last executing test programs: 1m9.190228181s ago: executing program 32 (id=145): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 1m7.516811732s ago: executing program 33 (id=167): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x1f, 0x4, 0x4}, 0x20) 1m0.746783766s ago: executing program 34 (id=284): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 58.874961189s ago: executing program 6 (id=332): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x4, 0xa, 0x0, 0x0) 58.60299056s ago: executing program 6 (id=342): r0 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r0, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000180)='\x00', 0x1}], 0x2, 0x0, 0x0, 0x200080d5}}], 0x1, 0x40000a0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x54, r2, 0xc6daf139ba4fa417, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xdc}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x8, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) 58.60260924s ago: executing program 35 (id=342): r0 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r0, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000180)='\x00', 0x1}], 0x2, 0x0, 0x0, 0x200080d5}}], 0x1, 0x40000a0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x54, r2, 0xc6daf139ba4fa417, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xdc}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x8, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) 56.958875471s ago: executing program 36 (id=366): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb96f37538e486dd63724305"], 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x18) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x1) 55.918554178s ago: executing program 37 (id=380): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r6, &(0x7f00000010c0)=[{&(0x7f0000000080)=""/4089, 0xff9}], 0x1, 0x833, 0xffff) creat(&(0x7f0000000300)='./file0\x00', 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000010) signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) 52.026185234s ago: executing program 38 (id=435): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)={[{@usrquota}, {@usrjquota}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@quota}, {@inlinecrypt}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfshat={'smackfshat', 0x3d, 'max_batch_time'}}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") 49.698726219s ago: executing program 39 (id=471): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0}) 46.832997808s ago: executing program 40 (id=495): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) (fail_nth: 2) 46.269887922s ago: executing program 8 (id=506): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 46.056807994s ago: executing program 8 (id=510): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4280, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000040)={'ip6erspan0\x00', @local}) 45.949291394s ago: executing program 8 (id=513): r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x29, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) 45.868756435s ago: executing program 8 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) read$hiddev(r1, &(0x7f00000000c0)=""/63, 0x3f) syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(r1, r1, 0x0, 0x800000009) 45.731555796s ago: executing program 8 (id=520): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 45.459152438s ago: executing program 8 (id=523): r0 = socket(0x2, 0x80805, 0x0) listen(r0, 0x2) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084"], 0x30}], 0x1, 0x0) (fail_nth: 2) 45.459031367s ago: executing program 41 (id=523): r0 = socket(0x2, 0x80805, 0x0) listen(r0, 0x2) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084"], 0x30}], 0x1, 0x0) (fail_nth: 2) 45.0224234s ago: executing program 3 (id=528): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB="0600000000cd85c0f82a20000800150000000000000000000000a3eea96600f8f4e8448472c322502c0eef9bba0321d275c0e963407e7f25cca78740972cb9f189a6759ee22c5a300c475a1cfd2363516d4d43dbd7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffff0000000002000002c32680000100000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x12, r7, 0x0) syz_io_uring_setup(0x5aeb, &(0x7f0000000000)={0x0, 0x2140, 0x400, 0xfffffffd, 0x229, 0x0, r6}, &(0x7f0000000200)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x80, &(0x7f0000000300)=0x1, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={0x0, 0xba}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x5cd, &(0x7f0000000600)="$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") r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) unlinkat(r7, &(0x7f0000000240)='./file0\x00', 0x0) 44.074859477s ago: executing program 3 (id=536): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYRESOCT], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000900)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0xfffffffffffffdac) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4c71a6007c6647617dadb8beb6b2f2867466fbc688282ba3eb60ca69be1f4eaacdf5c02c5f5958ba77e44504b7c1d8d893c1dcc7f18bde1168f06b93da82acbcdf088dd38ccbc47d50c29d4") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x4004944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)=ANY=[@ANYRES16=r1, @ANYRES16=0x0, @ANYRES64=r0], 0x140}, 0x1, 0x0, 0x0, 0x24000881}, 0x20000800) sendmsg$NFT_BATCH(r2, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYRES8=r3, @ANYRES8=0x0, @ANYBLOB="01e2f6bbd9f042e678a06a8431a320d6ef0bfd50fb00000000b3640abe2f082c8ac71f6d8738a006dbf0316c68d7aa40273c39172aa8269df7866866d90e5e2f6ad0120e9d431b124ed190c3159c9c3c9a20046ebd2c5b38b8211c7ede9d16438c", @ANYRES8=r1, @ANYRES8=r3], 0x64}}, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = gettid() r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000008c0), 0x185102, 0x0) read$ptp(r6, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x2b, 0x7, 0x1, 0x0, 0x12, @mcast2, @loopback, 0x80, 0x80, 0x9, 0x1}}) sendmsg$xdp(r4, &(0x7f0000000880)={&(0x7f0000000280)={0x2c, 0xe, r7, 0x3c}, 0x10, &(0x7f0000000840), 0x0, 0x0, 0x0, 0xc4090}, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/wireless\x00') syz_open_procfs$pagemap(r1, &(0x7f0000000080)) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r8}) chmod(&(0x7f0000000000)='./file0\x00', 0x60) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) lsm_get_self_attr(0x69, &(0x7f00000004c0)={0x0, 0x0, 0xda, 0xba, ""/186}, &(0x7f0000000300)=0xda, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='svc_process\x00', r9, 0x0, 0x3}, 0x18) lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe8, 0xc8, ""/200}, &(0x7f0000000200)=0xe8, 0x0) socket$xdp(0x2c, 0x3, 0x0) 43.888849198s ago: executing program 3 (id=537): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x300, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000efffffff00f429fb36103dbf4d446f9c00f19e1d1f00000000000000006af80348006d00"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000100)) r3 = socket$pptp(0x18, 0x1, 0x2) syz_usb_connect(0x1, 0x24, &(0x7f0000000500)=ANY=[], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x1a00404, &(0x7f0000000080)={[{@noblock_validity}, {@grpquota}]}, 0x1, 0xbb9, &(0x7f00000017c0)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x18) 43.000145904s ago: executing program 9 (id=543): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000740)='id:\xff\xffe{') 42.963438894s ago: executing program 9 (id=544): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000740)='id:\xff\xffe{') (fail_nth: 1) 42.866698205s ago: executing program 9 (id=545): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x208}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9, r6}) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r3) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000001a00)={0x168, r8, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xde5e}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x79d}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x90}, 0x800) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r7, 0xffffffffffffffff, 0x200000000000000) fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x2f, 0x401}) 42.733452406s ago: executing program 3 (id=546): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x80320180, &(0x7f0000000140)="fa6b6d1604d697fa1acb03390cb276d09c5b488c2e89e7a50a593435e8dfdf7a768a302a14a6b972cf51300d60123b1067afcea74777741a56a63518fe18db38cafefffcd6f5df08c4c4703408137814a3aafd53a5eabcd70c9ac59af70d37cfa2d09fcf11db5ac65b33f872", 0x6c, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f00000001c0)="26929421aa2e433c9a376c5d24a968044ece30b7a3095843c5f400d10d01d067ffe482368cd9449e6a4205f120a6471813974c49832f51c17ec51fed06f16e2fb2180fbee04e273c1325321e2b200c78854eb368abac361374ff5d9adb580b0d0dc7e5a04dc1aae90c036bc953cc2f8857673b66abb83c9faad19914c15aee2d46d74120f8bd1021ba2715d716a067ed3e3b554defd6f83c2c22174abdd8594e2100efbe04d75610315c518d64c3c4af") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000e80)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 42.608202326s ago: executing program 9 (id=547): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) read$hiddev(r1, &(0x7f00000000c0)=""/63, 0x3f) syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(r1, r1, 0x0, 0x800000009) 42.607697646s ago: executing program 3 (id=548): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000000061114c0000000000850000001d0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000480)=""/177, 0xb1}], 0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000640)={{{@in=@broadcast, @in6=@mcast2, 0x4e22, 0x0, 0x4e24, 0x1ff, 0xa, 0x20, 0xa0, 0x3a, r3, r5}, {0xf, 0x7, 0x80000000, 0x100, 0x8, 0x0, 0x8001, 0x5}, {0xfffffffffffffff8, 0x7, 0x7fffffff, 0x5}, 0x8, 0x6e6bb3, 0x2, 0x0, 0x2, 0x3}, {{@in6=@private1, 0x4d6, 0xff}, 0x2, @in6=@remote, 0x3506, 0x3, 0x1, 0x8, 0x7, 0xc97e}}, 0xe8) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000014c0)) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="e0010000", @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf2519000000180001801400020077673200000000000000000000000000500001801400020076657468305f766972745f77696669001400020069703667726530000000000000000000080003000100000014000200766c616e3000000000000000000000000800030002000000340001801400020076657468305f746f5f7465616d000000140002007663616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="20000180140002007665746831000000000000000000000008000300010000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="640001801400020076657468315f766972745f7769666900080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f7465616d000000140002006970766c616e310000000000000000001400020070696d3672656700000000000000000034000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3300030000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="4c00018008000300030000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="1400020074756e6c30000000000000000000000008000300020000180800030001000000200001801400020076657568315f746f080001000000000000000000", @ANYRES32=r3, @ANYBLOB], 0x1e0}, 0x1, 0x0, 0x0, 0x40}, 0x8800) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="8510005b0b0000ffff7dff0102000000"], &(0x7f0000000080)='GPL\x00', 0x8a, 0x0, &(0x7f0000000140), 0x40f00, 0x10, '\x00', r3, 0x0, r6, 0x8, &(0x7f00000001c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xc, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{0x0, 0x5, 0x1, 0xb}], 0x10, 0x200}, 0x94) 42.454083207s ago: executing program 9 (id=549): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x4e24, 0x80000000}, 0x3e) 42.251062389s ago: executing program 3 (id=550): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = memfd_create(0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$binfmt_misc(r2, &(0x7f0000000b00), 0x91) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) splice(r1, 0x0, r0, &(0x7f00000000c0)=0x8008, 0xfff, 0x1) 42.250942109s ago: executing program 42 (id=550): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = memfd_create(0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$binfmt_misc(r2, &(0x7f0000000b00), 0x91) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) splice(r1, 0x0, r0, &(0x7f00000000c0)=0x8008, 0xfff, 0x1) 42.161739289s ago: executing program 9 (id=552): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 42.14686575s ago: executing program 43 (id=552): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 41.659164283s ago: executing program 4 (id=554): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000140)={'team0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r6, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x8000}, 0x18) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) 41.525258614s ago: executing program 4 (id=555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0x6e, 0xa4, &(0x7f0000000380)="1e9812998693ecdfc618bf08d63c60113d205b4b24c7261247a2035d8f92f0e501649258a92ba710b6a5b31b248b592d734f1918f27e8fae12bf43c4badc5c685b1129fc4db4852d37f97bea1663f6ef9833bbf847649d9208f41f436f0e10edfb7e1c38aea4b3a3c0cd609c7b7c", &(0x7f0000000400)=""/164, 0x80000001, 0x0, 0xce, 0x98, &(0x7f0000000600)="c0112377af5e8b952a4ea26640684161c3aedbcffa10f7b295fa1214523c6a293b3b8f951a23f9aa4f53f77f5b810d5416af3cc1006b578dffdf0d5180151795ba008846b69e9696782ea25d7aaefdaa00396a9fabd7f97aab31e6530b9cb89cf3a83642559aa02bb7e010a0d0aa6007428858fad9822a2f7c66dba68a168c7fa1a3e0e4b5cc289e8402677aaee0f5e86b3524b529ca4fd70e9d436fedc530c0599fb761e64706b0ab5ad38a9197c4747b0dca452a8b7324268fd03f84532c9bb852108a3be3f5c65c89d3076cbf", &(0x7f0000000700)="368d1bd2cf029a9368e85cf65b1980e952dbe428d9e20f5178afa4d126e96d74de7a9f34744c2945c45076760f648e3f983e8454cba785480c47d7e585d4defd36ab1dbbd4837fd88a6b4ed8ade63b7cb1523b36951a0f17de98be3d1c4e947556f598c8e21ce2b5fbb9701f7d4d42be37251da7cff47c8c7a673b3e465fbb6566aefe1e9b9a14400b57b11e8dfc92a9c99a37bac3119b94", 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x19, 0xc, &(0x7f0000000880)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000840)=0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(0xffffffffffffffff, 0x0) sendmsg$kcm(r6, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1002}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x642, &(0x7f00000011c0)="$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") umount2(&(0x7f00000002c0)='./file0\x00', 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8041}, 0x800) 40.190416372s ago: executing program 4 (id=556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x208}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9, r6}) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r3) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000001a00)={0x168, r8, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xde5e}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x79d}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x90}, 0x800) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r7, 0xffffffffffffffff, 0x200000000000000) fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x2f, 0x401}) 40.022796773s ago: executing program 4 (id=557): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x842, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) read$hiddev(r1, &(0x7f00000000c0)=""/63, 0x3f) syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(r1, r1, 0x0, 0x800000009) 39.909701334s ago: executing program 4 (id=558): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)="11212e", 0x3}, 0x1, 0x0, 0x0, 0x24008011}, 0x8080) 39.319128928s ago: executing program 4 (id=559): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 39.318840468s ago: executing program 44 (id=559): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 39.094657949s ago: executing program 6 (id=496): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "050000000000f300", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "ffffffffffffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r1) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x824100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r5, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x67}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000000}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x97, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) 38.151123316s ago: executing program 6 (id=563): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) read$hiddev(r1, &(0x7f00000000c0)=""/63, 0x3f) syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(r1, r1, 0x0, 0x800000009) 38.013379227s ago: executing program 6 (id=564): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x208}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9, r6}) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r3) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r7, 0xffffffffffffffff, 0x200000000000000) fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x2f, 0x401}) 37.635011029s ago: executing program 6 (id=566): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, 0x0) socket$inet(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[c\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\x00\x00\xbf\xd1\xc8\x85\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40043, 0x1fe) socket$inet6_udp(0xa, 0x2, 0x0) mq_open(&(0x7f0000000100)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7-\xeb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00AWK\n\x8b!