330832][T19313] dump_stack+0x15/0x1b [ 283.330851][T19313] should_fail_ex+0x265/0x280 [ 283.330875][T19313] ? audit_log_d_path+0x8d/0x150 [ 283.330963][T19313] should_failslab+0x8c/0xb0 [ 283.330986][T19313] __kmalloc_cache_noprof+0x4c/0x320 [ 283.331057][T19313] audit_log_d_path+0x8d/0x150 [ 283.331103][T19313] audit_log_d_path_exe+0x42/0x70 [ 283.331130][T19313] audit_log_task+0x1e9/0x250 [ 283.331212][T19313] audit_seccomp+0x61/0x100 [ 283.331234][T19313] ? __seccomp_filter+0x68c/0x10d0 [ 283.331256][T19313] __seccomp_filter+0x69d/0x10d0 [ 283.331282][T19313] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 283.331343][T19313] ? vfs_write+0x7e8/0x960 [ 283.331369][T19313] __secure_computing+0x82/0x150 [ 283.331388][T19313] syscall_trace_enter+0xcf/0x1e0 [ 283.331489][T19313] do_syscall_64+0xac/0x200 [ 283.331515][T19313] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 283.331536][T19313] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 283.331560][T19313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.331627][T19313] RIP: 0033:0x7ffb1d6febe9 [ 283.331643][T19313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.331661][T19313] RSP: 002b:00007ffb1c167038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a0 [ 283.331686][T19313] RAX: ffffffffffffffda RBX: 00007ffb1d925fa0 RCX: 00007ffb1d6febe9 [ 283.331702][T19313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 283.331773][T19313] RBP: 00007ffb1c167090 R08: 0000000000000000 R09: 0000000000000000 [ 283.331784][T19313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.331797][T19313] R13: 00007ffb1d926038 R14: 00007ffb1d925fa0 R15: 00007fff331c8d78 [ 283.331819][T19313] [ 283.549918][T13868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.712747][T13875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.938063][T19305] netlink: 'syz.9.5927': attribute type 21 has an invalid length. [ 284.084590][T19330] __nla_validate_parse: 5 callbacks suppressed [ 284.084611][T19330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5936'. [ 284.227733][T13852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.240366][T19336] SELinux: security_context_str_to_sid () failed with errno=-22 [ 284.249449][T19305] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 284.452403][T19351] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 284.461860][T19351] SELinux: failed to load policy [ 284.591764][T19359] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19359 comm=syz.0.5946 [ 284.794589][T13874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.805634][T17977] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.865416][T13867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.999487][T19370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5950'. [ 285.010505][T19370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.026795][T19374] SELinux: security_context_str_to_sid () failed with errno=-22 [ 285.037632][T19370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.060204][T19372] pimreg: entered allmulticast mode [ 285.095717][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5953'. [ 285.122436][T19377] bond0: (slave bond_slave_1): Releasing backup interface [ 285.139126][T19372] pimreg: left allmulticast mode [ 285.385740][T19353] syz.3.5945 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 285.397244][T19353] CPU: 0 UID: 0 PID: 19353 Comm: syz.3.5945 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 285.397286][T19353] Tainted: [W]=WARN [ 285.397331][T19353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.397343][T19353] Call Trace: [ 285.397352][T19353] [ 285.397362][T19353] __dump_stack+0x1d/0x30 [ 