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3g:', 0x41, 0x80, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0xac7c, 0x10100, 0x2002, 0x4000000}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x60, 0x11, r1, 0x0, 0x0, 0x0, 0x61, 0x1, {0x1}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x42, 0x40, 0x102, 0x1}, 0x48) 37.634785769s ago: executing program 45 (id=566): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, 0x0) socket$inet(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[c\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\x00\x00\xbf\xd1\xc8\x85\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40043, 0x1fe) socket$inet6_udp(0xa, 0x2, 0x0) mq_open(&(0x7f0000000100)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7-\xeb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00AWK\n\x8b!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3g:', 0x41, 0x80, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0xac7c, 0x10100, 0x2002, 0x4000000}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x60, 0x11, r1, 0x0, 0x0, 0x0, 0x61, 0x1, {0x1}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x42, 0x40, 0x102, 0x1}, 0x48) 3.840945356s ago: executing program 2 (id=1239): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 3.718843667s ago: executing program 2 (id=1245): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000300)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}], 0x2}, 0x0) 3.687582427s ago: executing program 2 (id=1248): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 3.657253657s ago: executing program 2 (id=1251): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffd}, 0x18) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r8, 0x0, 0x8000000002}, 0x18) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xa) 3.056173741s ago: executing program 7 (id=1264): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000300) 2.526714164s ago: executing program 7 (id=1267): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3, 0x0, 0x8000000002}, 0x18) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xa) (fail_nth: 1) 1.447166021s ago: executing program 2 (id=1271): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x48, 0x0, @fd=r0, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0xf8, 0x2, 0x69, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x700, 0x4, 0x800}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) 1.427735801s ago: executing program 1 (id=1273): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)="11212e", 0x3}, 0x1, 0x0, 0x0, 0x24008011}, 0x8080) 1.398356821s ago: executing program 1 (id=1274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040050}, 0x20000000) 1.391101572s ago: executing program 2 (id=1275): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @loopback={0xffffffffffff0000}, 0xa098}, {0xa, 0x4e21, 0xa, @empty, 0x4}, r4, 0x8001}}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, 0x0, 0x40408c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r5}, 0x18) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x0, 0x4, 0xb, 0x0, 0x0, 0x0, 0x4, 0x0, 0x408}, 0xffffffffffffffff, 0x2000007, 0xffffffffffffffff, 0xa) membarrier(0x10, 0x0) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 1.326589021s ago: executing program 1 (id=1276): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) 1.307058452s ago: executing program 1 (id=1277): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffd}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r1) 1.290103982s ago: executing program 0 (id=1278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="a434853ccc6465800b00ce681cbe"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, 0x94) r2 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000000)=0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x26, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x12, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) syslog(0x4, 0xfffffffffffffffc, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000640)={@xdp={0x2c, 0x9, r3, 0x13}, {&(0x7f00000004c0)=""/174, 0xae}, &(0x7f0000000600), 0x22}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x4a) 1.270475812s ago: executing program 0 (id=1279): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)={0x0, 0x3, 0x2, 0x7}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r1, r1, 0x21) wait4(r1, 0x0, 0x40000000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000000), &(0x7f0000000140)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/vmstat\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) 1.034018574s ago: executing program 1 (id=1280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) kexec_load(0x4, 0xa, 0x0, 0x0) 966.868574ms ago: executing program 1 (id=1281): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) socket(0x23, 0x3, 0x4) socket(0x10, 0x3, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0x6e, 0xa4, &(0x7f0000000380)="1e9812998693ecdfc618bf08d63c60113d205b4b24c7261247a2035d8f92f0e501649258a92ba710b6a5b31b248b592d734f1918f27e8fae12bf43c4badc5c685b1129fc4db4852d37f97bea1663f6ef9833bbf847649d9208f41f436f0e10edfb7e1c38aea4b3a3c0cd609c7b7c", &(0x7f0000000400)=""/164, 0x80000001, 0x0, 0xce, 0x98, &(0x7f0000000600)="c0112377af5e8b952a4ea26640684161c3aedbcffa10f7b295fa1214523c6a293b3b8f951a23f9aa4f53f77f5b810d5416af3cc1006b578dffdf0d5180151795ba008846b69e9696782ea25d7aaefdaa00396a9fabd7f97aab31e6530b9cb89cf3a83642559aa02bb7e010a0d0aa6007428858fad9822a2f7c66dba68a168c7fa1a3e0e4b5cc289e8402677aaee0f5e86b3524b529ca4fd70e9d436fedc530c0599fb761e64706b0ab5ad38a9197c4747b0dca452a8b7324268fd03f84532c9bb852108a3be3f5c65c89d3076cbf", &(0x7f0000000700)="368d1bd2cf029a9368e85cf65b1980e952dbe428d9e20f5178afa4d126e96d74de7a9f34744c2945c45076760f648e3f983e8454cba785480c47d7e585d4defd36ab1dbbd4837fd88a6b4ed8ade63b7cb1523b36951a0f17de98be3d1c4e947556f598c8e21ce2b5fbb9701f7d4d42be37251da7cff47c8c7a673b3e465fbb6566aefe1e9b9a14400b57b11e8dfc92a9c99a37bac3119b94", 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x19, 0xc, &(0x7f0000000880)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r5}, 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r7, 0x0) mount$cgroup(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x100000, &(0x7f0000000a40)={[{@subsystem='memory'}, {@nofavordynmods}, {@none}, {@cpuset_v2_mode}, {@clone_children}, {@name={'name', 0x3d, 'mqprio\x00'}}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@noprefix}, {@noprefix}], [{@uid_lt={'uid<', r7}}, {@context={'context', 0x3d, 'root'}}, {@seclabel}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x642, &(0x7f00000011c0)="$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") umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 898.154494ms ago: executing program 5 (id=1282): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r1 = timerfd_create(0x8, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) read(r1, &(0x7f0000000380)=""/189, 0x8) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0x33, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'connmark\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc001}, 0x20040844) 807.707055ms ago: executing program 5 (id=1283): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 733.936186ms ago: executing program 5 (id=1284): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), &(0x7f0000000180)=r2}, 0x20) lsm_get_self_attr(0x64, &(0x7f0000000300)={0x0, 0x0, 0x9b, 0x7b, ""/123}, &(0x7f00000003c0)=0x9b, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000280)) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c5}, 0x0) 683.998446ms ago: executing program 5 (id=1285): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x48051}, 0x40) r2 = inotify_init() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r5}, 0x10) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) close_range(r2, 0xffffffffffffffff, 0x0) 569.526836ms ago: executing program 5 (id=1286): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x4000000000040}, 0x18) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r1, 0x0, &(0x7f0000000740)='id:\xff\xffe{') 494.692657ms ago: executing program 5 (id=1287): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) socket(0x23, 0x3, 0x4) socket(0x10, 0x3, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0x6e, 0xa4, &(0x7f0000000380)="1e9812998693ecdfc618bf08d63c60113d205b4b24c7261247a2035d8f92f0e501649258a92ba710b6a5b31b248b592d734f1918f27e8fae12bf43c4badc5c685b1129fc4db4852d37f97bea1663f6ef9833bbf847649d9208f41f436f0e10edfb7e1c38aea4b3a3c0cd609c7b7c", &(0x7f0000000400)=""/164, 0x80000001, 0x0, 0xce, 0x98, &(0x7f0000000600)="c0112377af5e8b952a4ea26640684161c3aedbcffa10f7b295fa1214523c6a293b3b8f951a23f9aa4f53f77f5b810d5416af3cc1006b578dffdf0d5180151795ba008846b69e9696782ea25d7aaefdaa00396a9fabd7f97aab31e6530b9cb89cf3a83642559aa02bb7e010a0d0aa6007428858fad9822a2f7c66dba68a168c7fa1a3e0e4b5cc289e8402677aaee0f5e86b3524b529ca4fd70e9d436fedc530c0599fb761e64706b0ab5ad38a9197c4747b0dca452a8b7324268fd03f84532c9bb852108a3be3f5c65c89d3076cbf", &(0x7f0000000700)="368d1bd2cf029a9368e85cf65b1980e952dbe428d9e20f5178afa4d126e96d74de7a9f34744c2945c45076760f648e3f983e8454cba785480c47d7e585d4defd36ab1dbbd4837fd88a6b4ed8ade63b7cb1523b36951a0f17de98be3d1c4e947556f598c8e21ce2b5fbb9701f7d4d42be37251da7cff47c8c7a673b3e465fbb6566aefe1e9b9a14400b57b11e8dfc92a9c99a37bac3119b94", 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x19, 0xc, &(0x7f0000000880)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r5}, 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r7, 0x0) mount$cgroup(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x100000, &(0x7f0000000a40)={[{@subsystem='memory'}, {@nofavordynmods}, {@none}, {@cpuset_v2_mode}, {@clone_children}, {@name={'name', 0x3d, 'mqprio\x00'}}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@noprefix}, {@noprefix}], [{@uid_lt={'uid<', r7}}, {@context={'context', 0x3d, 'root'}}, {@seclabel}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x0) sendmsg$kcm(r8, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1002}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x642, &(0x7f00000011c0)="$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") 430.819428ms ago: executing program 7 (id=1288): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x4e24, 0x80000000}, 0x3e) 412.377288ms ago: executing program 0 (id=1289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 398.538968ms ago: executing program 7 (id=1290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x0, 0x3, 0x3c}, @FOU_ATTR_PEER_V4={0x0, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040050}, 0x20000000) 342.080378ms ago: executing program 7 (id=1291): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r1 = timerfd_create(0x8, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) read(r1, &(0x7f0000000380)=""/189, 0x8) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0x33, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'connmark\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc001}, 0x20040844) 266.814398ms ago: executing program 0 (id=1292): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 246.061038ms ago: executing program 7 (id=1293): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)='%pS \x00'}, 0x20) timer_settime(r2, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) io_setup(0xf, &(0x7f00000000c0)=0x0) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000001a300), 0x2, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r10, 0x400, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) io_submit(r7, 0x4, &(0x7f000001a5c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f0000019200)="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", 0x1000, 0xffffffffffffffff, 0x0, 0x3, r8}, &(0x7f000001a340)={0x0, 0x0, 0x0, 0x1, 0x8001, r0, &(0x7f000001a200)="bacb5f52be8e6aa994f484042321e22be300202f4dbae03181649de72b713de27f41d5b543964707aac37abe430c8fafb2f3acc513108ae7db815a128ef24e7ed81ea2317c33b8d637771c097065c45d34e232579f91829a8bc3d799fc05465b64d2b9bed16f351f2c145b2c94e97d18d16403117d7ac17fd49dde78ff1f851d74bc4989251ebe2ccba5f65c3abfe0ed63da6e9202f82f0bb80ee20d2802ba375f194d5100f9fe675d693320d65f4777282c1e53cef586a01652bb1ddadc0b21f1e0f067a0d55b1e5533068cd4f4b788c0419be5167aafca", 0xd8, 0x6, 0x0, 0x3, r9}, &(0x7f000001a480)={0x0, 0x0, 0x0, 0x7, 0x5, r6, &(0x7f000001a380)="293ade2884c12e8a7040e586a967aa3f96d0c36ee788d631a0ff9b14a5b0896895c449a5bc3aa3d89b9918eb0e4f266d72fd5ff56850eb00d1b4d2b40a2ba785297e0d103a9d396b9a60c6094f9052eb24cfc4aca9b05bc4ce486d14ab2895f3298321e4a0069e7453183e16accdb404142a06f30c146c897111c7d2baf18ee52397e86c8dde606a02080b6604c523042b3b1f17f5de8106a2e0517018f6cd18e179001a32499c6ada3e198742e5a8468f95728fa4a0c3f94bb9f214bfadd7b6808e0fbb6bd67803e3b1f3b21cc60d9562c399800d19dd9d7e564c283747221c3a4a8b965207a7c37b58f6d5ff2e839a4d37", 0xf2, 0x3, 0x0, 0x2, r10}, &(0x7f000001a580)={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, &(0x7f000001a4c0)="55a44e62bb6291d579720f7d9f203e3b07a304c8fac6a0a2f38185f936f5458c9e642fc56894e32edbf9fb2e49a0e932e0ae566697792905ee66437d3c8b5d4b48f73e0fe4a9c96c6368276309b1a9759428b79a89396b8d8c955c4c889218185d48d0c7ab4d6a38d857bd2eae70a40d91c7558c34946654dd01187ae5e8400a55b24ea8bfb97f32f73e7a19a868516483b6bf237473f2e8b5108b78658ce746fbe55cce217f03c3d98b50dec7a971c3f6", 0xb1, 0x80000001, 0x0, 0x1, r11}]) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x41}}, 0x14) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r12, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 55.86968ms ago: executing program 0 (id=1294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040050}, 0x20000000) 0s ago: executing program 0 (id=1295): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffd}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r1) kernel console output (not intermixed with test programs): ype 2 family 0 port 6081 - 0 [ 70.737874][ T60] hsr_slave_0: left promiscuous mode [ 70.743809][ T60] hsr_slave_1: left promiscuous mode [ 70.749384][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.757000][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.765081][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.772533][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.781537][ T60] hsr_slave_0: left promiscuous mode [ 70.787120][ T60] hsr_slave_1: left promiscuous mode [ 70.792903][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.800357][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.807900][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.815298][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.827917][ T60] veth1_macvtap: left promiscuous mode [ 70.833421][ T60] veth0_macvtap: left promiscuous mode [ 70.838951][ T60] veth1_vlan: left promiscuous mode [ 70.844300][ T60] veth0_vlan: left promiscuous mode [ 70.849919][ T60] veth1_macvtap: left promiscuous mode [ 70.855504][ T60] veth0_macvtap: left promiscuous mode [ 70.861196][ T60] veth1_vlan: left promiscuous mode [ 70.866615][ T60] veth0_vlan: left promiscuous mode [ 70.967656][ T60] team0 (unregistering): Port device team_slave_1 removed [ 70.976878][ T60] team0 (unregistering): Port device team_slave_0 removed [ 71.029948][ T60] team0 (unregistering): Port device team_slave_1 removed [ 71.039194][ T60] team0 (unregistering): Port device team_slave_0 removed [ 71.075940][ T4355] infiniband syz1: ib_query_port failed (-19) [ 71.118380][ T6153] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.143027][ T6153] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.169969][ T6153] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.191402][ T5936] veth0_vlan: entered promiscuous mode [ 71.198038][ T6153] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.236297][ T5936] veth1_vlan: entered promiscuous mode [ 71.282387][ T5936] veth0_macvtap: entered promiscuous mode [ 71.330871][ T5936] veth1_macvtap: entered promiscuous mode [ 71.351099][ T6153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.393922][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.404889][ T6307] chnl_net:caif_netlink_parms(): no params data found [ 71.422341][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.431852][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.455283][ T6153] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.468528][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.478652][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.489108][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.496283][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.518563][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.531234][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.538460][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.554715][ T6307] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.561947][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.569162][ T6307] bridge_slave_0: entered allmulticast mode [ 71.576256][ T6307] bridge_slave_0: entered promiscuous mode [ 71.591500][ T6157] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 71.602554][ T6307] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.609681][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.617054][ T6307] bridge_slave_1: entered allmulticast mode [ 71.624155][ T6307] bridge_slave_1: entered promiscuous mode [ 71.642587][ T6157] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 71.666182][ T6307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.680114][ T6307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.690807][ T6157] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 71.710659][ T6157] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 71.723335][ T6307] team0: Port device team_slave_0 added [ 71.731326][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 71.737486][ T29] audit: type=1326 audit(1762663521.241:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6358 comm="syz.2.562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc42961f6c9 code=0x0 [ 71.740471][ T6153] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.770793][ T6153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.783586][ T6307] team0: Port device team_slave_1 added [ 71.810378][ T6307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.817512][ T6307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.843715][ T6307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.856056][ T6307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.863078][ T6307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.889107][ T6307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.907874][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.954094][ T6307] hsr_slave_0: entered promiscuous mode [ 71.960172][ T6307] hsr_slave_1: entered promiscuous mode [ 71.979903][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.024989][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.123056][ T6375] loop6: detected capacity change from 0 to 128 [ 72.133553][ T6375] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 72.162703][ T6375] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 72.170818][ T6375] FAT-fs (loop6): Filesystem has been set read-only [ 72.180530][ T6375] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522) [ 72.200532][ T6375] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522) [ 72.236795][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.275999][ T6157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.292608][ T6153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.305724][ T6157] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.355013][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.362103][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.370921][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.378019][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.414030][ T6157] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.424455][ T6157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.532078][ T60] bridge_slave_1: left allmulticast mode [ 72.537851][ T60] bridge_slave_1: left promiscuous mode [ 72.543686][ T6383] random: crng reseeded on system resumption [ 72.543848][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.572627][ T60] bridge_slave_0: left allmulticast mode [ 72.578348][ T60] bridge_slave_0: left promiscuous mode [ 72.584168][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.737139][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.747831][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.757758][ T60] bond0 (unregistering): Released all slaves [ 72.770763][ T6307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.800377][ T6307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.830446][ T6157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.839962][ T60] hsr_slave_0: left promiscuous mode [ 72.854387][ T60] hsr_slave_1: left promiscuous mode [ 72.860169][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.867629][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.875758][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.883163][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.903182][ T60] veth1_macvtap: left promiscuous mode [ 72.908872][ T60] veth0_macvtap: left promiscuous mode [ 72.914889][ T60] veth1_vlan: left promiscuous mode [ 72.921905][ T60] veth0_vlan: left promiscuous mode [ 72.988674][ T60] team0 (unregistering): Port device team_slave_1 removed [ 72.998195][ T60] team0 (unregistering): Port device team_slave_0 removed [ 73.023686][ T6438] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.036910][ T6307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.059739][ T6307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.074822][ T6437] macvtap0: refused to change device tx_queue_len [ 73.090848][ T6153] veth0_vlan: entered promiscuous mode [ 73.124415][ T6153] veth1_vlan: entered promiscuous mode [ 73.173741][ T6153] veth0_macvtap: entered promiscuous mode [ 73.222860][ T6153] veth1_macvtap: entered promiscuous mode [ 73.292902][ T6153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.314967][ T6153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.326885][ T6480] loop2: detected capacity change from 0 to 512 [ 73.343069][ T6480] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.359061][ T416] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.375332][ T6480] EXT4-fs (loop2): 1 truncate cleaned up [ 73.383494][ T6157] veth0_vlan: entered promiscuous mode [ 73.394431][ T6480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.413354][ T60] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.446149][ T6307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.453392][ T416] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.465298][ T6400] chnl_net:caif_netlink_parms(): no params data found [ 73.484302][ T60] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.501428][ T6307] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.523790][ T416] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.560463][ T6157] veth1_vlan: entered promiscuous mode [ 73.588660][ T416] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.601560][ T60] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.614664][ T6480] program syz.2.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.640768][ T6157] veth0_macvtap: entered promiscuous mode [ 73.658800][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.665901][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.680227][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.687333][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.711666][ T29] audit: type=1400 audit(1762663523.221:1141): avc: denied { create } for pid=6508 comm="syz.0.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 73.731181][ T29] audit: type=1400 audit(1762663523.221:1142): avc: denied { setopt } for pid=6508 comm="syz.0.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 73.757693][ T5936] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.769712][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.776891][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.791002][ T6400] bridge_slave_0: entered allmulticast mode [ 73.801205][ T6400] bridge_slave_0: entered promiscuous mode [ 73.832819][ T60] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.846362][ T6522] random: crng reseeded on system resumption [ 73.860785][ T6157] veth1_macvtap: entered promiscuous mode [ 73.871818][ T6400] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.878886][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.886589][ T6400] bridge_slave_1: entered allmulticast mode [ 73.893694][ T6400] bridge_slave_1: entered promiscuous mode [ 73.929499][ T6400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.940512][ T6400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.023428][ T6400] team0: Port device team_slave_0 added [ 74.030955][ T6400] team0: Port device team_slave_1 added [ 74.054638][ T6157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.110559][ T60] bridge_slave_1: left allmulticast mode [ 74.116268][ T60] bridge_slave_1: left promiscuous mode [ 74.122243][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.135089][ T6556] loop0: detected capacity change from 0 to 512 [ 74.145069][ T6556] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 74.153660][ T6554] loop2: detected capacity change from 0 to 512 [ 74.160842][ T6556] EXT4-fs (loop0): invalid journal inode [ 74.166666][ T6554] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.176808][ T6556] EXT4-fs (loop0): can't get journal size [ 74.183401][ T60] bridge_slave_0: left allmulticast mode [ 74.189164][ T60] bridge_slave_0: left promiscuous mode [ 74.194955][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.205799][ T6556] EXT4-fs (loop0): 1 truncate cleaned up [ 74.212012][ T6556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.224405][ T6554] EXT4-fs (loop2): 1 truncate cleaned up [ 74.230548][ T6554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.261377][ T29] audit: type=1400 audit(1762663523.771:1143): avc: denied { create } for pid=6546 comm="syz.0.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.286415][ T29] audit: type=1400 audit(1762663523.781:1144): avc: denied { bind } for pid=6546 comm="syz.0.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.323710][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.341737][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.361751][ T60] bond0 (unregistering): Released all slaves [ 74.378183][ T6157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.388180][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.395170][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.421126][ T6400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.433592][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.440579][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.442777][ T6153] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.466615][ T6400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.507388][ T416] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.535230][ T60] hsr_slave_0: left promiscuous mode [ 74.541169][ T60] hsr_slave_1: left promiscuous mode [ 74.547466][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.554897][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.570743][ T6554] program syz.2.582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.577388][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.587339][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.601559][ T60] veth1_macvtap: left promiscuous mode [ 74.619729][ T60] veth0_macvtap: left promiscuous mode [ 74.627418][ T60] veth1_vlan: left promiscuous mode [ 74.632969][ T60] veth0_vlan: left promiscuous mode [ 74.639099][ T5936] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.705636][ T6594] random: crng reseeded on system resumption [ 74.786406][ T60] team0 (unregistering): Port device team_slave_1 removed [ 74.798341][ T60] team0 (unregistering): Port device team_slave_0 removed [ 74.853253][ T416] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.870362][ T6607] loop2: detected capacity change from 0 to 512 [ 74.882752][ T6607] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.899192][ T6586] netdevsim netdevsim0: Direct firmware load for þ failed with error -2 [ 74.904371][ T6307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.921455][ T6596] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6596 comm=syz.7.588 [ 74.937781][ T6607] EXT4-fs (loop2): 1 truncate cleaned up [ 74.940978][ T416] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.944170][ T6607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.982117][ T6400] hsr_slave_0: entered promiscuous mode [ 75.012413][ T6400] hsr_slave_1: entered promiscuous mode [ 75.023574][ T6400] debugfs: 'hsr0' already exists in 'hsr' [ 75.029413][ T6400] Cannot create hsr debugfs directory [ 75.042572][ T416] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.212627][ T29] audit: type=1400 audit(1762663524.731:1145): avc: denied { read } for pid=6630 comm="syz.7.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.217839][ T6307] veth0_vlan: entered promiscuous mode [ 75.249569][ T6307] veth1_vlan: entered promiscuous mode [ 75.269192][ T6636] loop7: detected capacity change from 0 to 1024 [ 75.275611][ T6307] veth0_macvtap: entered promiscuous mode [ 75.286016][ T6636] EXT4-fs: Ignoring removed nobh option [ 75.291655][ T6636] EXT4-fs: Ignoring removed bh option [ 75.305237][ T6307] veth1_macvtap: entered promiscuous mode [ 75.332726][ T6307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.345433][ T6636] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.353647][ T6307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.385303][ T6157] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.401557][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.431496][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.440288][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.451271][ T6607] program syz.2.591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.465105][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.468610][ T6649] loop0: detected capacity change from 0 to 512 [ 75.493557][ T6649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.507831][ T6649] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.520113][ T29] audit: type=1400 audit(1762663525.041:1146): avc: denied { create } for pid=6648 comm="syz.0.595" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.558802][ T6649] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 75.558944][ T29] audit: type=1400 audit(1762663525.071:1147): avc: denied { setattr } for pid=6648 comm="syz.0.595" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.603153][ T6400] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.610125][ T6649] Quota error (device loop0): write_blk: dquota write failed [ 75.617655][ T6649] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 75.627557][ T6649] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.595: Failed to acquire dquot type 0 [ 75.641951][ T6400] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.653015][ T6400] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.662416][ T5936] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.680425][ T6400] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.765709][ T6400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.803110][ T6676] IPv6: NLM_F_CREATE should be specified when creating new route [ 75.817222][ T6400] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.851221][ T6692] IPv6: NLM_F_CREATE should be specified when creating new route [ 75.860661][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.867744][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.888778][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.895926][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.920824][ T6699] process 'syz.2.601' launched './file0' with NULL argv: empty string added [ 75.982854][ T5139] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 75.990703][ T5139] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 76.032851][ T6153] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.104427][ T6400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.193225][ T6727] netdevsim netdevsim0: Direct firmware load for þ failed with error -2 [ 76.541912][ T6400] veth0_vlan: entered promiscuous mode [ 76.549611][ T6400] veth1_vlan: entered promiscuous mode [ 76.592312][ T6400] veth0_macvtap: entered promiscuous mode [ 76.599805][ T6400] veth1_macvtap: entered promiscuous mode [ 76.646455][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.666614][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.678938][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.714049][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.731975][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.762995][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.809959][ T6764] loop1: detected capacity change from 0 to 4096 [ 76.841815][ T6764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.868834][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 76.868850][ T29] audit: type=1400 audit(1762663526.381:1163): avc: denied { create } for pid=6787 comm="syz.2.