285.397388][T19353] dump_stack_lvl+0xe8/0x140 [ 285.397484][T19353] dump_stack+0x15/0x1b [ 285.397503][T19353] dump_header+0x81/0x220 [ 285.397535][T19353] oom_kill_process+0x342/0x400 [ 285.397571][T19353] out_of_memory+0x979/0xb80 [ 285.397659][T19353] try_charge_memcg+0x5e6/0x9e0 [ 285.397686][T19353] charge_memcg+0x51/0xc0 [ 285.397703][T19353] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 285.397732][T19353] __read_swap_cache_async+0x1df/0x350 [ 285.397768][T19353] swap_cluster_readahead+0x277/0x3e0 [ 285.397850][T19353] swapin_readahead+0xde/0x6f0 [ 285.397882][T19353] ? __filemap_get_folio+0x4f7/0x6b0 [ 285.397954][T19353] ? swap_cache_get_folio+0x77/0x200 [ 285.398008][T19353] do_swap_page+0x301/0x2430 [ 285.398036][T19353] ? css_rstat_updated+0xb7/0x240 [ 285.398068][T19353] ? __pfx_default_wake_function+0x10/0x10 [ 285.398097][T19353] handle_mm_fault+0x9a5/0x2c20 [ 285.398175][T19353] do_user_addr_fault+0x636/0x1090 [ 285.398207][T19353] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 285.398241][T19353] exc_page_fault+0x62/0xa0 [ 285.398263][T19353] asm_exc_page_fault+0x26/0x30 [ 285.398284][T19353] RIP: 0033:0x7ffb1d5ded03 [ 285.398303][T19353] Code: 89 e7 4c 89 44 24 10 4c 89 54 24 08 e8 e6 ec fd ff 4c 8b 54 24 08 4c 8b 44 24 10 84 c0 0f 85 60 ff ff ff 80 7c 24 1f 00 75 0d <80> 3d 7e 33 34 00 00 0f 85 70 01 00 00 48 83 7b 50 07 77 08 48 c7 [ 285.398321][T19353] RSP: 002b:00007fff331c8e00 EFLAGS: 00010246 [ 285.398338][T19353] RAX: 0000000000000000 RBX: 00007ffb1e455720 RCX: ffffffff8127726e [ 285.398352][T19353] RDX: 000000000000126e RSI: ffffffff8127726e RDI: 0000000000000019 [ 285.398395][T19353] RBP: ffffffff8127726e R08: 00007ffb1d926038 R09: 00007ffb1d912000 [ 285.398410][T19353] R10: 00007ffb1d16f008 R11: 0000000000000019 R12: 0000000000000019 [ 285.398425][T19353] R13: 0000000000000000 R14: ffffffff81277b04 R15: 0000000000000000 [ 285.398439][T19353] ? arch_syscall_is_vdso_sigreturn+0x14/0x110 [ 285.398470][T19353] ? x64_sys_call+0x2f6e/0x2ff0 [ 285.398492][T19353] ? x64_sys_call+0x2f6e/0x2ff0 [ 285.398561][T19353] ? x64_sys_call+0x2f6e/0x2ff0 [ 285.398582][T19353] [ 285.398590][T19353] memory: usage 307200kB, limit 307200kB, failcnt 157 [ 285.523388][T19389] netlink: 'syz.5.5958': attribute type 21 has an invalid length. [ 285.526760][T19353] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 285.562141][T19389] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5958'. [ 285.572220][T19353] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 285.578630][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5958'. [ 285.586979][T19353] Memory cgroup stats for /syz3: [ 285.696766][T19353] cache 0 [ 285.704917][T19353] rss 0 [ 285.707716][T19353] shmem 0 [ 285.710666][T19353] mapped_file 0 [ 285.714223][T19353] dirty 0 [ 285.717169][T19353] writeback 8192 [ 285.720719][T19353] workingset_refault_anon 16 [ 285.725427][T19353] workingset_refault_file 0 [ 285.730203][T19353] swap 204800 [ 285.733540][T19353] swapcached 16384 [ 285.737353][T19353] pgpgin 176918 [ 285.740889][T19353] pgpgout 176914 [ 285.744603][T19353] pgfault 162792 [ 285.748161][T19353] pgmajfault 7 [ 285.751625][T19353] inactive_anon 16384 [ 285.755723][T19353] active_anon 0 [ 285.759281][T19353] inactive_file 0 [ 285.762993][T19353] active_file 0 [ 285.766546][T19353] unevictable 0 [ 285.770040][T19353] hierarchical_memory_limit 314572800 [ 285.775544][T19353] hierarchical_memsw_limit 9223372036854771712 [ 285.781862][T19353] total_cache 0 [ 285.785541][T19353] total_rss 0 [ 285.788885][T19353] total_shmem 0 [ 285.792515][T19353] total_mapped_file 0 [ 285.796641][T19353] total_dirty 0 [ 285.800410][T19353] total_writeback 8192 [ 