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 76.938528][ T6801] random: crng reseeded on system resumption [ 76.965080][ T6800] loop5: detected capacity change from 0 to 512 [ 76.973624][ T6764] dvmrp1: entered allmulticast mode [ 76.995339][ T6806] loop0: detected capacity change from 0 to 512 [ 77.005138][ T6806] EXT4-fs: Ignoring removed nobh option [ 77.010729][ T29] audit: type=1400 audit(1762663526.521:1164): avc: denied { mounton } for pid=6805 comm="syz.0.617" path="/9/file0" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.049642][ T6800] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 77.078705][ T6806] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.617: corrupted inode contents [ 77.091216][ T6806] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.617: mark_inode_dirty error [ 77.105021][ T6806] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.617: corrupted inode contents [ 77.122417][ T6800] EXT4-fs (loop5): 1 truncate cleaned up [ 77.128665][ T6800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.141254][ T6806] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.617: mark_inode_dirty error [ 77.158250][ T6821] FAULT_INJECTION: forcing a failure. [ 77.158250][ T6821] name failslab, interval 1, probability 0, space 0, times 0 [ 77.159213][ T6806] Quota error (device loop0): write_blk: dquota write failed [ 77.171076][ T6821] CPU: 1 UID: 0 PID: 6821 Comm: syz.7.618 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.171158][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 77.171178][ T6821] Call Trace: [ 77.171187][ T6821] [ 77.171196][ T6821] __dump_stack+0x1d/0x30 [ 77.171229][ T6821] dump_stack_lvl+0xe8/0x140 [ 77.171340][ T6821] dump_stack+0x15/0x1b [ 77.171366][ T6821] should_fail_ex+0x265/0x280 [ 77.171392][ T6821] ? dev_ethtool+0x96/0x1670 [ 77.171424][ T6821] should_failslab+0x8c/0xb0 [ 77.171504][ T6821] __kmalloc_cache_noprof+0x4c/0x4a0 [ 77.171553][ T6821] dev_ethtool+0x96/0x1670 [ 77.171582][ T6821] ? full_name_hash+0x92/0xe0 [ 77.171750][ T6821] ? strcmp+0x22/0x50 [ 77.171782][ T6821] dev_ioctl+0x2e0/0x960 [ 77.171878][ T6821] sock_do_ioctl+0x197/0x220 [ 77.171914][ T6821] sock_ioctl+0x41b/0x610 [ 77.172091][ T6821] ? __pfx_sock_ioctl+0x10/0x10 [ 77.172121][ T6821] __se_sys_ioctl+0xce/0x140 [ 77.172153][ T6821] __x64_sys_ioctl+0x43/0x50 [ 77.172181][ T6821] x64_sys_call+0x1816/0x3000 [ 77.172213][ T6821] do_syscall_64+0xd2/0x200 [ 77.172287][ T6821] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.172334][ T6821] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 77.172382][ T6821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.172412][ T6821] RIP: 0033:0x7fe36138f6c9 [ 77.172460][ T6821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.172486][ T6821] RSP: 002b:00007fe35fdef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.172512][ T6821] RAX: ffffffffffffffda RBX: 00007fe3615e5fa0 RCX: 00007fe36138f6c9 [ 77.172540][ T6821] RDX: 0000200000000740 RSI: 0000000000008946 RDI: 0000000000000005 [ 77.172558][ T6821] RBP: 00007fe35fdef090 R08: 0000000000000000 R09: 0000000000000000 [ 77.172576][ T6821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.172595][ T6821] R13: 00007fe3615e6038 R14: 00007fe3615e5fa0 R15: 00007ffc6fc37bb8 [ 77.172623][ T6821] [ 77.381560][ T6806] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 77.381593][ T6806] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.617: Failed to acquire dquot type 0 [ 77.386723][ T6806] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.617: corrupted inode contents [ 77.386847][ T6806] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.617: mark_inode_dirty error [ 77.387047][ T6806] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.617: corrupted inode contents [ 77.387255][ T6806] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.617: mark_inode_dirty error [ 77.387372][ T6806] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.617: corrupted inode contents [ 77.387546][ T6806] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 77.387660][ T6806] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.617: corrupted inode contents [ 77.387938][ T6806] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.617: mark_inode_dirty error [ 77.388119][ T6806] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 77.388587][ T6806] EXT4-fs (loop0): 1 truncate cleaned up [ 77.389020][ T6806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.389133][ T6806] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.400921][ T6806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.414288][ T6307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.511732][ T29] audit: type=1326 audit(1762663527.011:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.2.620" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc42961f6c9 code=0x0 [ 77.603765][ T6855] loop7: detected capacity change from 0 to 128 [ 77.683940][ T6855] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 77.690386][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.625'. [ 77.746293][ T6856] loop1: detected capacity change from 0 to 512 [ 77.775145][ T6856] FAT-fs (loop1): IO charset utf not found [ 77.856593][ T6868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.629'. [ 78.025295][ T6825] program syz.5.615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.152735][ T6875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.630'. [ 78.252453][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'. [ 78.316245][ T29] audit: type=1326 audit(1762663527.831:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 78.460231][ T29] audit: type=1326 audit(1762663527.881:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 78.483720][ T29] audit: type=1326 audit(1762663527.881:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 78.507059][ T29] audit: type=1326 audit(1762663527.881:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 78.530537][ T29] audit: type=1326 audit(1762663527.881:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 78.559730][ T6400] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.619501][ T6916] loop1: detected capacity change from 0 to 2048 [ 78.721231][ T6928] random: crng reseeded on system resumption [ 78.738277][ T6916] hub 2-0:1.0: USB hub found [ 78.777983][ T6916] hub 2-0:1.0: 8 ports detected [ 78.850477][ T6910] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 78.857124][ T6910] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 78.865367][ T6910] vhci_hcd vhci_hcd.0: Device attached [ 78.917572][ T6919] vhci_hcd vhci_hcd.0: port 0 already used [ 78.925500][ T6914] vhci_hcd: connection closed [ 78.925694][ T3954] vhci_hcd: stop threads [ 78.934678][ T3954] vhci_hcd: release socket [ 78.939115][ T3954] vhci_hcd: disconnect device [ 79.035146][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.645'. [ 79.057378][ T6962] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 79.063934][ T6962] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 79.072279][ T6962] vhci_hcd vhci_hcd.0: Device attached [ 79.082507][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.5.645'. [ 79.103893][ T6962] vhci_hcd vhci_hcd.0: port 0 already used [ 79.162250][ T6978] FAULT_INJECTION: forcing a failure. [ 79.162250][ T6978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.175373][ T6978] CPU: 0 UID: 0 PID: 6978 Comm: syz.7.646 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.175403][ T6978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 79.175489][ T6978] Call Trace: [ 79.175496][ T6978] [ 79.175505][ T6978] __dump_stack+0x1d/0x30 [ 79.175600][ T6978] dump_stack_lvl+0xe8/0x140 [ 79.175626][ T6978] dump_stack+0x15/0x1b [ 79.175730][ T6978] should_fail_ex+0x265/0x280 [ 79.175755][ T6978] should_fail+0xb/0x20 [ 79.175805][ T6978] should_fail_usercopy+0x1a/0x20 [ 79.175895][ T6978] _copy_to_user+0x20/0xa0 [ 79.175920][ T6978] simple_read_from_buffer+0xb5/0x130 [ 79.175950][ T6978] proc_fail_nth_read+0x10e/0x150 [ 79.176043][ T6978] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.176076][ T6978] vfs_read+0x1a8/0x770 [ 79.176105][ T6978] ? __rcu_read_unlock+0x4f/0x70 [ 79.176145][ T6978] ? __fget_files+0x184/0x1c0 [ 79.176181][ T6978] ksys_read+0xda/0x1a0 [ 79.176219][ T6978] __x64_sys_read+0x40/0x50 [ 79.176247][ T6978] x64_sys_call+0x27c0/0x3000 [ 79.176268][ T6978] do_syscall_64+0xd2/0x200 [ 79.176287][ T6978] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.176323][ T6978] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 79.176412][ T6978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.176464][ T6978] RIP: 0033:0x7fe36138e0dc [ 79.176481][ T6978] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 79.176504][ T6978] RSP: 002b:00007fe35fdce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.176527][ T6978] RAX: ffffffffffffffda RBX: 00007fe3615e6090 RCX: 00007fe36138e0dc [ 79.176543][ T6978] RDX: 000000000000000f RSI: 00007fe35fdce0a0 RDI: 000000000000000d [ 79.176636][ T6978] RBP: 00007fe35fdce090 R08: 0000000000000000 R09: 0000000000000000 [ 79.176647][ T6978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.176658][ T6978] R13: 00007fe3615e6128 R14: 00007fe3615e6090 R15: 00007ffc6fc37bb8 [ 79.176676][ T6978] [ 79.403472][ T6965] vhci_hcd: connection closed [ 79.403635][ T37] vhci_hcd: stop threads [ 79.412672][ T37] vhci_hcd: release socket [ 79.417086][ T37] vhci_hcd: disconnect device [ 79.610355][ T7024] random: crng reseeded on system resumption [ 79.648343][ T7035] loop0: detected capacity change from 0 to 128 [ 79.658975][ T7035] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 79.714284][ T7043] loop7: detected capacity change from 0 to 1024 [ 79.727117][ T7043] EXT4-fs: Ignoring removed bh option [ 79.742992][ T7043] EXT4-fs: inline encryption not supported [ 79.758580][ T7043] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.821250][ T7043] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 79.851221][ T7043] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.659: lblock 2 mapped to illegal pblock 2 (length 1) [ 79.889078][ T7043] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.659: lblock 0 mapped to illegal pblock 48 (length 1) [ 79.913959][ T7070] FAULT_INJECTION: forcing a failure. [ 79.913959][ T7070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.927123][ T7070] CPU: 1 UID: 0 PID: 7070 Comm: syz.1.663 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.927157][ T7070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 79.927225][ T7070] Call Trace: [ 79.927233][ T7070] [ 79.927241][ T7070] __dump_stack+0x1d/0x30 [ 79.927268][ T7070] dump_stack_lvl+0xe8/0x140 [ 79.927305][ T7070] dump_stack+0x15/0x1b [ 79.927327][ T7070] should_fail_ex+0x265/0x280 [ 79.927350][ T7070] should_fail+0xb/0x20 [ 79.927370][ T7070] should_fail_usercopy+0x1a/0x20 [ 79.927395][ T7070] _copy_to_user+0x20/0xa0 [ 79.927482][ T7070] __se_sys_newstat+0x220/0x280 [ 79.927537][ T7070] __x64_sys_newstat+0x31/0x40 [ 79.927651][ T7070] x64_sys_call+0x73e/0x3000 [ 79.927722][ T7070] do_syscall_64+0xd2/0x200 [ 79.927747][ T7070] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.927781][ T7070] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 79.927884][ T7070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.927909][ T7070] RIP: 0033:0x7faae419f6c9 [ 79.927927][ T7070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.927948][ T7070] RSP: 002b:00007faae2c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 79.927969][ T7070] RAX: ffffffffffffffda RBX: 00007faae43f5fa0 RCX: 00007faae419f6c9 [ 79.927983][ T7070] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000340 [ 79.928051][ T7070] RBP: 00007faae2c07090 R08: 0000000000000000 R09: 0000000000000000 [ 79.928072][ T7070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.928086][ T7070] R13: 00007faae43f6038 R14: 00007faae43f5fa0 R15: 00007ffd9713c0d8 [ 79.928108][ T7070] [ 79.935360][ T7043] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.659: Failed to acquire dquot type 0 [ 80.138327][ T7043] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 80.160166][ T7043] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.659: mark_inode_dirty error [ 80.224910][ T7043] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 80.244770][ T7043] EXT4-fs (loop7): 1 orphan inode deleted [ 80.261749][ T12] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 80.285087][ T7043] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.309836][ T12] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 80.336763][ T7043] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #2: block 16: comm syz.7.659: lblock 0 mapped to illegal pblock 16 (length 1) [ 80.395703][ T6157] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.409585][ T6157] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 80.427650][ T6157] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 80.437276][ T6157] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 80.801524][ T7210] loop7: detected capacity change from 0 to 1024 [ 80.810326][ T7210] EXT4-fs: Ignoring removed nobh option [ 80.816121][ T7210] EXT4-fs: Ignoring removed bh option [ 80.833597][ T7210] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.872976][ T6157] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.910967][ T7232] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=7232 comm=syz.7.670 [ 81.026837][ T7250] hub 2-0:1.0: USB hub found [ 81.036940][ T7250] hub 2-0:1.0: 8 ports detected [ 81.141819][ T7285] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.674'. [ 81.268960][ T7314] loop7: detected capacity change from 0 to 128 [ 81.279738][ T7314] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 81.338794][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.7.678'. [ 81.564224][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 81.573115][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 81.629475][ T7357] Driver unsupported XDP return value 0 on prog (id 625) dev N/A, expect packet loss! [ 81.716124][ T7388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.727488][ T7385] tipc: Started in network mode [ 81.732524][ T7385] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 81.749530][ T7385] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 81.757837][ T7385] tipc: Enabled bearer , priority 10 [ 81.793759][ T7388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.802810][ T7388] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 81.828726][ T7388] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 81.913263][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 81.913281][ T29] audit: type=1400 audit(1762663531.431:1304): avc: denied { create } for pid=7415 comm="syz.7.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 82.024107][ T7432] loop0: detected capacity change from 0 to 128 [ 82.038213][ T7432] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 82.258416][ T29] audit: type=1400 audit(1762663531.771:1305): avc: denied { mount } for pid=7386 comm="syz.2.692" name="/" dev="ramfs" ino=20477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 82.332077][ T7465] loop0: detected capacity change from 0 to 128 [ 82.359590][ T7468] loop5: detected capacity change from 0 to 128 [ 82.366420][ T7465] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 82.403932][ T7468] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 82.441665][ T29] audit: type=1400 audit(1762663531.951:1306): avc: denied { setopt } for pid=7473 comm="syz.2.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.463175][ T7465] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 82.471482][ T7468] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 82.471508][ T7468] FAT-fs (loop5): Filesystem has been set read-only [ 82.471533][ T7468] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 82.493882][ T7465] FAT-fs (loop0): Filesystem has been set read-only [ 82.500906][ T29] audit: type=1400 audit(1762663532.001:1307): avc: denied { setopt } for pid=7473 comm="syz.2.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.521186][ T7465] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 82.638354][ T7483] loop7: detected capacity change from 0 to 1024 [ 82.656969][ T29] audit: type=1400 audit(1762663532.171:1308): avc: denied { append } for pid=7490 comm="syz.5.714" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.699518][ T7491] loop0: detected capacity change from 0 to 2048 [ 82.708785][ T7496] __nla_validate_parse: 3 callbacks suppressed [ 82.708798][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.717'. [ 82.714192][ T29] audit: type=1400 audit(1762663532.231:1309): avc: denied { create } for pid=7490 comm="syz.5.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 82.748600][ T7483] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.758938][ T3401] tipc: Node number set to 1 [ 82.801070][ T7483] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #11: comm syz.7.699: iget: bogus i_mode (1) [ 82.834771][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'. [ 82.925183][ T7514] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 82.952999][ T7521] loop2: detected capacity change from 0 to 128 [ 82.963257][ T7521] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 82.973936][ T7483] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.699: couldn't read orphan inode 11 (err -117) [ 82.988039][ T7521] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 82.996201][ T7521] FAT-fs (loop2): Filesystem has been set read-only [ 83.003807][ T7521] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 83.195287][ T7483] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.302308][ T7436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.366942][ T7558] lo speed is unknown, defaulting to 1000 [ 83.401592][ T7558] lo speed is unknown, defaulting to 1000 [ 83.429950][ T7558] lo speed is unknown, defaulting to 1000 [ 83.474818][ T7558] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 83.551161][ T7558] lo speed is unknown, defaulting to 1000 [ 83.583845][ T7558] lo speed is unknown, defaulting to 1000 [ 83.622135][ T7558] lo speed is unknown, defaulting to 1000 [ 83.653549][ T7558] lo speed is unknown, defaulting to 1000 [ 83.691623][ T29] audit: type=1326 audit(1762663533.111:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7570 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62121df6c9 code=0x7ffc0000 [ 83.715116][ T29] audit: type=1326 audit(1762663533.111:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7570 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62121df6c9 code=0x7ffc0000 [ 83.738474][ T29] audit: type=1326 audit(1762663533.121:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7570 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62121df6c9 code=0x7ffc0000 [ 83.761978][ T29] audit: type=1326 audit(1762663533.121:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7570 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62121df6c9 code=0x7ffc0000 [ 83.793062][ T7558] lo speed is unknown, defaulting to 1000 [ 83.824100][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'. [ 83.945892][ T7597] loop1: detected capacity change from 0 to 128 [ 83.947674][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'. [ 83.965430][ T7597] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 83.987111][ T7591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.008777][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.032869][ T7609] loop1: detected capacity change from 0 to 128 [ 84.040881][ T7609] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 84.236653][ T7627] netlink: 'syz.2.742': attribute type 4 has an invalid length. [ 84.244520][ T7627] netlink: 152 bytes leftover after parsing attributes in process `syz.2.742'. [ 84.282105][ T7627] .