285.804535][T19353] total_workingset_refault_anon 16 [ 285.809949][T19353] total_workingset_refault_file 0 [ 285.815122][T19353] total_swap 204800 [ 285.818968][T19353] total_swapcached 16384 [ 285.823636][T19353] total_pgpgin 176918 [ 285.827720][T19353] total_pgpgout 176914 [ 285.832858][T19353] total_pgfault 162792 [ 285.837437][T19353] total_pgmajfault 7 [ 285.841880][T19353] total_inactive_anon 16384 [ 285.846847][T19353] total_active_anon 0 [ 285.850957][T19353] total_inactive_file 0 [ 285.855500][T19353] total_active_file 0 [ 285.859598][T19353] total_unevictable 0 [ 285.863780][T19353] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.5945,pid=19353,uid=0 [ 285.878657][T19353] Memory cgroup out of memory: Killed process 19353 (syz.3.5945) total-vm:93764kB, anon-rss:948kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 285.901857][T13875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.953394][T19398] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5962'. [ 286.229291][T19416] FAULT_INJECTION: forcing a failure. [ 286.229291][T19416] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 286.242853][T19416] CPU: 0 UID: 0 PID: 19416 Comm: syz.1.5969 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 286.242895][T19416] Tainted: [W]=WARN [ 286.242902][T19416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.242916][T19416] Call Trace: [ 286.242993][T19416] [ 286.243003][T19416] __dump_stack+0x1d/0x30 [ 286.243028][T19416] dump_stack_lvl+0xe8/0x140 [ 286.243047][T19416] dump_stack+0x15/0x1b [ 286.243062][T19416] should_fail_ex+0x265/0x280 [ 286.243094][T19416] should_fail_alloc_page+0xf2/0x100 [ 286.243120][T19416] __alloc_frozen_pages_noprof+0xff/0x360 [ 286.243188][T19416] alloc_pages_mpol+0xb3/0x250 [ 286.243227][T19416] vma_alloc_folio_noprof+0x1aa/0x300 [ 286.243324][T19416] do_wp_page+0x5db/0x24e0 [ 286.243347][T19416] ? irq_work_queue+0x93/0x100 [ 286.243372][T19416] ? __rcu_read_lock+0x37/0x50 [ 286.243426][T19416] handle_mm_fault+0x77d/0x2c20 [ 286.243450][T19416] ? __rcu_read_unlock+0x4f/0x70 [ 286.243512][T19416] do_user_addr_fault+0x3fe/0x1090 [ 286.243544][T19416] exc_page_fault+0x62/0xa0 [ 286.243567][T19416] asm_exc_page_fault+0x26/0x30 [ 286.243586][T19416] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 286.243692][T19416] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 286.243710][T19416] RSP: 0018:ffffc9000283bcf8 EFLAGS: 00050216 [ 286.243744][T19416] RAX: 0000000000000001 RBX: 0000000000000020 RCX: 0000000000000020 [ 286.243757][T19416] RDX: 0000000000000000 RSI: ffff888119d40be0 RDI: 0000200000000180 [ 286.243770][T19416] RBP: ffffc9000283bdd0 R08: 0000000000000411 R09: 0000000000000000 [ 286.243782][T19416] R10: 0001888119d40be0 R11: 0001888119d40bff R12: 00002000000001a0 [ 286.243794][T19416] R13: 00007ffffffff000 R14: 0000200000000180 R15: ffff888119d40be0 [ 286.243811][T19416] _copy_to_user+0x7c/0xa0 [ 286.243845][T19416] perf_read+0x3f9/0x4d0 [ 286.243875][T19416] ? selinux_file_permission+0x2f0/0x320 [ 286.243957][T19416] ? __pfx_perf_read+0x10/0x10 [ 286.244015][T19416] vfs_read+0x1a8/0x770 [ 286.244034][T19416] ? __rcu_read_unlock+0x4f/0x70 [ 286.244107][T19416] ? __fget_files+0x184/0x1c0 [ 286.244135][T19416] ksys_read+0xda/0x1a0 [ 286.244201][T19416] __x64_sys_read+0x40/0x50 [ 286.244242][T19416] x64_sys_call+0x27bc/0x2ff0 [ 286.244288][T19416] do_syscall_64+0xd2/0x200 [ 286.244305][T19416] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 286.244352][T19416] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 286.244368][T19416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.244382][T19416] RIP: 0033:0x7f5d0b59ebe9 [ 