`: renamed from bond0 (while UP) [ 84.294086][ T7631] netdevsim netdevsim1: Direct firmware load for þ failed with error -2 [ 84.483789][ T7657] loop7: detected capacity change from 0 to 128 [ 84.533506][ T7651] loop2: detected capacity change from 0 to 8192 [ 84.585345][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.748'. [ 84.643911][ T3954] kworker/u8:8: attempt to access beyond end of device [ 84.643911][ T3954] loop7: rw=1, sector=153, nr_sectors = 8 limit=128 [ 84.657493][ T3954] kworker/u8:8: attempt to access beyond end of device [ 84.657493][ T3954] loop7: rw=1, sector=169, nr_sectors = 8 limit=128 [ 84.677993][ T3954] kworker/u8:8: attempt to access beyond end of device [ 84.677993][ T3954] loop7: rw=1, sector=185, nr_sectors = 8 limit=128 [ 84.692288][ T7673] tipc: Started in network mode [ 84.697178][ T7673] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 84.717644][ T3954] kworker/u8:8: attempt to access beyond end of device [ 84.717644][ T3954] loop7: rw=1, sector=201, nr_sectors = 8 limit=128 [ 84.756390][ T7673] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 84.764854][ T7673] tipc: Enabled bearer , priority 10 [ 84.772442][ T3954] kworker/u8:8: attempt to access beyond end of device [ 84.772442][ T3954] loop7: rw=1, sector=217, nr_sectors = 8 limit=128 [ 84.786988][ T3954] kworker/u8:8: attempt to access beyond end of device [ 84.786988][ T3954] loop7: rw=1, sector=233, nr_sectors = 8 limit=128 [ 84.801512][ T3954] kworker/u8:8: attempt to access beyond end of device [ 84.801512][ T3954] loop7: rw=1, sector=249, nr_sectors = 8 limit=128 [ 84.829977][ T3954] kworker/u8:8: attempt to access beyond end of device [ 84.829977][ T3954] loop7: rw=1, sector=265, nr_sectors = 8 limit=128 [ 84.843607][ T3954] kworker/u8:8: attempt to access beyond end of device [ 84.843607][ T3954] loop7: rw=1, sector=281, nr_sectors = 8 limit=128 [ 84.857748][ T3954] kworker/u8:8: attempt to access beyond end of device [ 84.857748][ T3954] loop7: rw=1, sector=297, nr_sectors = 8 limit=128 [ 84.884932][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 84.971543][ T7701] loop5: detected capacity change from 0 to 2048 [ 85.067007][ T7721] FAULT_INJECTION: forcing a failure. [ 85.067007][ T7721] name failslab, interval 1, probability 0, space 0, times 0 [ 85.079724][ T7721] CPU: 0 UID: 0 PID: 7721 Comm: syz.1.756 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.079760][ T7721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.079778][ T7721] Call Trace: [ 85.079808][ T7721] [ 85.079818][ T7721] __dump_stack+0x1d/0x30 [ 85.079908][ T7721] dump_stack_lvl+0xe8/0x140 [ 85.079986][ T7721] dump_stack+0x15/0x1b [ 85.080010][ T7721] should_fail_ex+0x265/0x280 [ 85.080036][ T7721] should_failslab+0x8c/0xb0 [ 85.080080][ T7721] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 85.080130][ T7721] ? __alloc_skb+0x101/0x320 [ 85.080170][ T7721] __alloc_skb+0x101/0x320 [ 85.080269][ T7721] ? audit_log_start+0x342/0x720 [ 85.080302][ T7721] audit_log_start+0x3a0/0x720 [ 85.080329][ T7721] ? css_rstat_updated+0xb7/0x240 [ 85.080365][ T7721] audit_seccomp+0x48/0x100 [ 85.080451][ T7721] ? __seccomp_filter+0x82d/0x1250 [ 85.080588][ T7721] __seccomp_filter+0x83e/0x1250 [ 85.080661][ T7721] __secure_computing+0x82/0x150 [ 85.080695][ T7721] syscall_trace_enter+0xcf/0x1e0 [ 85.080730][ T7721] do_syscall_64+0xac/0x200 [ 85.080756][ T7721] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 85.080827][ T7721] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 85.080870][ T7721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.080937][ T7721] RIP: 0033:0x7faae41a15e7 [ 85.080955][ T7721] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.080978][ T7721] RSP: 002b:00007faae2c05fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 85.081001][ T7721] RAX: ffffffffffffffda RBX: 00007faae43f5fa0 RCX: 00007faae41a15e7 [ 85.081014][ T7721] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 85.081074][ T7721] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 85.081089][ T7721] R10: 0000200000000380 R11: 0000000000000286 R12: 0000000000000001 [ 85.081104][ T7721] R13: 00007faae43f6038 R14: 00007faae43f5fa0 R15: 00007ffd9713c0d8 [ 85.081127][ T7721] [ 85.320687][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.757'. [ 85.337493][ T7736] loop1: detected capacity change from 0 to 764 [ 85.344211][ T7736] iso9660: Unknown parameter '¦ ÿ' [ 85.439352][ T7744] siw: device registration error -23 [ 85.441122][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.762'. [ 85.479067][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'. [ 85.584041][ T7767] FAULT_INJECTION: forcing a failure. [ 85.584041][ T7767] name failslab, interval 1, probability 0, space 0, times 0 [ 85.596736][ T7767] CPU: 1 UID: 0 PID: 7767 Comm: syz.1.768 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.596767][ T7767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.596781][ T7767] Call Trace: [ 85.596789][ T7767] [ 85.596797][ T7767] __dump_stack+0x1d/0x30 [ 85.596888][ T7767] dump_stack_lvl+0xe8/0x140 [ 85.596963][ T7767] dump_stack+0x15/0x1b [ 85.596984][ T7767] should_fail_ex+0x265/0x280 [ 85.597006][ T7767] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 85.597033][ T7767] should_failslab+0x8c/0xb0 [ 85.597066][ T7767] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 85.597105][ T7767] ? shmem_alloc_inode+0x34/0x50 [ 85.597124][ T7767] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 85.597182][ T7767] shmem_alloc_inode+0x34/0x50 [ 85.597311][ T7767] alloc_inode+0x40/0x170 [ 85.597340][ T7767] new_inode+0x1d/0xe0 [ 85.597392][ T7767] shmem_get_inode+0x244/0x750 [ 85.597420][ T7767] __shmem_file_setup+0x113/0x210 [ 85.597442][ T7767] shmem_file_setup+0x3b/0x50 [ 85.597458][ T7767] __se_sys_memfd_create+0x2c3/0x590 [ 85.597564][ T7767] __x64_sys_memfd_create+0x31/0x40 [ 85.597591][ T7767] x64_sys_call+0x2ac2/0x3000 [ 85.597611][ T7767] do_syscall_64+0xd2/0x200 [ 85.597666][ T7767] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 85.597691][ T7767] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 85.597751][ T7767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.597823][ T7767] RIP: 0033:0x7faae419f6c9 [ 85.597837][ T7767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.597860][ T7767] RSP: 002b:00007faae2c06e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 85.597882][ T7767] RAX: ffffffffffffffda RBX: 0000000000000512 RCX: 00007faae419f6c9 [ 85.597898][ T7767] RDX: 00007faae2c06ef0 RSI: 0000000000000000 RDI: 00007faae4222960 [ 85.597911][ T7767] RBP: 0000200000000380 R08: 00007faae2c06bb7 R09: 00007faae2c06e40 [ 85.597923][ T7767] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000980 [ 85.597938][ T7767] R13: 00007faae2c06ef0 R14: 00007faae2c06eb0 R15: 0000200000000100 [ 85.598003][ T7767] [ 85.831529][ T4355] tipc: Node number set to 1 [ 85.870129][ T7781] loop1: detected capacity change from 0 to 512 [ 85.883824][ T7781] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.960758][ T7781] EXT4-fs (loop1): 1 truncate cleaned up [ 85.966952][ T7781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.184328][ T7826] FAULT_INJECTION: forcing a failure. [ 86.184328][ T7826] name failslab, interval 1, probability 0, space 0, times 0 [ 86.197050][ T7826] CPU: 1 UID: 0 PID: 7826 Comm: syz.2.783 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.197127][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 86.197141][ T7826] Call Trace: [ 86.197148][ T7826] [ 86.197157][ T7826] __dump_stack+0x1d/0x30 [ 86.197183][ T7826] dump_stack_lvl+0xe8/0x140 [ 86.197207][ T7826] dump_stack+0x15/0x1b [ 86.197262][ T7826] should_fail_ex+0x265/0x280 [ 86.197285][ T7826] should_failslab+0x8c/0xb0 [ 86.197315][ T7826] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 86.197344][ T7826] ? __alloc_skb+0x101/0x320 [ 86.197455][ T7826] __alloc_skb+0x101/0x320 [ 86.197546][ T7826] netlink_alloc_large_skb+0xbf/0xf0 [ 86.197703][ T7826] netlink_sendmsg+0x3cf/0x6b0 [ 86.197723][ T7826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.197796][ T7826] __sock_sendmsg+0x145/0x180 [ 86.197874][ T7826] __sys_sendto+0x268/0x330 [ 86.197913][ T7826] __x64_sys_sendto+0x76/0x90 [ 86.197948][ T7826] x64_sys_call+0x2d14/0x3000 [ 86.197993][ T7826] do_syscall_64+0xd2/0x200 [ 86.198018][ T7826] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.198146][ T7826] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 86.198185][ T7826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.198300][ T7826] RIP: 0033:0x7fc42962155c [ 86.198314][ T7826] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 86.198346][ T7826] RSP: 002b:00007fc42807dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 86.198368][ T7826] RAX: ffffffffffffffda RBX: 00007fc42807dfc0 RCX: 00007fc42962155c [ 86.198392][ T7826] RDX: 0000000000000024 RSI: 00007fc42807e010 RDI: 000000000000000f [ 86.198407][ T7826] RBP: 0000000000000000 R08: 00007fc42807df14 R09: 000000000000000c [ 86.198421][ T7826] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000f [ 86.198459][ T7826] R13: 00007fc42807df68 R14: 00007fc42807e010 R15: 0000000000000000 [ 86.198475][ T7826] [ 86.402487][ T7781] program syz.1.771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.472301][ T6307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.569440][ T7825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7825 comm=syz.7.782 [ 86.590500][ T7851] loop2: detected capacity change from 0 to 128 [ 86.600085][ T7825] netlink: 'syz.7.782': attribute type 1 has an invalid length. [ 86.961330][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 86.967604][ T29] audit: type=1326 audit(1762663536.471:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm="syz.5.794" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62121df6c9 code=0x0 [ 87.042331][ T7904] netdevsim netdevsim0: Direct firmware load for þ failed with error -2 [ 87.204947][ T29] audit: type=1326 audit(1762663536.711:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.7.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36138f6c9 code=0x7ffc0000 [ 87.398885][ T29] audit: type=1326 audit(1762663536.751:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.7.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36138f6c9 code=0x7ffc0000 [ 87.422300][ T29] audit: type=1326 audit(1762663536.751:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.7.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe36138f6c9 code=0x7ffc0000 [ 87.445687][ T7944] loop1: detected capacity change from 0 to 128 [ 87.452264][ T29] audit: type=1326 audit(1762663536.751:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.7.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36138f6c9 code=0x7ffc0000 [ 87.475663][ T29] audit: type=1326 audit(1762663536.751:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.7.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe36138f6c9 code=0x7ffc0000 [ 87.499381][ T29] audit: type=1326 audit(1762663536.751:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.7.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36138f6c9 code=0x7ffc0000 [ 87.522744][ T29] audit: type=1326 audit(1762663536.751:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.7.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe36138f6c9 code=0x7ffc0000 [ 87.546376][ T29] audit: type=1326 audit(1762663536.751:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.7.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36138f6c9 code=0x7ffc0000 [ 87.570921][ T29] audit: type=1326 audit(1762663536.751:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.7.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe36138f6c9 code=0x7ffc0000 [ 87.599959][ T7944] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 87.727404][ T7964] random: crng reseeded on system resumption [ 87.822580][ T7974] __nla_validate_parse: 17 callbacks suppressed [ 87.822595][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 87.857226][ T7983] 9pnet_fd: Insufficient options for proto=fd [ 87.878548][ T7983] loop7: detected capacity change from 0 to 1024 [ 87.900032][ T7983] SELinux: security_context_str_to_sid (system_) failed with errno=-22 [ 88.050179][ T8001] loop7: detected capacity change from 0 to 128 [ 88.077115][ T8004] pim6reg: entered allmulticast mode [ 88.082698][ T8001] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 88.170992][ T8020] pim6reg: left allmulticast mode [ 88.205218][ T8024] random: crng reseeded on system resumption [ 88.216199][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.7.829'. [ 88.226648][ T8018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.304969][ T8035] loop2: detected capacity change from 0 to 2048 [ 88.382476][ T8018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.459514][ T8035] hub 2-0:1.0: USB hub found [ 88.474368][ T8035] hub 2-0:1.0: 8 ports detected [ 88.709678][ T8067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.833'. [ 88.851837][ T8079] siw: device registration error -23 [ 88.938119][ T8081] loop7: detected capacity change from 0 to 2048 [ 88.961497][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 89.011771][ T8093] loop0: detected capacity change from 0 to 512 [ 89.018792][ T8093] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 89.077538][ T8093] EXT4-fs (loop0): 1 truncate cleaned up [ 89.097917][ T8093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.127833][ T8081] hub 2-0:1.0: USB hub found [ 89.141598][ T8081] hub 2-0:1.0: 8 ports detected [ 89.202976][ T8104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.843'. [ 89.239870][ T8108] loop7: detected capacity change from 0 to 128 [ 89.247789][ T8104] netlink: 36 bytes leftover after parsing attributes in process `syz.1.843'. [ 89.284101][ T8108] FAT-fs (loop7): Directory bread(block 162) failed [ 89.290733][ T8108] FAT-fs (loop7): Directory bread(block 163) failed [ 89.331293][ T8093] program syz.0.840 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.402355][ T8108] FAT-fs (loop7): Directory bread(block 164) failed [ 89.409032][ T8108] FAT-fs (loop7): Directory bread(block 165) failed [ 89.463244][ T8108] FAT-fs (loop7): Directory bread(block 166) failed [ 89.470200][ T8108] FAT-fs (loop7): Directory bread(block 167) failed [ 89.501541][ T8108] FAT-fs (loop7): Directory bread(block 168) failed [ 89.515025][ T8108] FAT-fs (loop7): Directory bread(block 169) failed [ 89.562984][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.845'. [ 89.589230][ T8108] FAT-fs (loop7): Directory bread(block 162) failed [ 89.596261][ T8108] FAT-fs (loop7): Directory bread(block 163) failed [ 89.636140][ T6153] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.700791][ T8108] bio_check_eod: 104 callbacks suppressed [ 89.700807][ T8108] syz.7.844: attempt to access beyond end of device [ 89.700807][ T8108] loop7: rw=3, sector=234, nr_sectors = 6 limit=128 [ 89.745358][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'. [ 89.757442][ T8128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.765275][ T8108] syz.7.844: attempt to access beyond end of device [ 89.765275][ T8108] loop7: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 89.824102][ T8128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.069630][ T8137] siw: device registration error -23 [ 90.129426][ T8141] loop2: detected capacity change from 0 to 2048 [ 90.244198][ T8146] loop1: detected capacity change from 0 to 128 [ 90.279272][ T8146] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 90.527553][ T8155] loop0: detected capacity change from 0 to 512 [ 90.539884][ T8155] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.561749][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'. [ 90.596664][ T8155] EXT4-fs (loop0): 1 truncate cleaned up [ 90.614642][ T8155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.648260][ T8169] syz.7.844: attempt to access beyond end of device [ 90.648260][ T8169] loop7: rw=3, sector=242, nr_sectors = 6 limit=128 [ 90.679359][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.860'. [ 90.688652][ T8165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.708196][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.722867][ T8172] loop2: detected capacity change from 0 to 2048 [ 90.737582][ T8169] syz.7.844: attempt to access beyond end of device [ 90.737582][ T8169] loop7: rw=2051, sector=248, nr_sectors = 2 limit=128 [ 90.772018][ T8173] loop1: detected capacity change from 0 to 2048 [ 90.799496][ T8173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 90.822577][ T8186] loop5: detected capacity change from 0 to 128 [ 90.840622][ T8186] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 90.863816][ T8172] hub 2-0:1.0: USB hub found [ 90.868486][ T8172] hub 2-0:1.0: 8 ports detected [ 90.984482][ T37] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 90.992620][ T37] FAT-fs (loop5): Filesystem has been set read-only [ 91.006487][ T8197] random: crng reseeded on system resumption [ 91.019720][ T37] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 91.066448][ T6307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 91.075652][ T8202] loop5: detected capacity change from 0 to 128 [ 91.129260][ T8155] program syz.0.857 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.229128][ T6153] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.256107][ T8214] tipc: Started in network mode [ 91.261014][ T8214] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 91.274832][ T8214] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 91.283118][ T8214] tipc: Enabled bearer , priority 10 [ 91.459046][ T8235] loop5: detected capacity change from 0 to 1024 [ 91.467738][ T8245] random: crng reseeded on system resumption [ 91.472125][ T8235] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.491606][ T8235] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.511708][ T8248] netlink: 'syz.2.876': attribute type 12 has an invalid length. [ 91.533134][ T8235] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.874: Invalid block bitmap block 0 in block_group 0 [ 91.598937][ T8235] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.874: Failed to acquire dquot type 0 [ 91.620782][ T8235] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.874: Freeing blocks not in datazone - block = 0, count = 4096 [ 91.636775][ T8235] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.874: Invalid inode bitmap blk 0 in block_group 0 [ 91.658469][ T8235] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 91.658685][ T52] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0 [ 91.672810][ T8252] loop7: detected capacity change from 0 to 4096 [ 91.684870][ T8235] EXT4-fs (loop5): 1 orphan inode deleted [ 91.691149][ T8235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.706411][ T8252] EXT4-fs: test_dummy_encryption option not supported [ 91.730890][ T8257] loop1: detected capacity change from 0 to 1024 [ 91.795847][ T6400] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.806180][ T8257] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.895538][ T8257] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #11: comm syz.1.868: iget: bogus i_mode (1) [ 91.921474][ T8257] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.868: couldn't read orphan inode 11 (err -117) [ 91.962011][ T8257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.015079][ T8252] FAULT_INJECTION: forcing a failure. [ 92.015079][ T8252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.028284][ T8252] CPU: 0 UID: 0 PID: 8252 Comm: syz.7.878 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.028318][ T8252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.028381][ T8252] Call Trace: [ 92.028389][ T8252] [ 92.028397][ T8252] __dump_stack+0x1d/0x30 [ 92.028424][ T8252] dump_stack_lvl+0xe8/0x140 [ 92.028448][ T8252] dump_stack+0x15/0x1b [ 92.028469][ T8252] should_fail_ex+0x265/0x280 [ 92.028562][ T8252] should_fail+0xb/0x20 [ 92.028605][ T8252] should_fail_usercopy+0x1a/0x20 [ 92.028630][ T8252] _copy_from_user+0x1c/0xb0 [ 92.028662][ T8252] ___sys_sendmsg+0xc1/0x1d0 [ 92.028701][ T8252] __x64_sys_sendmsg+0xd4/0x160 [ 92.028798][ T8252] x64_sys_call+0x191e/0x3000 [ 92.028821][ T8252] do_syscall_64+0xd2/0x200 [ 92.028886][ T8252] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 92.028999][ T8252] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 92.029040][ T8252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.029082][ T8252] RIP: 0033:0x7fe36138f6c9 [ 92.029095][ T8252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.029117][ T8252] RSP: 002b:00007fe35fdef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.029140][ T8252] RAX: ffffffffffffffda RBX: 00007fe3615e5fa0 RCX: 00007fe36138f6c9 [ 92.029155][ T8252] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 92.029169][ T8252] RBP: 00007fe35fdef090 R08: 0000000000000000 R09: 0000000000000000 [ 92.029182][ T8252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.029254][ T8252] R13: 00007fe3615e6038 R14: 00007fe3615e5fa0 R15: 00007ffc6fc37bb8 [ 92.029279][ T8252] [ 92.033483][ T8283] tipc: Enabling of bearer rejected, already enabled [ 92.321604][ T3401] tipc: Node number set to 1 [ 92.332831][ T8299] loop5: detected capacity change from 0 to 128 [ 92.382855][ T8243] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.496701][ T8318] loop5: detected capacity change from 0 to 2048 [ 92.577068][ T8323] hub 2-0:1.0: USB hub found [ 92.587117][ T8323] hub 2-0:1.0: 8 ports detected [ 92.647150][ T8330] tipc: Enabling of bearer rejected, already enabled [ 92.659662][ T8318] hub 2-0:1.0: USB hub found [ 92.668298][ T8318] hub 2-0:1.0: 8 ports detected [ 92.784773][ T8352] loop5: detected capacity change from 0 to 128 [ 92.818806][ T8354] loop7: detected capacity change from 0 to 2048 [ 92.843105][ T8216] syz.1.868 (8216) used greatest stack depth: 7240 bytes left [ 92.870225][ T8362] loop5: detected capacity change from 0 to 128 [ 92.885579][ T8354] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.909257][ T8360] __nla_validate_parse: 6 callbacks suppressed [ 92.909275][ T8360] netlink: 19 bytes leftover after parsing attributes in process `syz.1.902'. [ 92.911882][ T8362] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 92.926163][ T8354] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.022185][ T8377] siw: device registration error -23 [ 93.074171][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 93.074188][ T29] audit: type=1326 audit(1762663542.591:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 93.097153][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'. [ 93.104580][ T8375] hub 2-0:1.0: USB hub found [ 93.141857][ T8375] hub 2-0:1.0: 8 ports detected [ 93.197641][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 93.342120][ T8408] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.354627][ T8410] loop5: detected capacity change from 0 to 128 [ 93.371742][ T29] audit: type=1326 audit(1762663542.591:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 93.395086][ T29] audit: type=1326 audit(1762663542.591:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 93.418522][ T29] audit: type=1326 audit(1762663542.591:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f53c809155c code=0x7ffc0000 [ 93.441991][ T29] audit: type=1326 audit(1762663542.591:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 93.465320][ T29] audit: type=1326 audit(1762663542.591:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 93.488611][ T29] audit: type=1326 audit(1762663542.591:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 93.512001][ T29] audit: type=1326 audit(1762663542.591:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 93.535447][ T29] audit: type=1326 audit(1762663542.591:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 93.558834][ T29] audit: type=1326 audit(1762663542.591:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 93.611901][ T8433] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.647152][ T416] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 93.693200][ T416] EXT4-fs (loop7): Remounting filesystem read-only [ 93.699790][ T37] EXT4-fs warning (device loop7): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 93.747604][ T8449] siw: device registration error -23 [ 93.773363][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.919'. [ 93.794192][ T6157] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.839210][ T8461] loop7: detected capacity change from 0 to 128 [ 93.953902][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'. [ 94.115243][ T8493] loop5: detected capacity change from 0 to 128 [ 94.124382][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 94.174282][ T8498] hub 2-0:1.0: USB hub found [ 94.179289][ T8498] hub 2-0:1.0: 8 ports detected [ 94.442105][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'. [ 94.452054][ T8531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.474346][ T8531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.578821][ T8544] netlink: 32 bytes leftover after parsing attributes in process `syz.0.938'. [ 94.629103][ T8555] random: crng reseeded on system resumption [ 94.729239][ T8565] hub 2-0:1.0: USB hub found [ 94.737234][ T8565] hub 2-0:1.0: 8 ports detected [ 94.809463][ T8583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.947'. [ 94.886095][ T8592] siw: device registration error -23 [ 94.962293][ T8598] netlink: 32 bytes leftover after parsing attributes in process `syz.7.951'. [ 94.971803][ T8600] loop1: detected capacity change from 0 to 128 [ 94.982055][ T8600] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 95.000771][ T8603] SELinux: policydb version 0 does not match my version range 15-35 [ 95.010657][ T8603] SELinux: failed to load policy [ 95.044807][ T8603] program syz.0.953 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.128646][ T8619] tipc: Enabling of bearer rejected, already enabled [ 95.150540][ T8627] random: crng reseeded on system resumption [ 95.207230][ T8632] random: crng reseeded on system resumption [ 95.404044][ T8666] SELinux: policydb version 0 does not match my version range 15-35 [ 95.412933][ T8666] SELinux: failed to load policy [ 95.419544][ T8666] program syz.5.968 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.442109][ T8669] random: crng reseeded on system resumption [ 95.525627][ T8676] loop2: detected capacity change from 0 to 2048 [ 95.556015][ T8676] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 95.565727][ T8676] EXT4-fs (loop2): group descriptors corrupted! [ 96.011724][ T8735] random: crng reseeded on system resumption [ 96.093952][ T8743] pim6reg1: entered promiscuous mode [ 96.099322][ T8743] pim6reg1: entered allmulticast mode [ 96.110243][ T8746] loop1: detected capacity change from 0 to 1024 [ 96.131697][ T8746] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.147837][ T8743] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 96.158564][ T8746] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #11: comm syz.1.987: iget: bogus i_mode (1) [ 96.170927][ T8746] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.987: couldn't read orphan inode 11 (err -117) [ 96.186297][ T8746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.305408][ T8746] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.378028][ T8743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.586756][ T8784] hub 2-0:1.0: USB hub found [ 96.598065][ T8784] hub 2-0:1.0: 8 ports detected [ 96.641382][ T8801] lo speed is unknown, defaulting to 1000 [ 96.775533][ T8817] SELinux: policydb version 0 does not match my version range 15-35 [ 96.811431][ T8817] SELinux: failed to load policy [ 96.833638][ T8820] program syz.7.999 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.971839][ T8825] siw: device registration error -23 [ 97.037124][ T8831] loop1: detected capacity change from 0 to 128 [ 97.253121][ T8846] loop1: detected capacity change from 0 to 128 [ 97.760174][ T8860] hub 2-0:1.0: USB hub found [ 97.764977][ T8860] hub 2-0:1.0: 8 ports detected [ 97.825775][ T8864] random: crng reseeded on system resumption [ 97.882323][ T8867] loop5: detected capacity change from 0 to 128 [ 98.080049][ T8878] __nla_validate_parse: 7 callbacks suppressed [ 98.080142][ T8878] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1016'. [ 98.095613][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 98.095629][ T29] audit: type=1326 audit(1762663547.591:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8868 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 98.125273][ T29] audit: type=1326 audit(1762663547.591:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8868 comm="syz.0.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 98.208358][ T8886] netdevsim netdevsim5: Direct firmware load for þ failed with error -2 [ 98.251868][ T8854] syz.1.1009 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 98.266157][ T8854] CPU: 0 UID: 0 PID: 8854 Comm: syz.1.1009 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.266187][ T8854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.266246][ T8854] Call Trace: [ 98.266251][ T8854] [ 98.266257][ T8854] __dump_stack+0x1d/0x30 [ 98.266281][ T8854] dump_stack_lvl+0xe8/0x140 [ 98.266300][ T8854] dump_stack+0x15/0x1b [ 98.266316][ T8854] dump_header+0x81/0x220 [ 98.266335][ T8854] oom_kill_process+0x342/0x400 [ 98.266437][ T8854] out_of_memory+0x979/0xb80 [ 98.266473][ T8854] try_charge_memcg+0x610/0xa10 [ 98.266509][ T8854] obj_cgroup_charge_pages+0xa6/0x150 [ 98.266544][ T8854] __memcg_kmem_charge_page+0x9f/0x170 [ 98.266611][ T8854] __alloc_frozen_pages_noprof+0x188/0x360 [ 98.266641][ T8854] alloc_pages_mpol+0xb3/0x260 [ 98.266663][ T8854] ? alloc_pages_noprof+0x61/0x130 [ 98.266688][ T8854] alloc_pages_noprof+0x90/0x130 [ 98.266708][ T8854] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 98.266828][ T8854] __kvmalloc_node_noprof+0x483/0x670 [ 98.266876][ T8854] ? ip_set_alloc+0x24/0x30 [ 98.266907][ T8854] ? ip_set_alloc+0x24/0x30 [ 98.266970][ T8854] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 98.267054][ T8854] ip_set_alloc+0x24/0x30 [ 98.267092][ T8854] hash_netiface_create+0x282/0x740 [ 98.267147][ T8854] ? __pfx_hash_netiface_create+0x10/0x10 [ 98.267230][ T8854] ip_set_create+0x3cc/0x970 [ 98.267267][ T8854] ? __nla_parse+0x40/0x60 [ 98.267370][ T8854] nfnetlink_rcv_msg+0x4c6/0x590 [ 98.267417][ T8854] netlink_rcv_skb+0x123/0x220 [ 98.267452][ T8854] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 98.267546][ T8854] nfnetlink_rcv+0x167/0x16c0 [ 98.267580][ T8854] ? kmem_cache_free+0xe4/0x3d0 [ 98.267619][ T8854] ? __kfree_skb+0x109/0x150 [ 98.267657][ T8854] ? nlmon_xmit+0x4f/0x60 [ 98.267722][ T8854] ? consume_skb+0x49/0x150 [ 98.267756][ T8854] ? nlmon_xmit+0x4f/0x60 [ 98.267778][ T8854] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 98.267820][ T8854] ? __dev_queue_xmit+0x1200/0x2000 [ 98.267842][ T8854] ? __dev_queue_xmit+0x182/0x2000 [ 98.267867][ T8854] ? ref_tracker_free+0x37d/0x3e0 [ 98.267918][ T8854] ? __netlink_deliver_tap+0x4dc/0x500 [ 98.268033][ T8854] netlink_unicast+0x5c0/0x690 [ 98.268061][ T8854] netlink_sendmsg+0x58b/0x6b0 [ 98.268108][ T8854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.268126][ T8854] __sock_sendmsg+0x145/0x180 [ 98.268149][ T8854] ____sys_sendmsg+0x31e/0x4e0 [ 98.268272][ T8854] ___sys_sendmsg+0x17b/0x1d0 [ 98.268320][ T8854] __x64_sys_sendmsg+0xd4/0x160 [ 98.268345][ T8854] x64_sys_call+0x191e/0x3000 [ 98.268374][ T8854] do_syscall_64+0xd2/0x200 [ 98.268401][ T8854] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.268436][ T8854] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 98.268528][ T8854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.268548][ T8854] RIP: 0033:0x7faae419f6c9 [ 98.268562][ T8854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.268639][ T8854] RSP: 002b:00007faae2c07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.268712][ T8854] RAX: ffffffffffffffda RBX: 00007faae43f5fa0 RCX: 00007faae419f6c9 [ 98.268724][ T8854] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000009 [ 98.268737][ T8854] RBP: 00007faae4221f91 R08: 0000000000000000 R09: 0000000000000000 [ 98.268750][ T8854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.268761][ T8854] R13: 00007faae43f6038 R14: 00007faae43f5fa0 R15: 00007ffd9713c0d8 [ 98.268779][ T8854] [ 98.268784][ T8854] memory: usage 307200kB, limit 307200kB, failcnt 324 [ 98.314238][ T8893] loop7: detected capacity change from 0 to 512 [ 98.317680][ T8854] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 98.317698][ T8854] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 98.340801][ T8893] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 98.343846][ T8854] Memory cgroup stats for /syz1: [ 98.661575][ T8891] hub 2-0:1.0: USB hub found [ 98.678120][ T8891] hub 2-0:1.0: 8 ports detected [ 98.681548][ T8854] cache 0 [ 98.686224][ T8854] rss 0 [ 98.689009][ T8854] shmem 0 [ 98.692071][ T8854] mapped_file 0 [ 98.694690][ T8893] EXT4-fs (loop7): 1 truncate cleaned up [ 98.695530][ T8854] dirty 0 [ 98.695541][ T8854] writeback 4096 [ 98.701969][ T8893] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.704112][ T8854] workingset_refault_anon 126 [ 98.724941][ T8854] workingset_refault_file 0 [ 98.729534][ T8854] swap 184320 [ 98.732906][ T8854] swapcached 12288 [ 98.736725][ T8854] pgpgin 26883 [ 98.740189][ T8854] pgpgout 26880 [ 98.743735][ T8854] pgfault 35669 [ 98.747229][ T8854] pgmajfault 59 [ 98.750712][ T8854] inactive_anon 12288 [ 98.754794][ T8854] active_anon 0 [ 98.754821][ T8854] inactive_file 0 [ 98.754830][ T8854] active_file 0 [ 98.754887][ T8854] unevictable 0 [ 98.754894][ T8854] hierarchical_memory_limit 314572800 [ 98.754903][ T8854] hierarchical_memsw_limit 9223372036854771712 [ 98.754912][ T8854] total_cache 0 [ 98.754919][ T8854] total_rss 0 [ 98.754925][ T8854] total_shmem 0 [ 98.754979][ T8854] total_mapped_file 0 [ 98.754986][ T8854] total_dirty 0 [ 98.754993][ T8854] total_writeback 4096 [ 98.755000][ T8854] total_workingset_refault_anon 126 [ 98.755008][ T8854] total_workingset_refault_file 0 [ 98.755017][ T8854] total_swap 184320 [ 98.755028][ T8854] total_swapcached 12288 [ 98.755038][ T8854] total_pgpgin 26883 [ 98.755048][ T8854] total_pgpgout 26880 [ 98.755058][ T8854] total_pgfault 35669 [ 98.755068][ T8854] total_pgmajfault 59 [ 98.755079][ T8854] total_inactive_anon 12288 [ 98.755151][ T8854] total_active_anon 0 [ 98.755219][ T8854] total_inactive_file 0 [ 98.755230][ T8854] total_active_file 0 [ 98.755240][ T8854] total_unevictable 0 [ 98.755251][ T8854] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1009,pid=8853,uid=0 [ 98.755344][ T8854] Memory cgroup out of memory: Killed process 8853 (syz.1.1009) total-vm:93824kB, anon-rss:1264kB, file-rss:22372kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 98.795038][ T8899] random: crng reseeded on system resumption [ 98.999304][ T8915] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1029'. [ 99.023444][ T29] audit: type=1326 audit(1762663548.541:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8916 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 99.023483][ T29] audit: type=1326 audit(1762663548.541:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8916 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 99.023587][ T29] audit: type=1326 audit(1762663548.541:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8916 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 99.023618][ T29] audit: type=1326 audit(1762663548.541:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8916 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 99.023748][ T29] audit: type=1326 audit(1762663548.541:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8916 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 99.023952][ T29] audit: type=1326 audit(1762663548.541:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8916 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 99.024078][ T29] audit: type=1326 audit(1762663548.541:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8916 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 99.039726][ T29] audit: type=1326 audit(1762663548.541:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8919 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f53c80c1f85 code=0x7ffc0000 [ 99.366412][ T8930] loop5: detected capacity change from 0 to 128 [ 99.422891][ T8893] program syz.7.1020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.502388][ T6157] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.522172][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 99.541086][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1037'. [ 99.644161][ T8946] loop1: detected capacity change from 0 to 512 [ 99.649527][ T8948] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1041'. [ 99.655244][ T8946] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.661126][ T8942] IPv6: NLM_F_CREATE should be specified when creating new route [ 99.689864][ T8946] EXT4-fs (loop1): 1 truncate cleaned up [ 99.707141][ T8952] SELinux: policydb version 0 does not match my version range 15-35 [ 99.715755][ T8952] SELinux: failed to load policy [ 99.720002][ T8946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.780112][ T8955] loop2: detected capacity change from 0 to 128 [ 99.803881][ T8953] loop5: detected capacity change from 0 to 2048 [ 99.934061][ T8946] program syz.1.1040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.943839][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1043'. [ 99.964905][ T8953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.997486][ T8953] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.052237][ T6307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.065197][ T8969] hub 2-0:1.0: USB hub found [ 100.069939][ T8969] hub 2-0:1.0: 8 ports detected [ 100.100321][ T8975] hub 2-0:1.0: USB hub found [ 100.110541][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1050'. [ 100.125981][ T8975] hub 2-0:1.0: 8 ports detected [ 100.151649][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1050'. [ 100.180863][ T8987] loop1: detected capacity change from 0 to 128 [ 100.244748][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 100.278148][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1057'. [ 100.437825][ T9004] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.469318][ T9017] loop1: detected capacity change from 0 to 128 [ 100.492237][ T6400] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.513586][ T9017] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 100.765079][ T9051] hub 2-0:1.0: USB hub found [ 100.769789][ T9051] hub 2-0:1.0: 8 ports detected [ 100.785792][ T9057] loop5: detected capacity change from 0 to 128 [ 100.796507][ T9057] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 100.935510][ T9071] hub 2-0:1.0: USB hub found [ 100.940654][ T9071] hub 2-0:1.0: 8 ports detected [ 101.022730][ T9083] netlink: 'syz.5.1095': attribute type 13 has an invalid length. [ 101.068506][ T9090] loop1: detected capacity change from 0 to 128 [ 101.078429][ T9090] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 101.109137][ T9083] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.116405][ T9083] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.192468][ T9083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.222570][ T9099] hub 2-0:1.0: USB hub found [ 101.227744][ T9099] hub 2-0:1.0: 8 ports detected [ 101.274563][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.284927][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.294455][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.317727][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.715702][ T9149] loop2: detected capacity change from 0 to 128 [ 101.732525][ T9149] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 102.107083][ T9168] hub 2-0:1.0: USB hub found [ 102.111878][ T9168] hub 2-0:1.0: 8 ports detected [ 102.146668][ T9174] random: crng reseeded on system resumption [ 102.679294][ T9136] syz.1.1116 (9136) used greatest stack depth: 6376 bytes left [ 102.839981][ T9259] loop2: detected capacity change from 0 to 128 [ 102.851084][ T9259] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 102.869888][ T9262] loop1: detected capacity change from 0 to 128 [ 103.142683][ T9283] loop1: detected capacity change from 0 to 1024 [ 103.163614][ T9283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.177355][ T9283] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.200872][ T29] kauditd_printk_skb: 458 callbacks suppressed [ 103.200902][ T29] audit: type=1400 audit(1762663552.711:2665): avc: denied { create } for pid=9282 comm="syz.1.1182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 103.205417][ T9283] __nla_validate_parse: 26 callbacks suppressed [ 103.205434][ T9283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1182'. [ 103.233734][ T29] audit: type=1400 audit(1762663552.721:2666): avc: denied { create } for pid=9282 comm="syz.1.1182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=nfc_socket permissive=1 [ 103.264374][ T9283] netlink: 'syz.1.1182': attribute type 12 has an invalid length. [ 103.287799][ T9299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1187'. [ 103.297690][ T29] audit: type=1400 audit(1762663552.781:2667): avc: denied { create } for pid=9282 comm="syz.1.1182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 103.319213][ T29] audit: type=1400 audit(1762663552.781:2668): avc: denied { write } for pid=9282 comm="syz.1.1182" path="socket:[25802]" dev="sockfs" ino=25802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 103.344469][ T29] audit: type=1400 audit(1762663552.781:2669): avc: denied { nlmsg_write } for pid=9282 comm="syz.1.1182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 103.365864][ T29] audit: type=1400 audit(1762663552.791:2670): avc: denied { create } for pid=9282 comm="syz.1.1182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 103.371173][ T9301] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1188'. [ 103.386061][ T29] audit: type=1400 audit(1762663552.791:2671): avc: denied { connect } for pid=9282 comm="syz.1.1182" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 103.386094][ T29] audit: type=1400 audit(1762663552.791:2672): avc: denied { write } for pid=9282 comm="syz.1.1182" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 103.386221][ T29] audit: type=1400 audit(1762663552.791:2673): avc: denied { ioctl } for pid=9282 comm="syz.1.1182" path="socket:[25804]" dev="sockfs" ino=25804 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 103.468425][ T9296] hub 2-0:1.0: USB hub found [ 103.505740][ T9296] hub 2-0:1.0: 8 ports detected [ 103.535832][ T9310] SELinux: policydb version 0 does not match my version range 15-35 [ 103.563980][ T9310] SELinux: failed to load policy [ 103.573282][ T9311] loop1: detected capacity change from 0 to 128 [ 103.582609][ T9311] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 103.751419][ T9321] hub 2-0:1.0: USB hub found [ 103.767637][ T9321] hub 2-0:1.0: 8 ports detected [ 103.792846][ T29] audit: type=1326 audit(1762663553.311:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.7.1198" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe36138f6c9 code=0x0 [ 103.827009][ T9333] loop5: detected capacity change from 0 to 1024 [ 103.845848][ T9333] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.859141][ T9333] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #11: comm syz.5.1196: iget: bogus i_mode (1) [ 103.873854][ T9333] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1196: couldn't read orphan inode 11 (err -117) [ 103.886440][ T9333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.900719][ T9333] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.937194][ T9338] lo speed is unknown, defaulting to 1000 [ 104.075050][ T9351] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1202'. [ 104.181081][ T9307] syz.2.1189 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 104.195356][ T9307] CPU: 0 UID: 0 PID: 9307 Comm: syz.2.1189 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.195482][ T9307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.195498][ T9307] Call Trace: [ 104.195506][ T9307] [ 104.195514][ T9307] __dump_stack+0x1d/0x30 [ 104.195599][ T9307] dump_stack_lvl+0xe8/0x140 [ 104.195623][ T9307] dump_stack+0x15/0x1b [ 104.195646][ T9307] dump_header+0x81/0x220 [ 104.195669][ T9307] oom_kill_process+0x342/0x400 [ 104.195706][ T9307] out_of_memory+0x979/0xb80 [ 104.195785][ T9307] try_charge_memcg+0x610/0xa10 [ 104.195829][ T9307] obj_cgroup_charge_pages+0xa6/0x150 [ 104.195857][ T9307] __memcg_kmem_charge_page+0x9f/0x170 [ 104.195960][ T9307] __alloc_frozen_pages_noprof+0x188/0x360 [ 104.195987][ T9307] alloc_pages_mpol+0xb3/0x260 [ 104.196012][ T9307] ? alloc_pages_noprof+0xf4/0x130 [ 104.196039][ T9307] alloc_pages_noprof+0x90/0x130 [ 104.196117][ T9307] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 104.196178][ T9307] __kvmalloc_node_noprof+0x483/0x670 [ 104.196245][ T9307] ? ip_set_alloc+0x24/0x30 [ 104.196327][ T9307] ? ip_set_alloc+0x24/0x30 [ 104.196420][ T9307] ip_set_alloc+0x24/0x30 [ 104.196451][ T9307] hash_netiface_create+0x282/0x740 [ 104.196496][ T9307] ? __pfx_hash_netiface_create+0x10/0x10 [ 104.196561][ T9307] ip_set_create+0x3cc/0x970 [ 104.196599][ T9307] ? __nla_parse+0x40/0x60 [ 104.196629][ T9307] nfnetlink_rcv_msg+0x4c6/0x590 [ 104.196696][ T9307] netlink_rcv_skb+0x123/0x220 [ 104.196795][ T9307] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 104.196840][ T9307] nfnetlink_rcv+0x167/0x16c0 [ 104.196911][ T9307] ? kmem_cache_free+0xe4/0x3d0 [ 104.197026][ T9307] ? __kfree_skb+0x109/0x150 [ 104.197064][ T9307] ? nlmon_xmit+0x4f/0x60 [ 104.197093][ T9307] ? consume_skb+0x49/0x150 [ 104.197148][ T9307] ? nlmon_xmit+0x4f/0x60 [ 104.197176][ T9307] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 104.197237][ T9307] ? __dev_queue_xmit+0x1200/0x2000 [ 104.197305][ T9307] ? __dev_queue_xmit+0x182/0x2000 [ 104.197406][ T9307] ? ref_tracker_free+0x37d/0x3e0 [ 104.197457][ T9307] ? __netlink_deliver_tap+0x4dc/0x500 [ 104.197562][ T9307] netlink_unicast+0x5c0/0x690 [ 104.197611][ T9307] netlink_sendmsg+0x58b/0x6b0 [ 104.197637][ T9307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.197662][ T9307] __sock_sendmsg+0x145/0x180 [ 104.197694][ T9307] ____sys_sendmsg+0x31e/0x4e0 [ 104.197809][ T9307] ___sys_sendmsg+0x17b/0x1d0 [ 104.197852][ T9307] __x64_sys_sendmsg+0xd4/0x160 [ 104.197882][ T9307] x64_sys_call+0x191e/0x3000 [ 104.197981][ T9307] do_syscall_64+0xd2/0x200 [ 104.198005][ T9307] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 104.198038][ T9307] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 104.198157][ T9307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.198182][ T9307] RIP: 0033:0x7fc42961f6c9 [ 104.198200][ T9307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.198220][ T9307] RSP: 002b:00007fc42807f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.198241][ T9307] RAX: ffffffffffffffda RBX: 00007fc429875fa0 RCX: 00007fc42961f6c9 [ 104.198256][ T9307] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 104.198270][ T9307] RBP: 00007fc4296a1f91 R08: 0000000000000000 R09: 0000000000000000 [ 104.198284][ T9307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.198372][ T9307] R13: 00007fc429876038 R14: 00007fc429875fa0 R15: 00007fffa4583238 [ 104.198391][ T9307] [ 104.198504][ T9307] memory: usage 307200kB, limit 307200kB, failcnt 194 [ 104.544372][ T9307] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 104.552276][ T9307] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 104.559564][ T9307] Memory cgroup stats for /syz2: [ 104.560303][ T9307] cache 0 [ 104.568339][ T9307] rss 0 [ 104.571102][ T9307] shmem 0 [ 104.574076][ T9307] mapped_file 0 [ 104.577558][ T9307] dirty 0 [ 104.580501][ T9307] writeback 0 [ 104.584350][ T9307] workingset_refault_anon 42 [ 104.588955][ T9307] workingset_refault_file 0 [ 104.593722][ T9307] swap 188416 [ 104.597063][ T9307] swapcached 4096 [ 104.600766][ T9307] pgpgin 91980 [ 104.604256][ T9307] pgpgout 91979 [ 104.607719][ T9307] pgfault 73108 [ 104.611170][ T9307] pgmajfault 29 [ 104.614647][ T9307] inactive_anon 0 [ 104.618293][ T9307] active_anon 4096 [ 104.622033][ T9307] inactive_file 0 [ 104.625657][ T9307] active_file 0 [ 104.629103][ T9307] unevictable 0 [ 104.632591][ T9307] hierarchical_memory_limit 314572800 [ 104.637957][ T9307] hierarchical_memsw_limit 9223372036854771712 [ 104.644163][ T9307] total_cache 0 [ 104.647668][ T9307] total_rss 0 [ 104.650970][ T9307] total_shmem 0 [ 104.654457][ T9307] total_mapped_file 0 [ 104.658440][ T9307] total_dirty 0 [ 104.661944][ T9307] total_writeback 0 [ 104.665772][ T9307] total_workingset_refault_anon 42 [ 104.670961][ T9307] total_workingset_refault_file 0 [ 104.676054][ T9307] total_swap 188416 [ 104.679866][ T9307] total_swapcached 4096 [ 104.684056][ T9307] total_pgpgin 91980 [ 104.687952][ T9307] total_pgpgout 91979 [ 104.691958][ T9307] total_pgfault 73108 [ 104.696030][ T9307] total_pgmajfault 29 [ 104.700002][ T9307] total_inactive_anon 0 [ 104.704183][ T9307] total_active_anon 4096 [ 104.708420][ T9307] total_inactive_file 0 [ 104.712616][ T9307] total_active_file 0 [ 104.716651][ T9307] total_unevictable 0 [ 104.720623][ T9307] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1189,pid=9306,uid=0 [ 104.735243][ T9307] Memory cgroup out of memory: Killed process 9306 (syz.2.1189) total-vm:93824kB, anon-rss:1136kB, file-rss:22112kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 104.945988][ T9378] random: crng reseeded on system resumption [ 104.985973][ T9383] random: crng reseeded on system resumption [ 105.015140][ T9385] FAULT_INJECTION: forcing a failure. [ 105.015140][ T9385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.028328][ T9385] CPU: 0 UID: 0 PID: 9385 Comm: syz.0.1208 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.028388][ T9385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.028431][ T9385] Call Trace: [ 105.028515][ T9385] [ 105.028523][ T9385] __dump_stack+0x1d/0x30 [ 105.028549][ T9385] dump_stack_lvl+0xe8/0x140 [ 105.028570][ T9385] dump_stack+0x15/0x1b [ 105.028588][ T9385] should_fail_ex+0x265/0x280 [ 105.028607][ T9385] should_fail+0xb/0x20 [ 105.028666][ T9385] should_fail_usercopy+0x1a/0x20 [ 105.028688][ T9385] _copy_from_user+0x1c/0xb0 [ 105.028713][ T9385] ___sys_sendmsg+0xc1/0x1d0 [ 105.028806][ T9385] __x64_sys_sendmsg+0xd4/0x160 [ 105.028835][ T9385] x64_sys_call+0x191e/0x3000 [ 105.028931][ T9385] do_syscall_64+0xd2/0x200 [ 105.028955][ T9385] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 105.028985][ T9385] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 105.029021][ T9385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.029081][ T9385] RIP: 0033:0x7f53c808f6c9 [ 105.029096][ T9385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.029182][ T9385] RSP: 002b:00007f53c6af7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.029201][ T9385] RAX: ffffffffffffffda RBX: 00007f53c82e5fa0 RCX: 00007f53c808f6c9 [ 105.029214][ T9385] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 105.029226][ T9385] RBP: 00007f53c6af7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.029273][ T9385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.029285][ T9385] R13: 00007f53c82e6038 R14: 00007f53c82e5fa0 R15: 00007ffde61a3828 [ 105.029304][ T9385] [ 105.277936][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1210'. [ 105.388565][ T9408] loop5: detected capacity change from 0 to 512 [ 105.402904][ T9408] EXT4-fs: Ignoring removed bh option [ 105.416411][ T9408] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 105.443380][ T9408] EXT4-fs (loop5): 1 truncate cleaned up [ 105.449547][ T9408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.478784][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1216'. [ 105.510297][ T9417] SELinux: policydb version 0 does not match my version range 15-35 [ 105.533127][ T9417] SELinux: failed to load policy [ 105.583124][ T6400] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.866120][ T9445] hub 2-0:1.0: USB hub found [ 105.871866][ T9445] hub 2-0:1.0: 8 ports detected [ 106.032117][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1227'. [ 106.096472][ T9481] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1228'. [ 106.213958][ T9492] loop5: detected capacity change from 0 to 128 [ 106.221846][ T9492] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 106.306795][ T9505] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1232'. [ 106.402508][ T9523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1238'. [ 106.454108][ T9527] hub 2-0:1.0: USB hub found [ 106.465607][ T9533] SELinux: policydb version 0 does not match my version range 15-35 [ 106.480894][ T9533] SELinux: failed to load policy [ 106.482882][ T9527] hub 2-0:1.0: 8 ports detected [ 106.588451][ T3954] Bluetooth: hci1: Frame reassembly failed (-84) [ 106.603045][ T9555] Bluetooth: hci1: Frame reassembly failed (-90) [ 106.620143][ T3954] Bluetooth: hci2: Frame reassembly failed (-84) [ 106.631042][ T9563] Bluetooth: hci2: Frame reassembly failed (-90) [ 106.924378][ T9582] random: crng reseeded on system resumption [ 106.995995][ T9584] hub 2-0:1.0: USB hub found [ 107.000845][ T9584] hub 2-0:1.0: 8 ports detected [ 107.041498][ T9588] SELinux: policydb version 0 does not match my version range 15-35 [ 107.049690][ T9588] SELinux: failed to load policy [ 107.088071][ T9592] loop7: detected capacity change from 0 to 128 [ 107.095986][ T9592] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 107.719964][ T37] Bluetooth: hci3: Frame reassembly failed (-84) [ 107.726950][ T9649] Bluetooth: hci3: Frame reassembly failed (-90) [ 107.733646][ T9649] FAULT_INJECTION: forcing a failure. [ 107.733646][ T9649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.746827][ T9649] CPU: 1 UID: 0 PID: 9649 Comm: syz.7.1267 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.746861][ T9649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.746876][ T9649] Call Trace: [ 107.746883][ T9649] [ 107.746893][ T9649] __dump_stack+0x1d/0x30 [ 107.746952][ T9649] dump_stack_lvl+0xe8/0x140 [ 107.746976][ T9649] dump_stack+0x15/0x1b [ 107.746999][ T9649] should_fail_ex+0x265/0x280 [ 107.747127][ T9649] should_fail+0xb/0x20 [ 107.747206][ T9649] should_fail_usercopy+0x1a/0x20 [ 107.747234][ T9649] _copy_to_user+0x20/0xa0 [ 107.747275][ T9649] simple_read_from_buffer+0xb5/0x130 [ 107.747328][ T9649] proc_fail_nth_read+0x10e/0x150 [ 107.747424][ T9649] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.747462][ T9649] vfs_read+0x1a8/0x770 [ 107.747490][ T9649] ? __rcu_read_unlock+0x4f/0x70 [ 107.747516][ T9649] ? __fget_files+0x184/0x1c0 [ 107.747632][ T9649] ? tiocsti+0x19b/0x1d0 [ 107.747662][ T9649] ksys_read+0xda/0x1a0 [ 107.747697][ T9649] __x64_sys_read+0x40/0x50 [ 107.747863][ T9649] x64_sys_call+0x27c0/0x3000 [ 107.747887][ T9649] do_syscall_64+0xd2/0x200 [ 107.747966][ T9649] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 107.748002][ T9649] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 107.748109][ T9649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.748149][ T9649] RIP: 0033:0x7fe36138e0dc [ 107.748163][ T9649] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 107.748183][ T9649] RSP: 002b:00007fe35fdef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.748274][ T9649] RAX: ffffffffffffffda RBX: 00007fe3615e5fa0 RCX: 00007fe36138e0dc [ 107.748290][ T9649] RDX: 000000000000000f RSI: 00007fe35fdef0a0 RDI: 0000000000000008 [ 107.748305][ T9649] RBP: 00007fe35fdef090 R08: 0000000000000000 R09: 0000000000000000 [ 107.748320][ T9649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.748386][ T9649] R13: 00007fe3615e6038 R14: 00007fe3615e5fa0 R15: 00007ffc6fc37bb8 [ 107.748409][ T9649] [ 108.502387][ T3646] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 108.508596][ T9535] FAULT_INJECTION: forcing a failure. [ 108.508596][ T9535] name failslab, interval 1, probability 0, space 0, times 0 [ 108.521244][ T9535] CPU: 1 UID: 0 PID: 9535 Comm: syz.5.1243 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.521274][ T9535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.521285][ T9535] Call Trace: [ 108.521291][ T9535] [ 108.521299][ T9535] __dump_stack+0x1d/0x30 [ 108.521331][ T9535] dump_stack_lvl+0xe8/0x140 [ 108.521352][ T9535] dump_stack+0x15/0x1b [ 108.521451][ T9535] should_fail_ex+0x265/0x280 [ 108.521471][ T9535] should_failslab+0x8c/0xb0 [ 108.521501][ T9535] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 108.521601][ T9535] ? __alloc_skb+0x101/0x320 [ 108.521633][ T9535] __alloc_skb+0x101/0x320 [ 108.521661][ T9535] ? cancel_delayed_work_sync+0xa6/0xc0 [ 108.521692][ T9535] hci_sock_dev_event+0xd0/0x2f0 [ 108.521716][ T9535] hci_unregister_dev+0x244/0x2b0 [ 108.521855][ T9535] hci_uart_tty_close+0x115/0x170 [ 108.521885][ T9535] ? __pfx_hci_uart_tty_close+0x10/0x10 [ 108.521915][ T9535] tty_ldisc_close+0x74/0xa0 [ 108.521938][ T9535] tty_set_ldisc+0x1b9/0x380 [ 108.521985][ T9535] tiocsetd+0x51/0x60 [ 108.522008][ T9535] tty_ioctl+0xa79/0xb80 [ 108.522030][ T9535] ? __pfx_tty_ioctl+0x10/0x10 [ 108.522053][ T9535] __se_sys_ioctl+0xce/0x140 [ 108.522129][ T9535] __x64_sys_ioctl+0x43/0x50 [ 108.522150][ T9535] x64_sys_call+0x1816/0x3000 [ 108.522178][ T9535] do_syscall_64+0xd2/0x200 [ 108.522199][ T9535] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 108.522228][ T9535] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 108.522394][ T9535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.522527][ T9535] RIP: 0033:0x7f62121df6c9 [ 108.522542][ T9535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.522659][ T9535] RSP: 002b:00007f6210c47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.522679][ T9535] RAX: ffffffffffffffda RBX: 00007f6212435fa0 RCX: 00007f62121df6c9 [ 108.522754][ T9535] RDX: 0000200000000140 RSI: 0000000000005423 RDI: 0000000000000003 [ 108.522767][ T9535] RBP: 00007f6210c47090 R08: 0000000000000000 R09: 0000000000000000 [ 108.522779][ T9535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.522792][ T9535] R13: 00007f6212436038 R14: 00007f6212435fa0 R15: 00007ffdf06183b8 [ 108.522811][ T9535] [ 108.745424][ T9650] Bluetooth: hci2: command 0x1003 tx timeout [ 108.750814][ T9536] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 108.751672][ T9650] Bluetooth: hci1: command 0x1003 tx timeout [ 108.757707][ T44] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 108.875839][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 108.875856][ T29] audit: type=1326 audit(1762663558.391:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9747 comm="syz.2.1275" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc42961f6c9 code=0x0 [ 108.967892][ T29] audit: type=1326 audit(1762663558.481:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.0.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 108.991599][ T29] audit: type=1326 audit(1762663558.481:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.0.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 109.022493][ T29] audit: type=1326 audit(1762663558.511:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.0.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 109.046032][ T29] audit: type=1326 audit(1762663558.511:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.0.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 109.069574][ T29] audit: type=1326 audit(1762663558.511:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.0.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 109.074627][ T9768] lo speed is unknown, defaulting to 1000 [ 109.093076][ T29] audit: type=1326 audit(1762663558.541:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.0.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 109.122189][ T29] audit: type=1326 audit(1762663558.541:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.0.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 109.145630][ T29] audit: type=1326 audit(1762663558.541:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.0.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 109.169079][ T29] audit: type=1326 audit(1762663558.541:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.0.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c808f6c9 code=0x7ffc0000 [ 109.317701][ T9790] loop1: detected capacity change from 0 to 1024 [ 109.359725][ T9790] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.394928][ T9790] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #11: comm syz.1.1281: iget: bogus i_mode (1) [ 109.424701][ T9790] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1281: couldn't read orphan inode 11 (err -117) [ 109.442327][ T9790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.458714][ T9808] hub 2-0:1.0: USB hub found [ 109.464277][ T9808] hub 2-0:1.0: 8 ports detected [ 109.533903][ T9790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.561824][ T9818] __nla_validate_parse: 2 callbacks suppressed [ 109.561839][ T9818] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1285'. [ 109.781602][ T9536] Bluetooth: hci3: command 0x1003 tx timeout [ 109.787753][ T9557] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 109.835707][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1289'. [ 109.854661][ T9842] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1290'. [ 109.878399][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1289'. [ 109.937750][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1289'. [ 110.003140][ T9853] loop5: detected capacity change from 0 to 1024 [ 110.013016][ T9853] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.037012][ T9850] hub 2-0:1.0: USB hub found [ 110.039628][ T9853] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #11: comm syz.5.1287: iget: bogus i_mode (1) [ 110.047071][ T6307] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 110.055505][ T9853] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1287: couldn't read orphan inode 11 (err -117) [ 110.063791][ T6307] CPU: 0 UID: 0 PID: 6307 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.063875][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.063891][ T6307] Call Trace: [ 110.063901][ T6307] [ 110.063911][ T6307] __dump_stack+0x1d/0x30 [ 110.063945][ T6307] dump_stack_lvl+0xe8/0x140 [ 110.063976][ T6307] dump_stack+0x15/0x1b [ 110.064078][ T6307] dump_header+0x81/0x220 [ 110.064104][ T6307] oom_kill_process+0x342/0x400 [ 110.064202][ T6307] out_of_memory+0x979/0xb80 [ 110.064256][ T6307] try_charge_memcg+0x610/0xa10 [ 110.064351][ T6307] charge_memcg+0x51/0xc0 [ 110.064384][ T6307] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 110.064422][ T6307] __read_swap_cache_async+0x17b/0x2d0 [ 110.064511][ T6307] swap_cluster_readahead+0x262/0x3c0 [ 110.064551][ T6307] swapin_readahead+0xde/0x6f0 [ 110.064583][ T6307] ? copy_from_user_nofault+0xd5/0x120 [ 110.064687][ T6307] ? __rcu_read_unlock+0x4f/0x70 [ 110.064723][ T6307] ? __rcu_read_unlock+0x4f/0x70 [ 110.064852][ T6307] ? swap_cache_get_folio+0x277/0x280 [ 110.064880][ T6307] do_swap_page+0x2ae/0x2370 [ 110.064912][ T6307] ? _raw_spin_unlock+0x26/0x50 [ 110.064945][ T6307] ? finish_task_switch+0xad/0x2b0 [ 110.065049][ T6307] ? __pfx_default_wake_function+0x10/0x10 [ 110.065088][ T6307] handle_mm_fault+0x9a5/0x2be0 [ 110.065123][ T6307] ? vma_start_read+0x141/0x1f0 [ 110.065215][ T6307] do_user_addr_fault+0x630/0x1080 [ 110.065244][ T6307] ? fpregs_restore_userregs+0xe2/0x1d0 [ 110.065322][ T6307] ? switch_fpu_return+0xe/0x20 [ 110.065363][ T6307] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 110.065402][ T6307] exc_page_fault+0x62/0xa0 [ 110.065500][ T6307] asm_exc_page_fault+0x26/0x30 [ 110.065527][ T6307] RIP: 0033:0x7faae41d1f45 [ 110.065625][ T6307] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 66 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 110.065649][ T6307] RSP: 002b:00007ffd9713c418 EFLAGS: 00010246 [ 110.065669][ T6307] RAX: 0000000000000000 RBX: 0000000000000156 RCX: 00007faae41d1f43 [ 110.065685][ T6307] RDX: 00007ffd9713c430 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.065701][ T6307] RBP: 00007ffd9713c49c R08: 0000000038fbad6c R09: 0000000000000000 [ 110.065738][ T6307] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 110.065754][ T6307] R13: 00000000000927c0 R14: 000000000001ac0b R15: 00007ffd9713c4f0 [ 110.065780][ T6307] [ 110.065788][ T6307] memory: usage 307200kB, limit 307200kB, failcnt 1126 [ 110.083054][ T9850] hub 2-0:1.0: 8 ports detected [ 110.085563][ T6307] memory+swap: usage 307904kB, limit 9007199254740988kB, failcnt 0 [ 110.085654][ T6307] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 110.137064][ T9853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.138063][ T6307] Memory cgroup stats for /syz1: [ 110.357148][ T6307] cache 0 [ 110.365061][ T6307] rss 0 [ 110.367898][ T6307] shmem 0 [ 110.370847][ T6307] mapped_file 0 [ 110.374403][ T6307] dirty 0 [ 110.377340][ T6307] writeback 0 [ 110.380618][ T6307] workingset_refault_anon 293 [ 110.385315][ T6307] workingset_refault_file 0 [ 110.389820][ T6307] swap 733184 [ 110.393132][ T6307] swapcached 0 [ 110.396615][ T6307] pgpgin 41395 [ 110.400066][ T6307] pgpgout 41395 [ 110.403544][ T6307] pgfault 54103 [ 110.406999][ T6307] pgmajfault 192 [ 110.410617][ T6307] inactive_anon 0 [ 110.414260][ T6307] active_anon 0 [ 110.417782][ T6307] inactive_file 0 [ 110.421455][ T6307] active_file 0 [ 110.424960][ T6307] unevictable 0 [ 110.428519][ T6307] hierarchical_memory_limit 314572800 [ 110.433925][ T6307] hierarchical_memsw_limit 9223372036854771712 [ 110.440073][ T6307] total_cache 0 [ 110.443567][ T6307] total_rss 0 [ 110.446860][ T6307] total_shmem 0 [ 110.450322][ T6307] total_mapped_file 0 [ 110.454337][ T6307] total_dirty 0 [ 110.457794][ T6307] total_writeback 0 [ 110.461621][ T6307] total_workingset_refault_anon 293 [ 110.466815][ T6307] total_workingset_refault_file 0 [ 110.471865][ T6307] total_swap 733184 [ 110.475719][ T6307] total_swapcached 0 [ 110.479639][ T6307] total_pgpgin 41395 [ 110.483568][ T6307] total_pgpgout 41395 [ 110.487555][ T6307] total_pgfault 54103 [ 110.491593][ T6307] total_pgmajfault 192 [ 110.495673][ T6307] total_inactive_anon 0 [ 110.499835][ T6307] total_active_anon 0 [ 110.503868][ T6307] total_inactive_file 0 [ 110.508021][ T6307] total_active_file 0 [ 110.512023][ T6307] total_unevictable 0 [ 110.516004][ T6307] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1281,pid=9780,uid=0 [ 110.530636][ T6307] Memory cgroup out of memory: Killed process 9780 (syz.1.1281) total-vm:93956kB, anon-rss:1136kB, file-rss:22500kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 110.581434][ T6307] ================================================================== [ 110.589736][ T6307] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 110.599583][ T6307] [ 110.601903][ T6307] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1: [ 110.609968][ T6307] tick_do_update_jiffies64+0x113/0x1c0 [ 110.615527][ T6307] tick_nohz_handler+0x7f/0x2d0 [ 110.620388][ T6307] __hrtimer_run_queues+0x20f/0x5a0 [ 110.625590][ T6307] hrtimer_interrupt+0x21a/0x460 [ 110.630531][ T6307] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 110.636442][ T6307] sysvec_apic_timer_interrupt+0x32/0x80 [ 110.642084][ T6307] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 110.648072][ T6307] [ 110.650391][ T6307] read to 0xffffffff868099c0 of 8 bytes by task 6307 on cpu 0: [ 110.657925][ T6307] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 110.664182][ T6307] count_shadow_nodes+0x6a/0x230 [ 110.669129][ T6307] do_shrink_slab+0x63/0x680 [ 110.673730][ T6307] shrink_slab+0x448/0x760 [ 110.678160][ T6307] shrink_node+0x6c3/0x2120 [ 110.682674][ T6307] do_try_to_free_pages+0x3f6/0xcd0 [ 110.687876][ T6307] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 110.693774][ T6307] try_charge_memcg+0x383/0xa10 [ 110.698628][ T6307] charge_memcg+0x51/0xc0 [ 110.702956][ T6307] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 110.708939][ T6307] __read_swap_cache_async+0x17b/0x2d0 [ 110.714403][ T6307] swap_cluster_readahead+0x262/0x3c0 [ 110.719777][ T6307] swapin_readahead+0xde/0x6f0 [ 110.724538][ T6307] do_swap_page+0x2ae/0x2370 [ 110.729127][ T6307] handle_mm_fault+0x9a5/0x2be0 [ 110.733998][ T6307] do_user_addr_fault+0x630/0x1080 [ 110.739111][ T6307] exc_page_fault+0x62/0xa0 [ 110.743621][ T6307] asm_exc_page_fault+0x26/0x30 [ 110.748475][ T6307] [ 110.750792][ T6307] value changed: 0x00000000ffffb5d7 -> 0x00000000ffffb5d8 [ 110.757892][ T6307] [ 110.760214][ T6307] Reported by Kernel Concurrency Sanitizer on: [ 110.766362][ T6307] CPU: 0 UID: 0 PID: 6307 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.776254][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.786304][ T6307] ================================================================== [ 110.989602][ T6400] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.