286.244406][T19416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.244423][T19416] RSP: 002b:00007f5d09fff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 286.244437][T19416] RAX: ffffffffffffffda RBX: 00007f5d0b7c5fa0 RCX: 00007f5d0b59ebe9 [ 286.244504][T19416] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 0000000000000004 [ 286.244513][T19416] RBP: 00007f5d09fff090 R08: 0000000000000000 R09: 0000000000000000 [ 286.244521][T19416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.244529][T19416] R13: 00007f5d0b7c6038 R14: 00007f5d0b7c5fa0 R15: 00007ffe0dc35398 [ 286.244541][T19416] [ 287.028600][T13869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.039144][T13874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.105610][T19432] FAULT_INJECTION: forcing a failure. [ 287.105610][T19432] name failslab, interval 1, probability 0, space 0, times 0 [ 287.112926][T19429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=19429 comm=syz.1.5973 [ 287.118475][T19432] CPU: 0 UID: 0 PID: 19432 Comm: syz.0.5974 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 287.118599][T19432] Tainted: [W]=WARN [ 287.118606][T19432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.118618][T19432] Call Trace: [ 287.118627][T19432] [ 287.118636][T19432] __dump_stack+0x1d/0x30 [ 287.118661][T19432] dump_stack_lvl+0xe8/0x140 [ 287.118680][T19432] dump_stack+0x15/0x1b [ 287.118697][T19432] should_fail_ex+0x265/0x280 [ 287.118736][T19432] should_failslab+0x8c/0xb0 [ 287.118817][T19432] kmem_cache_alloc_noprof+0x50/0x310 [ 287.118843][T19432] ? audit_log_start+0x365/0x6c0 [ 287.118873][T19432] audit_log_start+0x365/0x6c0 [ 287.118982][T19432] audit_seccomp+0x48/0x100 [ 287.119007][T19432] ? __seccomp_filter+0x68c/0x10d0 [ 287.119033][T19432] __seccomp_filter+0x69d/0x10d0 [ 287.119098][T19432] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 287.119124][T19432] ? vfs_write+0x7e8/0x960 [ 287.119194][T19432] ? __rcu_read_unlock+0x4f/0x70 [ 287.119216][T19432] ? __fget_files+0x184/0x1c0 [ 287.119281][T19432] __secure_computing+0x82/0x150 [ 287.119302][T19432] syscall_trace_enter+0xcf/0x1e0 [ 287.119364][T19432] do_syscall_64+0xac/0x200 [ 287.119393][T19432] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 287.119416][T19432] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 287.119449][T19432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.119551][T19432] RIP: 0033:0x7f8663c6d5fc [ 287.119567][T19432] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 287.119623][T19432] RSP: 002b:00007f86626d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 287.119686][T19432] RAX: ffffffffffffffda RBX: 00007f8663e95fa0 RCX: 00007f8663c6d5fc [ 287.119699][T19432] RDX: 000000000000000f RSI: 00007f86626d70a0 RDI: 0000000000000006 [ 287.119711][T19432] RBP: 00007f86626d7090 R08: 0000000000000000 R09: 0000000000000000 [ 287.119723][T19432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.119753][T19432] R13: 00007f8663e96038 R14: 00007f8663e95fa0 R15: 00007ffee6a0c6d8 [ 287.119826][T19432] [ 287.220989][T19439] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 287.354513][T19439] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 287.362859][T19439] vhci_hcd vhci_hcd.0: Device attached [ 287.401449][T19439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5976'. [ 287.480030][ T29] kauditd_printk_skb: 450 callbacks suppressed [ 287.480051][ T29] audit: type=1326 audit(1755508868.361:16492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.1.5980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0b59ebe9 code=0x7ffc0000 [ 287.523925][T19450] FAULT_INJECTION: forcing a failure. [ 287.523925][T19450] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 287.535148][ T29] audit: type=1326 audit(1755508868.361:16493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.1.5980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0b59ebe9 code=0x7ffc0000 [ 287.537426][T19450] CPU: 1 UID: 0 PID: 19450 Comm: syz.3.5979 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 287.537486][T19450] Tainted: [W]=WARN [ 287.537493][T19450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.537567][T19450] Call Trace: [ 287.537575][T19450] [ 287.537583][T19450] __dump_stack+0x1d/0x30 [ 287.537608][T19450] dump_stack_lvl+0xe8/0x140 [ 287.537637][T19450] dump_stack+0x15/0x1b [ 287.537653][T19450] should_fail_ex+0x265/0x280 [ 287.537675][T19450] should_fail_alloc_page+0xf2/0x100 [ 287.537753][T19450] __alloc_frozen_pages_noprof+0xff/0x360 [ 287.537789][T19450] alloc_pages_mpol+0xb3/0x250 [ 287.537893][T19450] vma_alloc_folio_noprof+0x1aa/0x300 [ 287.537925][T19450] handle_mm_fault+0xec2/0x2c20 [ 287.537955][T19450] do_user_addr_fault+0x636/0x1090 [ 287.538036][T19450] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 287.538061][T19450] exc_page_fault+0x62/0xa0 [ 287.538091][T19450] asm_exc_page_fault+0x26/0x30 [ 287.538175][T19450] RIP: 0033:0x7ffb1d6ac20b [ 287.538192][T19450] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 287.538244][T19450] RSP: 002b:00007ffb1c143e10 EFLAGS: 00010246 [ 287.538261][T19450] RAX: 00007ffb1c145f30 RBX: 00007ffb1d8f7640 RCX: 0000000000000000 [ 287.538275][T19450] RDX: 00007ffb1c145f78 RSI: 00007ffb1d75eca8 RDI: 00007ffb1c143e30 [ 287.538287][T19450] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 287.538300][T19450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.538383][T19450] R13: 00007ffb1d926128 R14: 00007ffb1d926090 R15: 00007fff331c8d78 [ 287.538402][T19450] [ 287.538415][T19450] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 287.561420][ T29] audit: type=1326 audit(1755508868.401:16494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.1.5980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d0b59ebe9 code=0x7ffc0000 [ 287.586553][T19451] netlink: 'syz.1.5980': attribute type 13 has an invalid length. [ 287.589855][ T29] audit: type=1326 audit(1755508868.401:16495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.1.5980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0b59ebe9 code=0x7ffc0000 [ 287.608102][T19439] bridge0: entered promiscuous mode [ 287.609327][ T29] audit: type=1326 audit(1755508868.401:16496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.1.5980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0b59ebe9 code=0x7ffc0000 [ 287.609380][ T29] audit: type=1326 audit(1755508868.401:16497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.1.5980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d0b59ebe9 code=0x7ffc0000 [ 287.609436][ T29] audit: type=1326 audit(1755508868.401:16498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.1.5980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0b59ebe9 code=0x7ffc0000 [ 287.609473][ T29] audit: type=1326 audit(1755508868.401:16499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.1.5980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0b59ebe9 code=0x7ffc0000 [ 287.609558][ T29] audit: type=1326 audit(1755508868.401:16500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.1.5980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f5d0b59ebe9 code=0x7ffc0000 [ 287.609596][ T29] audit: type=1326 audit(1755508868.401:16501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.1.5980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0b59ebe9 code=0x7ffc0000 [ 287.682181][T13867] usb 2-1: SetAddress Request (2) to port 0 [ 287.725891][T19439] bridge0: port 3(macvlan2) entered blocking state [ 287.731534][T13867] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 287.740092][T19439] bridge0: port 3(macvlan2) entered disabled state [ 287.860005][T19453] netlink: 'syz.5.5981': attribute type 21 has an invalid length. [ 287.874745][T19439] macvlan2: entered allmulticast mode [ 288.014735][T19439] bridge0: entered allmulticast mode [ 288.028364][T19439] macvlan2: left allmulticast mode [ 288.034615][T19439] bridge0: left allmulticast mode [ 288.040992][T19441] vhci_hcd: connection closed [ 288.041305][ T4678] vhci_hcd: stop threads [ 288.050439][ T4678] vhci_hcd: release socket [ 288.054983][ T4678] vhci_hcd: disconnect device [ 288.055462][T19439] bridge0: left promiscuous mode [ 288.067932][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.127367][T19457] loop9: detected capacity change from 0 to 512 [ 288.148392][T19457] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5982: bg 0: block 248: padding at end of block bitmap is not set [ 288.178648][T19457] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.5982: Failed to acquire dquot type 1 [ 288.192804][T19457] EXT4-fs (loop9): 1 truncate cleaned up [ 288.199276][T19457] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.206540][T19466] netlink: 'syz.3.5985': attribute type 1 has an invalid length. [ 288.212912][T19457] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.250010][T19453] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5981'. [ 288.259755][T19453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5981'. [ 288.271760][T19466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.296034][T19466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.315412][T19468] 9pnet: p9_errstr2errno: server reported unknown error tat [ 288.336044][T19469] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 288.356946][T19471] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 288.468461][T19469] EXT4-fs (loop9): shut down requested (2) [ 288.478458][T19469] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 288.478476][T19457] ================================================================== [ 288.478515][T19457] BUG: KCSAN: data-race in __delete_from_swap_cache / folio_mapping [ 288.488264][T19469] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 288.496111][T19457] [ 288.496126][T19457] write to 0xffffea0004201ea8 of 8 bytes by task 4649 on cpu 0: [ 288.496145][T19457] __delete_from_swap_cache+0x1e8/0x280 [ 288.496181][T19457] delete_from_swap_cache+0x73/0xe0 [ 288.496211][T19457] shmem_swapin_folio+0xf3e/0x13e0 [ 288.496232][T19457] shmem_get_folio_gfp+0x26c/0xd60 [ 288.505786][T19469] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 288.513112][T19457] shmem_file_read_iter+0x10d/0x540 [ 288.513148][T19457] lo_rw_aio+0x6a0/0x760 [ 288.513175][T19457] loop_process_work+0x52d/0xa60 [ 288.568402][T19457] loop_workfn+0x31/0x40 [ 288.572729][T19457] process_scheduled_works+0x4cb/0x9d0 [ 288.578455][T19457] worker_thread+0x582/0x770 [ 288.583695][T19457] kthread+0x489/0x510 [ 288.587823][T19457] ret_from_fork+0xda/0x150 [ 288.592419][T19457] ret_from_fork_asm+0x1a/0x30 [ 288.597538][T19457] [ 288.599862][T19457] read to 0xffffea0004201ea8 of 8 bytes by task 19457 on cpu 1: [ 288.607797][T19457] folio_mapping+0xdd/0x120 [ 288.612571][T19457] evict_folios+0xdd9/0x3520 [ 288.617387][T19457] try_to_shrink_lruvec+0x5b5/0x950 [ 288.622632][T19457] shrink_lruvec+0x22e/0x1b50 [ 288.627712][T19457] shrink_node+0x686/0x2120 [ 288.632314][T19457] do_try_to_free_pages+0x3f6/0xcd0 [ 288.637535][T19457] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 288.643955][T19457] try_charge_memcg+0x358/0x9e0 [ 288.649031][T19457] obj_cgroup_charge_pages+0xa6/0x150 [ 288.654526][T19457] __memcg_kmem_charge_page+0x9f/0x170 [ 288.660110][T19457] __alloc_frozen_pages_noprof+0x188/0x360 [ 288.666108][T19457] alloc_pages_mpol+0xb3/0x250 [ 288.670998][T19457] alloc_pages_noprof+0x90/0x130 [ 288.676136][T19457] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 288.682036][T19457] __kvmalloc_node_noprof+0x30f/0x4e0 [ 288.687627][T19457] ip_set_alloc+0x1f/0x30 [ 288.692138][T19457] hash_netiface_create+0x282/0x740 [ 288.697614][T19457] ip_set_create+0x3cc/0x960 [ 288.702205][T19457] nfnetlink_rcv_msg+0x4c3/0x590 [ 288.707187][T19457] netlink_rcv_skb+0x123/0x220 [ 288.712041][T19457] nfnetlink_rcv+0x16b/0x1690 [ 288.716759][T19457] netlink_unicast+0x5bd/0x690 [ 288.721635][T19457] netlink_sendmsg+0x58b/0x6b0 [ 288.726504][T19457] __sock_sendmsg+0x142/0x180 [ 288.731570][T19457] ____sys_sendmsg+0x31e/0x4e0 [ 288.736782][T19457] ___sys_sendmsg+0x17b/0x1d0 [ 288.741466][T19457] __x64_sys_sendmsg+0xd4/0x160 [ 288.746609][T19457] x64_sys_call+0x191e/0x2ff0 [ 288.751336][T19457] do_syscall_64+0xd2/0x200 [ 288.756070][T19457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.761970][T19457] [ 288.764294][T19457] value changed: 0x0000000000000b99 -> 0x0000000000000000 [ 288.771579][T19457] [ 288.774210][T19457] Reported by Kernel Concurrency Sanitizer on: [ 288.780475][T19457] CPU: 1 UID: 0 PID: 19457 Comm: syz.9.5982 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 288.794899][T19457] Tainted: [W]=WARN [ 288.799080][T19457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.809675][T19457] ================================================================== [ 289.020115][T19457] syz.9.5982 (19457) used greatest stack depth: 6456 bytes left [ 289.030066][T17977] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.104174][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.062316][ T3403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.155106][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.183725][T13874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.224155][T13874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.782175][T13867] usb 2-1: device descriptor read/8, error -110 [ 292.892205][T13867] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 292.913002][T13867] usb 2-1: enqueue for inactive port 0 [ 292.918600][T13867] usb 2-1: enqueue for inactive port 0 [ 292.924386][T13867] usb 2-1: enqueue for inactive port 0 [ 293.112247][T13868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.264156][T13875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.963228][T13867] usb usb2-port1: attempt power cycle [ 294.303917][T13874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.462922][T13868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.353986][T13875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.766863][ T4658] team0: Port device geneve1 removed [ 295.812374][T13867] usb usb2-port1: unable to enumerate USB device [ 295.903772][ T4658]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.913306][ T4658]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.921992][ T4658]  (unregistering): Released all slaves [ 295.966134][ T4658] hsr_slave_0: left promiscuous mode [ 295.995062][ T4658] team0 (unregistering): Port device team_slave_1 removed [ 296.004859][ T4658] team0 (unregistering): Port device team_slave_0 removed [ 296.142659][T13867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.214029][ T4658] IPVS: stop unused estimator thread 0... [ 296.384355][T13864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.434061][T13864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog