last executing test programs: 8m10.567917983s ago: executing program 32 (id=52): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x2, 0x0) sendto$inet6(r5, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160005000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r6, 0x0, 0x2}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000001850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shmdt(0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) modify_ldt$read(0x0, &(0x7f0000000000)=""/20, 0x14) unshare(0x2040400) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r9, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x7, 0x4e20, 0x4000, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x0, 0x7, 0x0, 0x4, 0x9, 0x0, 0x20000000008}, {0x6, 0x8, 0xcc}, {0xf6, 0x1, 0x1}, 0x0, 0x0, 0x2, 0x1, 0x1, 0x8}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x40, 'zw!'}}]}, 0x140}}, 0x804) 7m54.607096482s ago: executing program 33 (id=244): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'sit0\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0xfffc, 0x0, 0x2f, 0x0, @empty, @broadcast}}}}) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) socket(0x10, 0x3, 0x0) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f785"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x5717, &(0x7f0000000200)={0x0, 0x5eda, 0x10100, 0x4, 0x25d}, &(0x7f0000000100), &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, &(0x7f0000000300)=ANY=[@ANYBLOB="000300"], 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 7m45.495893098s ago: executing program 34 (id=358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x3) 7m16.079539051s ago: executing program 35 (id=896): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) perf_event_open$cgroup(&(0x7f0000000380)={0x1, 0x80, 0x6, 0xf4, 0x8, 0xf5, 0x0, 0x4, 0x3010, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x27ecc02a, 0x0, @perf_bp={&(0x7f0000000340), 0x4}, 0x20, 0x9, 0x6, 0x0, 0x5, 0x10, 0x3ff, 0x0, 0xc2, 0x0, 0x3}, r2, 0x6, r1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) r7 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) socket$igmp(0x2, 0x3, 0x2) r6 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 6m27.459366206s ago: executing program 4 (id=1976): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000f20b00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f160085000000820000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) io_cancel(0x0, 0x0, 0x0) 6m27.412298997s ago: executing program 4 (id=1979): lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v2={0x2000000, [{0x0, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0xfffffffd}}, 0xe8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r4}, 0x18) mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="e7c116a5cc64da8f64984f9d6c6155cba32def470cf94c7ce339c472543243ff766044c4b78b8ff96dabb297119ecf64959e47b29cdeb3f61430ef1246e773a8adc792beaac967824d2c4e5b72ae5cc36892ddc62784fe01ffbbfd3230977e546f00e6c51150cb9a0d1468fbdad31ac1853b1c4a23d15a375c137257d0c8d06fc944b43be2dc89517f7c116a6f78e12a5ea006ab22068dd723e113856cc859ac467bf6d86e264d7df530b1871a26", @ANYRES64=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000008c0)={0xc4, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x90, 0xac, "6fc6d678425594817eab97141a77cd3a8e33f67b444495b4c423fd5ccf1bfe90997a5271ddfb6b75395475bb134e35f7eb145212e643882d57bb055584649de4dc6dfb1f872a9328e1345c2212de19d7f300fe74d3eed11c2e89b3aabbb2c56868af6716efd24ab66a88d51f5c3c28c14608793afbee0432cd19618a10d03b1b2316d9ed4b0f1d4bc4aab21d"}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x746}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4044801}, 0x4000000) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x0, 0x8, 0x1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x74, 0x0, &(0x7f0000000780)="0015477c5eca5d7752989241ee42f6660fa8389855f4c9ef316336455528878bc38231334fe7a290a3d67aebdc00bb77c01419d21e6f807726156b646d235b544341a89fed66fabd9ca06bb984ba818fff066c435059880dc3d1879a692360319b023517345d55b86b8846b5fbc724cb7c5da6ad", 0x0, 0xcfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00', 0x125) 6m27.335725328s ago: executing program 4 (id=1983): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xd) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpquota}, {@jqfmt_vfsv1}, {@minixdf}]}, 0x1, 0x518, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffc, 0x80100000400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47d8780820335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffff000000e8f20000000200", "b73267f0fffffffff2ff00", [0x10000000000004]}) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511881, 0x96) 6m27.1735247s ago: executing program 4 (id=1986): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r5}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) sendmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001480)="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", 0x545}], 0x1}}], 0x1, 0x4004808) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x41, 0x0) 6m26.622416358s ago: executing program 4 (id=1997): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) tkill(r1, 0x7) 6m26.604888259s ago: executing program 37 (id=1997): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) tkill(r1, 0x7) 4m6.742918752s ago: executing program 9 (id=4636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x4c000) 4m6.711184673s ago: executing program 9 (id=4637): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) creat(&(0x7f0000000040)='./file0\x00', 0xfffffffe) 4m6.687138923s ago: executing program 9 (id=4638): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200454, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$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") symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) write$UHID_INPUT(r1, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) fallocate(r0, 0x0, 0x803, 0x2000404) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) 4m6.538579165s ago: executing program 9 (id=4642): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) timer_delete(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) r5 = socket$can_raw(0x1d, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r6) timer_gettime(r6, &(0x7f0000002cc0)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000822cf5c40f8b6944b7e38c5380a4e5e91ebfc648f8a11bf0db533c1c736a93147c4d6b1473f30ec706fb2fa63799ba3d379934f01ba0035a4e00004002000000001477b201cd3e323779dcafab9a039a45dc1d7a5782259c398f03074d26ca62ef29583e2244a73f3dacbf5f2465faf221132867dc4fc3aacdf167aea374f343"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002d80)={{r5, 0xffffffffffffffff}, &(0x7f0000002d00), &(0x7f0000002d40)=r1}, 0x20) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r9, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x6, 0x1c, &(0x7f0000002dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x8c}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @exit, @jmp={0x5, 0x0, 0x4, 0x2, 0xb, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002ec0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x8, r9, 0x8, &(0x7f0000002f00)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000002f40)={0x2, 0x1, 0x4, 0xffffffff}, 0x10, r10, r0, 0x5, 0x0, &(0x7f0000002f80)=[{0x0, 0x4, 0xb, 0xc}, {0x3, 0x5, 0x9, 0xa}, {0x4, 0x3, 0x7, 0x7}, {0x0, 0x1, 0x8, 0x6}, {0x0, 0x3, 0x1, 0xc}], 0x10, 0x24e}, 0x94) accept$nfc_llcp(r9, &(0x7f00000030c0), &(0x7f0000003140)=0x60) recvmsg$can_raw(r5, &(0x7f0000002c80)={&(0x7f0000000740)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000002b40)=[{&(0x7f00000007c0)=""/162, 0xa2}, {&(0x7f0000000880)=""/75, 0x4b}, {&(0x7f0000000180)=""/24, 0x18}, {&(0x7f0000000900)=""/74, 0x4a}, {&(0x7f0000000980)=""/157, 0x9d}, {&(0x7f0000000a40)=""/247, 0xf7}, {&(0x7f0000001940)=""/244, 0xf4}, {&(0x7f0000001a40)=""/60, 0x3c}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/130, 0x82}], 0xa, &(0x7f0000002c00)=""/73, 0x49}, 0x100) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 4m5.698752868s ago: executing program 9 (id=4656): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x50410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4458, 0x10000, 0xfffffffc, 0x1, 0x88, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x22c00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 4m5.476177872s ago: executing program 9 (id=4659): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x281c2, 0x120) fcntl$setlease(r1, 0x400, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r2, 0xffffffffffffffff, 0x0) 4m5.476067732s ago: executing program 38 (id=4659): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x281c2, 0x120) fcntl$setlease(r1, 0x400, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r2, 0xffffffffffffffff, 0x0) 2m4.45103821s ago: executing program 1 (id=7089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r6, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c30081fffffff8ca63f612002efd9e2c148cd904458a0a6cba83131e41b8f102808d86ff4d3802a383f76d36bc52b7a7acf6c3ef65250331931d8366a2971450cda5e2a2526c3bf8d8bf67c72c4898395af7b45b5f829b0f990ec7d8ae2f477cd9350bdcb0080077700bbfe88718253031b87043fdd3ac97bf28896590a92b5c0ee623a8f4d17a2298773f8c8851b0a4eddc0b534ccf0897d4d06975d52287aa95a050fb7db6ce0898fd17ab0fce65f31d86d8303d152ba05b"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x85) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r8, &(0x7f00000003c0)="a04200f22821c510c5df72d8be12a92b5009ba7d89632f9793d86625bbcbcbb576daeec850c9b1dfc3a1b88724aedf3e133172e085f7f5065a7b6702d63bca74d79b7c1149d2b631b1d2c2df", &(0x7f0000000100)=""/28}, 0x25) 2m2.759846225s ago: executing program 1 (id=7116): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x62, 0x5, 0x3e0, 0x0, 0x178, 0xffffffff, 0x0, 0x2a0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x22e}, [@common=@unspec=@state={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @empty, @gre_key, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'batadv0\x00', 'bond0\x00'}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@addrtype={{0x30}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 2m2.426266781s ago: executing program 1 (id=7120): socket$nl_netfilter(0x10, 0x3, 0xc) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4d}}, &(0x7f0000000480)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x7}, 0x8164, 0x10000, 0x2, 0x1, 0x8, 0x200, 0x4b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x4000034) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 2m2.216640924s ago: executing program 1 (id=7123): perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xc0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffc, 0x4, @perf_config_ext={0xa, 0x7}, 0x1100, 0x7, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0xfffffffe, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) sendfile(r0, r1, 0x0, 0x10000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) ptrace$setregs(0xd, r4, 0x10000, &(0x7f0000000f80)="f97498a5698b62c6a6c00bd65819db5655cfaf1ffae18fdb16ed84680f2c8cb607f5b5fa29acfe8571de861b69cf2145a6294e45b5cedb0aff15b5c030a2b75004536da740f9483b654cbe3f69b442d854ebd9c1443415ace41dcd5dcb781423eeaac7efa1f897382caff4451e2706bdb2848ba8b67563c30f7e9be0cf71248f8e5adecf66dd16dd3efe27f0c013cffeec6ae06b446f7329bd94f9859e405e9541043124d5ddb14a82e83e82f896348c9650f9d352b00e32723acc0493972e16125343a4997df9e03c5b2caaa0e215592fee55294e9de40cc5a111b1187af71641e502873044496045a7f5332e9ae2a5bc26f28a268ac4bfb03398bbd54e45b64d6e83f8e1f7d4f03a562a687ab226839017dca0d310ec3e52f81bbe91d46c281fc49852bf6a222646c82f9a70c27e44e4ffc9373f4dddf742b13e71133adad4901c5c0ec3a76c908f57b64f5b6283430db6eda964d9dd79cf4f28926852c9da52b2a5ffd8d3d730dada886462fa4d1493e15e988f009cf66c0d9bde52019f871dad96f61a667c5fe9afe5476bd86d4faab05aba9d0a42ed922a715eead41136920e43dfce29464987a5b80bc0c1623a9ab87b8ca22b4905ab4375b000f4ff3a3892f80e5f10ee67b2239253679e9a3bb367d5444afc1214a4a74381cf574f2fbaeded8354b97f9a4b8c59167131d1ff1a61a3f26d78fd954e4e662bfd3716ebfd09bdd324a9c4002e72c2cfd2e3a3f77fa183796a295ba16bf5d9f6b0030869911d49187f71a23f4f776af438b4e526c821bde6247c198582cd0f275b012f69942d22eef714744b96c3ab7cd24e95cd2b1ab6eea0d9f01e7b88fa986ea1a67cb7a65b5734c69f843ada2681ab43a91fa902d1a0e068aeee1e5f429891eeb1550949db87458d850ed5f32905ad734746b06cf34cc5f6707c759e7016ea232972a317589ab3e645a83a5169db122dac65216ccf8813e4d62a6755038384d5e551e461a71c85396476b49f8994d707b2b1bec43aaf84c3d3fee64d0362c58b2e289592363c2160d95113cc9703959e563b9a9a5932f2c8e33d2e4512f856d0c712034b8679d01ec2807e8cd05fc231c4ad3cf7dc108432dc373bfb77566700f9b54bc2451cf7630a97fc979f79d9c55d3857e74698b5637d68e06128826f2fca270bcba8ed2a6ddd5f2c78003dc13da6ec8f87b74879bbd3257e2e7f80cb1805e23caf1297e675c92b75a6f0754a9525379494472e672005f27c5599b755176bc9e44255910a038ef5b74dfab25a10339554d3801ad52285c8bf14643d408848d7620d7ab7f3318600d42beecb786d66362890c1bc74905f15f762e3d22ddc07ff18c66ba85beb14b105f0ba657ed1e9783243f9361d2130d083507ddb96778fd05f54bb55150023bcadcb956e3a32dbd8d9ef4cd447644e6c7b842b82d8a6d4e849de79285b39126be2e751d2b9b90a61ca7ed828a419246dc4f43dd154c16bfc3f35063c20739a8e5acd4edef4013bad1c21078f190978af3f40196fd128f41725456a9b5135fdc9f43a779ab4402ee489afbd156628032cae93a3fd75d829a4f54d5adbf23dbc019741fe51646e108484bf287cc1421634204e9da17853feb754ddacc6a00a5f5569e64ad16c3b3e34eaa229790e248811c2c67555b48a79c8c376c1772e4a6d1b8b6a91378bd55574f219fc1b90e4500288cec35c6c1fe91edc83e7f58214149aef1de38f15d6fbb102e9664c100ada321047884b543026f2c10dca3ec3a32f05c3ad552b4fddbd403d53a0804b867d985b1de27f9264a57ef0318a00ba8c0c88bde45f3daf850cf65419668d0c326479c0e66bd5a79f0aefc2729b5d620890d90d4d8814d9067229c17ae48afff47180dc5e30136a222ad140535e28f0f35a8b7cd643ae0e28638fb17e775d6334722c0e0632ce6a7c53323010288d3428a981b87ef2652f3985659cd25ddf0ece75f7fd0f9766525e245c47c9dc20e0ccda13ccc0c87666d68b569e9b75622a1d7240b69269b901376349ff929053e7eb83b589c20436925a76084f7abf3a33026fec4a0beb5c5090b8912404b0e3905a0fc5a879430ef291577db223b24f15880691ef89d539a7819fe0f4577b714f9fff91800afae35b87c67bc54228a061496bef1927ea95b398b5204db70a94b2d28651c349e85aecf89acd0fb1eefe901aa203eaa1b68c19b78424bdc0c1c27921e369697a4be9a691173d32bca8b87e92d9142a8b281f8b68d7d27e7ccffa8b22b01e4b71cd6b4645fb04c08c27a58c3f60d60fa7581c55e211ad6d2ba6d397759f55145fd9ec8775dd1eb10839cda759966d76f65046269a36c59aa20e7e52a85dd0c54bed8b678d0b417e4e59f62a597b1953e52f9a9f5bedb19b0937c69828e7677a2e2d1ef9301cecf8bda8f67cea1731482dc0790fbbff6c56aa56b178ef04072d485c4fcb61153c514d817225a78f3014461abc62f049ab5b5fea525975dd6f773a5a4274e5b58a821dd08996d7b0c158f55fae6ed55089f287ba57eacf64f75aaa5e766b090ca7394ad29b7802d40f2087a5557ad6167751f6a67012a5b49221ce31cc631569860e240cd2cd5354f3b1f2c6a019cd83d94bfdfb6c5cae989cc17fb678fd49a814251efd1b8009bb0b3b2ef15fcfebc4eb364a8de23298c71eba6ee408a162d965c7d4b8b305fbee5f3b7f35818b9264a0904c659bd53732a4bbff0b294d99c4f73f7f2d0e72c4293a2ef55f58ae925e4b94dc774ae985e4f8f097943dc203ea9f3012679afa0b54f56eadfc989a4d624cfc214adc1e256cd0b03b92efb394219b3eb3896480ede70116c5afaeaeefbd5d052e6d623effba5bf0dcbd8092ed47e747d1c21470ccb59402e1f35b79d82fb51c1271b8741a8d3a845c2cf209e4de9f03b1c1ed5a5abcae024507af06239a31ace92d63f588c87d88649698e7d154c99b0346bcf91836a41bf707d84d03f55dde89955b71cce5d4fdabd52228e049491b749e5db5c79eb2c3ac156a10b269f6cc30b3afed075a7f552488dd5869b9d49c24491dfdd49cb2bf71fbfebf26879626899732d4e86558da8768dc12a3d0965d3805e42eaf4c5c2fe41e9792246c42740e79b93023e275acfc61a59ea9971fd8bc810389495bf49f49b3e920d3b057cad6e5fe109a6169554799840d776b135536eef235b593e3c60181b98ae959bc3d4c32dc0ddebdac4d0450163cb9313bab5f2497bbb9190e4020775cdc7f9ee2f17e975b3c57332fc230ffed8b96c52872c508eda38c4bd56744d63bad085134495a633add5e61e9f75f95d2101c5fec7e2d5c530a84b8dcc3a320f889307daf2985569f31d788aedf75397cbd038d787bae122b33228e3dca5c5a44f878693bd1d5cb882c1abff85c222280731d5aa2409fcb2bb1c2167b06fb7a02b36ee10bcb43955bc3b166be81f03d5f1328ac95ba325b648528db164aa12782a9967c1b9458a56193c64b0ddce65c1be03a399261712afac2ec2f1ea39d5b30916394cd6a659fb39c516716638451554bf939782b838aeafafffa9de88bc925167118fb60bad1c42a68594ee2d22acf534ee1983b6b5aa5a03619eca2ac5cffa99b05c61823a90d1da0b109a5d45d395fc61fcef558199267914da1ddbfc8993aede2c149bda127130f5dfc10fa3489d0cfa38fe8d3bfe327c45f77aea60e43c2cd79651aeb909a53c5e0a9b98124b3e6d018c480eb99c66ce76c8b8fd3d0b354ecb9aa8aec678745c05c1299f74e6428d6176dec92c325e2e8c8c23e64d128a40e4e068c6e02c1b47a3f9fdf9d9361d408387c0f11ff8e74fa5681b688c98b6208868a1f508dcd306afdd8c220c45062f3df988f32b55a2931780eb9f2516cce493105c2142017011d6b84422b7bb39a4b3731f1b3839c87390427875e82117bd38f5f01c3b55ed26057d4245167dbc8e6087534659fff7376c588320069bcf4bf9155a7b5258bc882abc5e80352faa840bbde83992633577894515259be7e0d101de9a5db57292dc8faa3e97643d511a60137f737afd7dca6f323fd92b4be72298be1db1bafccc2e571ad7cffbd4bfdf30925c43e834b546cd320c930dd003385b209431847d51e9f162fbb8fc05c4919152c6f93da0a149196c3576f32fc6d790b61c750cca18444d2c021d436e24403facc34e8c20c466c56034200951c9251b7610165b13166fda835f6ef04868ff0800139327bc1efbea7c8351d64bcc8cc2eb06d5bbbe274e829d531db73c48928ec71a48e40d2da1799717fbc2e2f227b560275870f474eeef88518c5be953a28694a925d273b87ae77a2764cd3117144029dced9c732c6be83a26f8e1c49f72d52f3c6d1afe777f7a14e634434e45d3d0e2544224dc384bf8ef7d5a4ae0a774688496d30c651282765e22eb29b5a4729a161f2c9fbd93f35f4d5f52861070d53c2c64d35c05003dbd11459d9fe67e703ba22486e4ca0eb067678f526693cc65254a7615cabae666c40f3ee8428fb4a2cdb5ee911baed1a718ea7be8bf802cb1009f3358733f465e4bc81673018f9b0be6914b8c48315d12615108566b37cecaa15384d9b2c1d18d2893808c7a35873489b0beda0bac1814bd141bf84828d93e0391b4331819ecb3dab6739030417d3d82f79e0a750f44d1ab6780f121e02375af7661374168441a46fae0de151219ec0b3889a1f2a57a684863ac33a9c360451dc91cf8433f1633fcd3d94c0fbea9328331407e7e9b005e27ce37adef8ce2f956effd8c8bfd5fd89e6165658b52add07a68a0c238e98b27ffc8a33958d6441509fd5c692c96f5005be26d65fe555c79ea96a7b72c189d3afa1ba17abd3a7a7a2e23dbb6ea1a3197f57c8d2b4a5774ce43cfa83b885d876600f296a32593aa14b64d39599e897930d958c3972496b2c57f2e40fe553f6d9d7913881257b15edb9e32e533b0fd782a447de406266e6019fb3595094704bbc2f0145c7c923ec7188740b9ec7abce53180f28b1f180ef079e42016b10d205e29dfecc3c70e5491bcea46362a2b39661a31ef878a42fb054efbbf9cbc5a67c81e9da669e1268e0111ec2edbb15e11a164e4cbb5728f6650332024aed8a66a8da8c14fe18078585137f9ad8a348bac3c89e54fba0a90e1a498697e387e80f0dc3f50efedb14edef53465138e7345e1647292272d607a7ffa843ed6daf8ec4902dd3a72db5f2a8dc8319916f3b2b5a398174fe05fe4b8f31e4b5c7266009322662a7772d6d81be1cbdd52ea92a490aadffdc433edb068ca16343ac569c917328cc87e28bb49b7a57bfef1d401acf3557d1abebea11808c6219a7db2b9c9fdcfbddf91d3d05aa9e2d39554715b5fb43d7b7fd23f0c9efc56e194de75e1c59b4c53fe1bfcdb3a9f44c00109277889f0538e99e1f65fd546a950784e25c27e5b885bc76b3a35f2b201b5b69270994f8e2bf4e0b22e32d416adb29ad29af8e76d76365e78f0c3fdab689463c4e467b6e2832e585f44e011d1e585d42f97a7ff33d07dd7e17630ebeac457441ecab589d6c50b233a31cdf2c358bb006cfeb58128b059bcd63e5ad733dab5185d5bcf2e37f27cffa113beeb0dd3b05b62e995725db601bfd5778e3f61abfc653b5a0ef1fde2faf49bdcd8522ab9c24645f3bccb9e2bc2dfb6676d4696acdf1031973e86600c32d8baeb8ea9af042f5685999b2dc58080673650396e5273404fbe5979a3e42f57b35c2eff1aa21eb117550cace3ad4b938c6278e22222a67b97d207df705f048d2d46df940fd1521a3f2f5a1") r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r5, 0x10c, 0x3c, &(0x7f00000006c0)=0x5, 0x4) 2m2.006595237s ago: executing program 1 (id=7126): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffbfffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xf}, 0x18) r3 = syz_io_uring_setup(0x1ca1, &(0x7f0000000280)={0x0, 0xa2bf, 0x1000, 0x2, 0xd4}, &(0x7f0000000000)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x1a5d, &(0x7f0000000340)={0x0, 0x758b, 0x200, 0x0, 0x2ac}, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_POLL_ADD={0x6, 0x15, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8205, &(0x7f0000000080)={[{@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0x81, 0x633, &(0x7f0000000600)="$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") r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89fc, &(0x7f0000000080)) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4000001}, 0x20084005) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m1.669871282s ago: executing program 1 (id=7134): socket$nl_netfilter(0x10, 0x3, 0xc) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4d}}, &(0x7f0000000480)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x7}, 0x8164, 0x10000, 0x2, 0x1, 0x8, 0x200, 0x4b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x4000034) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 2m1.669620212s ago: executing program 39 (id=7134): socket$nl_netfilter(0x10, 0x3, 0xc) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4d}}, &(0x7f0000000480)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x7}, 0x8164, 0x10000, 0x2, 0x1, 0x8, 0x200, 0x4b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x4000034) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 1m19.47867434s ago: executing program 3 (id=7711): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timerfd_create(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) socket$netlink(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) r1 = syz_io_uring_setup(0x24f6, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m19.45529883s ago: executing program 3 (id=7713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x700, 0x0, 0x8, 0x400, {{0x27, 0x4, 0x3, 0x4, 0x9c, 0x67, 0x0, 0x80, 0x4, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x17, 0x9, [@multicast1, @multicast1, @multicast2, @loopback, @multicast2]}, @lsrr={0x83, 0x17, 0x7f, [@private=0xa010100, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @timestamp_prespec={0x44, 0x44, 0x40, 0x3, 0xb, [{@multicast1, 0xf67e}, {@multicast1, 0x6}, {@loopback, 0x5}, {@local, 0xe}, {@empty, 0x3}, {@multicast1, 0x6}, {@loopback, 0x3}, {@local}]}, @ssrr={0x89, 0x7, 0xf8, [@broadcast]}, @timestamp_prespec={0x44, 0xc, 0xa1, 0x3, 0x3, [{@remote, 0xfff}]}]}}}}}) r7 = socket(0x0, 0x3, 0x1000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x1, 0x1, 0x1}}]}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r15, &(0x7f0000001ac0)={0x0, 0xa1ff, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r16, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r14], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) r17 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r17, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r17, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r18, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x104, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x800) 1m19.239155493s ago: executing program 3 (id=7716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="f702000000dffedbdf251c0000000800001b46cad5c0a37c14c4126706623d7b3c1558d9360419f73bd3b9027056bfcbdcedebb6afb02008c68e052947dc44234094ad1e2529a57ece577efd503e0f064fb1b0582e644225793f19c31b934a7efb08"], 0x1c}}, 0x40006) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r5, @ANYRES32, @ANYBLOB="07e1d9c92b68098a3c019dd6ab9c3e0d65", @ANYRESOCT=r3], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f00000003c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r8 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000140)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 1m19.207533844s ago: executing program 3 (id=7717): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000380)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@grpjquota}, {@grpjquota_path={'grpjquota', 0x3d, './file2'}}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000001000000000000008932bd000000000095534ff8db645a40a34432769100d52b0048e1d123fddf2e000000ded177b4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000000)={0xfffffffffffffffc, 0x103000, 0x1000, 0x1, 0x1}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) write$P9_RFSYNC(r6, &(0x7f0000000240)={0x7, 0x33, 0x2}, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x967dfb228300612f, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x2, 0x2, 0x3, 0x5}, {0x5, 0x4, 0xe2, 0x9}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) getsockopt$inet_int(r6, 0x0, 0x17, &(0x7f0000000280), &(0x7f0000000300)=0x4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r7, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x4, 0x20, 0x0, "0000e5ff0100"}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x0, 0x4, 0x0, @local, @rand_addr=0x3}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'erspan0\x00', r10, 0x7800, 0x8, 0x8, 0x5, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x67, 0x0, 0xea, 0x2f, 0x0, @private=0xa010100, @multicast2}}}}) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000002c0)=0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x143900, 0x184) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 1m18.324255737s ago: executing program 3 (id=7726): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000e3375900f1102f00000000009500000000000000876455"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) syz_read_part_table(0x5dc, &(0x7f0000000000)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0000f0ff0000000100f8c00ba2eba882150000e9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f9ff00b7030000000000838500000077e55f71000300950000002ae700000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x100) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0xc0f85403, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) request_key(0x0, 0x0, &(0x7f00000003c0)=')\x00', 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 1m18.083550921s ago: executing program 3 (id=7735): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$C=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xe7\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^`\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00'/885, 0x42, 0x1f0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000500000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000002000072cc43080feaf18100"/28], 0x48) mq_timedsend(r0, 0x0, 0x996a3cc1bc93d8b9, 0x8, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b00000000492a7da7800000000e000000100004e20009c907802000000000000000000000082d18170f7d8dda36479a6b179161b4bbff2d05089fcffffffffffffffdbb3928ebd2dee05607d170194bd7b1b0303c5ba7f602606cd84410a214fde078ee6a285b330da2d58da05000000000000006a21643b33cfa231a42715"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x14) poll(0x0, 0x0, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r6, 0x8000000000000003}, 0x18) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0xffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) setsockopt$inet_tcp_int(r7, 0x6, 0x18, &(0x7f0000000080)=0xd, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0xff64}, @window={0x3, 0x0, 0x1}, @timestamp, @timestamp, @mss, @timestamp, @mss={0x2, 0x8}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="2efdc7ab6366", 0x6}], 0x1}}], 0x1, 0x881) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 1m18.067320761s ago: executing program 40 (id=7735): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$C=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xe7\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^`\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00'/885, 0x42, 0x1f0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000500000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000002000072cc43080feaf18100"/28], 0x48) mq_timedsend(r0, 0x0, 0x996a3cc1bc93d8b9, 0x8, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b00000000492a7da7800000000e000000100004e20009c907802000000000000000000000082d18170f7d8dda36479a6b179161b4bbff2d05089fcffffffffffffffdbb3928ebd2dee05607d170194bd7b1b0303c5ba7f602606cd84410a214fde078ee6a285b330da2d58da05000000000000006a21643b33cfa231a42715"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x14) poll(0x0, 0x0, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r6, 0x8000000000000003}, 0x18) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0xffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) setsockopt$inet_tcp_int(r7, 0x6, 0x18, &(0x7f0000000080)=0xd, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0xff64}, @window={0x3, 0x0, 0x1}, @timestamp, @timestamp, @mss, @timestamp, @mss={0x2, 0x8}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="2efdc7ab6366", 0x6}], 0x1}}], 0x1, 0x881) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 34.942158213s ago: executing program 2 (id=8442): clock_settime(0x1ed5d7403, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) memfd_create(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$tipc(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f00000011c0)={0x591002, 0x50}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) rt_sigsuspend(&(0x7f0000000100)={[0x8]}, 0x8) r1 = open(&(0x7f0000001080)='./file0/file0/..\x00', 0x7c3801, 0x1) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x1000000201005) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x2004d95, &(0x7f00000000c0)={[{@barrier}]}, 0x1, 0x523, &(0x7f0000000a80)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001200)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}, {&(0x7f0000001140)="c05ea7a3b9f7841bbb919efae69d0b0a0294e11d6bd12449683d9bba125ae077", 0x20}, {&(0x7f0000001500)="3037489d67a74e447a90d35f956d11431f14ab36cbaaa95ab3e026cd67e4be1e95a779c8587dc2ec2dfbd66095c2dbb2ca0ee64a8841c4cfc5e5a5f89fd6d5c874ffe7cc9b113d6b734a80bbde990d27360f45f3693a1e6036f39fcf04464e749874a8a664da38893397d4da3f4b3e3d", 0x70}, {&(0x7f0000001280)="bdf6887e40bebe3ae61ead3a4dd89db00548be4de2ee13309be342efead91047d504d38712a0d4917076044788fa544d6b2cc1fc63189f901a92e92a532defd0f96f2dce05e9e8c3f37e190cdb2eb8dc21f6a5ef842214f18418ed3887933d13326ba75001b05f527f5510a9572629653678f6fc16f310d4c69f2c807b06063be3fd420822f5e07282094326446c7b077255871e4874d80b264d91c294e5344a2f984e0238709f121a8c33799967445d75479054691e42fc72959d3426fef036b72a30b65271f2cb824722c976bd808cc1419b09de3b2797788f9fbb3a9ce0b27cb7c34f060c3685822d0981610596ed43", 0xf1}, {&(0x7f0000001380)="34a454e2fdb4b4783a802a", 0xb}, {&(0x7f00000013c0)="8fb198c8513a2ea8581e18d6427ef47a82e04693fb96bddb856c90ae452c6425b4359414c597196c8b7a067359e8a2317bf7dfe85bb10c7c9c5299c05a4041f41cc52bd71454a5008a413c3bdaf82cd35addb107f13613fa4e0f19b37d53dd5ea90ef31c8633749fd0238c2e7a2d70d1b0ddcd59396f048a5e230031f63a444be1ba32983a9b20a5efa13ee6ef58a5867c2a7cbf", 0x94}], 0x7, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) r4 = fspick(r2, &(0x7f0000001480)='./bus\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 34.136210755s ago: executing program 2 (id=8447): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 34.112568186s ago: executing program 2 (id=8448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x1300) 33.983439147s ago: executing program 2 (id=8449): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000300)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000cc0)="$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") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = io_uring_setup(0x5820, &(0x7f0000000580)={0x0, 0x8fffffff, 0x40, 0x0, 0x14e}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r3, @ANYRESOCT=r4], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r5}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001f40)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109004d0012803b"], 0x64}, 0x1, 0x0, 0x0, 0x2048000}, 0x400c000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) r8 = open(&(0x7f0000000240)='./file0\x00', 0xc45c0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xb, &(0x7f0000001880)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='devlink_health_report\x00', r9, 0x0, 0x35}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = dup(r10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x4031, 0xffffffffffffffff, 0xffffe000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000494000/0x2000)=nil, 0x2000) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(r11, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:init_exec_t:s0\x00', 0x21, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="476bc5268ea0b2ca6aa99c04212f664bd393afa2de0ab1e527de6fb005e234bc5f7cf4b93eb1f8f1d5645617af2a94a95109cefe238a8bf200065f16fc30ef530c0d0df617b6e45a4380cafb3b387b01038a13dd6c053c35ffafe455be8d19e313c4a3346e70ae84095df9f5d5fe0fb5403bd00864039904a53dddcc9ecffb83146600bf6e22ca94b886c049dbca0d9b58f200"/158, @ANYRESOCT=r6], 0x4b) sendfile(r11, r2, 0x0, 0x800000007) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000100)) 33.79624814s ago: executing program 2 (id=8450): syz_emit_ethernet(0xfffffffffffffc7a, &(0x7f0000000300)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}}}}, 0x0) 33.588057873s ago: executing program 2 (id=8453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000640)=[{&(0x7f0000000400)=""/244, 0xf4}], 0x1) 33.587790143s ago: executing program 41 (id=8453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000640)=[{&(0x7f0000000400)=""/244, 0xf4}], 0x1) 3.931204891s ago: executing program 8 (id=8967): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="74010000", @ANYRES16=r2, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x20000140}, 0x40040c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7f7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3fffff) 3.908915432s ago: executing program 0 (id=8968): clock_settime(0x1ed5d7403, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) memfd_create(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$tipc(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f00000011c0)={0x591002, 0x50}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) rt_sigsuspend(&(0x7f0000000100)={[0x8]}, 0x8) r1 = open(&(0x7f0000001080)='./file0/file0/..\x00', 0x7c3801, 0x1) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x1000000201005) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x2004d95, &(0x7f00000000c0)={[{@barrier}]}, 0x1, 0x523, &(0x7f0000000a80)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) socket$kcm(0xa, 0x3, 0x73) r3 = fspick(r2, &(0x7f0000001480)='./bus\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 3.881995022s ago: executing program 8 (id=8969): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x20200, 0x0, 0xfe, 0x0, &(0x7f00000007c0)) syz_emit_ethernet(0xfffffffffffffc7a, &(0x7f0000000300)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}}}}, 0x0) 3.804042913s ago: executing program 8 (id=8970): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x1300) 3.090765174s ago: executing program 0 (id=8985): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="74010000", @ANYRES16=r2, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x20000140}, 0x40040c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7f7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3fffff) 3.015685825s ago: executing program 0 (id=8987): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x6da7, r1, &(0x7f00000041c0)="ef2d4334e42d59", 0x7, 0x10000, 0x0, 0x2}]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7c7add4ec6541d20, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b001e4d8d74d2cf2edd336393d9edf9031c319000002d7e609000000c2e64ed5e2750fbfd2ac8c19e4bc86796934c635d4a7d4c7b427e4c1d89e819eb3d3192ef7e09458bcb5deaef0738e463ce88fc875de95f094a8b6ebdfeecd5b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r3, 0x0, 0x4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x7, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB="9da934eb0000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711285000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = dup(r10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='kmem_cache_free\x00', r13}, 0x18) fcntl$lock(r0, 0x7, &(0x7f00000006c0)={0x0, 0x1, 0xac1d}) fcntl$lock(r12, 0x6, &(0x7f00000000c0)={0x0, 0x1, 0x543117db}) r14 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$PTP_PIN_SETFUNC(r14, 0x40603d07, &(0x7f0000000300)={'\x00', 0xa2, 0x0, 0x401}) write$P9_RLERRORu(r11, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) 2.812034789s ago: executing program 0 (id=8991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x6, 0x7, 0x80, 0x6}, @mpls={[], @ipv6=@gre_packet={0x4, 0x6, "91363a", 0x69, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1}, {}, {0x8, 0x88be, 0x4, {{0x2, 0x1, 0x3, 0x1, 0x1, 0x0, 0x4, 0x5}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x3, {{0x9, 0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x89}, 0x2, {0x80000001, 0x1, 0x0, 0x13, 0x1, 0x1, 0x3, 0x1}}}, {0x8, 0x6558, 0x3, "491d2a7100a1cf3583ae88738eebd20995dfc886c49cabe09f10b1a1b294fc34dd952b5e1c"}}}}}}, 0x9f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_clone(0xa04000, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) r4 = gettid() stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4000, 0x108, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x164, 0x2a, 0x10, 0x70bd27, 0x25dfdbfe, {0xd}, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@remote}, @nested={0x18, 0x10a, 0x0, 0x1, [@typed={0x8, 0x10c, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x149}, @typed={0x8, 0x53, 0x0, 0x0, @pid=r4}]}, @generic="9ba502559b22590cc4894bddaba29f74381eb3326c3db3b9362d99f83b8b496598237fb8d87a3f5437a734a905a35be73106b788c334ab37eafd3281e16be1129d97942c19b6835588b47658b6e4ea0aa48a7a4299d7e61b79acc76e3ddbe0be4052419c0bddc92f", @typed={0x8, 0x4a, 0x0, 0x0, @uid=r5}, @generic="be78c47e78138a98052662c3a119de16b469b3765af16bcc7918eca804138dd42b39852528d57bbf78684d3dce867d0d", @generic="ff59f3af4c53d4c763fe11b4f0a80d8472f0738146b97b3f6b2c024eca4cd51c54a4484219105d371d327ff56766c03076150f76b7102644010f0514fbf1238bcfeedbfbf708a003b634df133a7a7b5cfb81fb8349d1b6b2266d6740f08527d7334be90dd7ec6517f0fa8ce0549cdb2c865ba59627aff9295129b03d", @typed={0x8, 0x87, 0x0, 0x0, @uid=r6}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) dup(0xffffffffffffffff) 2.69775537s ago: executing program 0 (id=8992): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x20200, 0x0, 0xfe, 0x0, &(0x7f00000007c0)) syz_emit_ethernet(0xfffffffffffffc7a, &(0x7f0000000300)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}}}}, 0x0) 2.69544617s ago: executing program 0 (id=8993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="03000800010006000000140000004608003402660000000190780a010101ac1414aa010000000c0090783b0400004509000d00650005020200810a010100ac1414bb"], 0x42) 1.703892845s ago: executing program 6 (id=9011): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f8900000020", 0x3f}], 0x1) 1.494975058s ago: executing program 6 (id=9014): clock_settime(0x1ed5d7403, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) memfd_create(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$tipc(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f00000011c0)={0x591002, 0x50}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) rt_sigsuspend(&(0x7f0000000100)={[0x8]}, 0x8) r1 = open(&(0x7f0000001080)='./file0/file0/..\x00', 0x7c3801, 0x1) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x1000000201005) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x2004d95, &(0x7f00000000c0)={[{@barrier}]}, 0x1, 0x523, &(0x7f0000000a80)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) socket$kcm(0xa, 0x3, 0x73) r3 = fspick(r2, &(0x7f0000001480)='./bus\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 1.267676302s ago: executing program 7 (id=9019): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x4000}}}}}}}}, 0x0) 1.212070592s ago: executing program 7 (id=9020): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r3, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r4}], 0x1, 0x0, 0x0, 0x0) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x13) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x1300) 1.211549932s ago: executing program 5 (id=9021): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x280a40, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x9, 0x8040) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0xffffffffffffff29, 0x400) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r3, &(0x7f0000000100)="08a0cf597a53563c4365d19c1d73fd1d6c8f8afab169c687b8b99edfbebb84c874226fa0590c7a933678f973402076219fc79cffb4183e52cfe9565f9db27bf7d33efe2842d0e7e90a35d8a747975a74c6300b36d51268a0412c09ce73e3bc9564ec67224fab8d93fc9be5b4d718c934de052f75f0341455653078d7e922aa7ab2eae1655da0151dd6e245a3e96f21b8734e180313b78a4e19411e9ff10c95f1044a24bb11a4ce77f63f8c98", &(0x7f00000001c0)=""/92}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x0, 0x5, 0x2, 0x1}, {0x0, 0x5, 0xd, 0x7}, {0x3, 0xfe, 0x7, 0xf}, {0x1, 0xf7, 0x0, 0x4}, {0x3, 0x8, 0x7, 0x8}]}) (async) r5 = io_uring_setup(0x3c0b, &(0x7f0000000300)={0x0, 0x57c1, 0x8000, 0x3, 0x66}) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r4, &(0x7f0000000380)="c1535c693fa82c514038ed59243bf1a35220499f0ef97ed8d81dc8c5b7308d5df8ae73462c9c44ba19854f6ed5bc37289379e83b123c09f5d000536bea66ff5072e8978fe38ab88e89a2dbec83a7bc4c4b812f6b008a9ca23989e3b6b68c406d32498d1a2c1ce511694ba2d32e54d13b31ffd2f39718301f9dba2fb6626418d12026528ba37cb9a121171c5332fc390ccf906c5f5ac882c02b190247c2e13997bf79339359a118c6be6e608039", &(0x7f0000000440)=""/187}, 0x20) (async, rerun: 64) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x35c, @mcast2, 0x9407}, 0x1c) (async, rerun: 32) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000580)={[0xf4c]}, 0x8, 0x0) (rerun: 32) splice(r6, &(0x7f00000005c0)=0xfffffffffffff801, r5, &(0x7f0000000600)=0x9, 0x6, 0x1) close_range(r0, r5, 0x0) (async) mount(&(0x7f0000000640)=@sr0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='vxfs\x00', 0x210c01, 0x0) write$P9_RWSTAT(r3, &(0x7f0000000700)={0x7, 0x7f, 0x1}, 0x7) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000740)) (async, rerun: 64) futex_waitv(&(0x7f0000000f80)=[{0x8, &(0x7f0000000780)=0xffffffffffffff80, 0x82}, {0x9, &(0x7f00000007c0)=0x8000000000000001, 0x82}, {0x1000, &(0x7f0000000800)=0x40, 0x2}, {0xffffffff80000000, &(0x7f0000000840)=0xfffffffffffff000, 0x82}, {0x3, &(0x7f0000000880)=0x7fff, 0x82}, {0x3, &(0x7f00000008c0)=0x7, 0x2}, {0x8, &(0x7f0000000900)=0x7ff, 0x82}, {0x2, &(0x7f0000000940)=0x11a, 0x82}, {0x2, &(0x7f0000000980)}, {0x9, &(0x7f00000009c0)=0x6, 0x82}, {0xee, &(0x7f0000000a00)=0xe, 0x2}, {0x800, &(0x7f0000000a40)=0x5c8, 0x82}, {0x7, &(0x7f0000000a80)=0x7, 0x82}, {0xc5d6, &(0x7f0000000ac0)=0xbb2, 0x82}, {0xa0, &(0x7f0000000b00)=0x400000008, 0x2}, {0x27, &(0x7f0000000b40)=0x4, 0x82}, {0x7, &(0x7f0000000b80), 0x2}, {0xbff, &(0x7f0000000bc0)=0x1, 0x82}, {0x33, &(0x7f0000000c00)=0x1, 0x2}, {0x3, &(0x7f0000000c40)=0x5, 0x2}, {0xeec, &(0x7f0000000c80)=0x10001, 0x2}, {0x8000, &(0x7f0000000cc0)=0x9, 0x2}, {0x80, &(0x7f0000000d00)=0x97, 0x80}, {0x100000001, &(0x7f0000000d40)=0x6, 0x2}, {0x7ff, &(0x7f0000000d80)=0x6cf, 0x82}, {0xae9a, &(0x7f0000000dc0)=0x7, 0x2}, {0x80000000, &(0x7f0000000e00), 0x82}, {0x401, &(0x7f0000000e40)=0x9f, 0x82}, {0x9, &(0x7f0000000e80)=0x7, 0x82}, {0x60, &(0x7f0000000ec0)=0x6, 0x2}, {0x9, &(0x7f0000000f00)=0x6, 0x82}, {0x800, &(0x7f0000000f40)=0x8, 0x82}], 0x20, 0x0, &(0x7f0000001280)={0x77359400}, 0x1) (async, rerun: 64) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f00000012c0)=0x2) (async) write$selinux_user(0xffffffffffffffff, &(0x7f0000001300)={'system_u:object_r:sendmail_exec_t:s0', 0x20, 'root\x00'}, 0x2a) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={r6}, 0x4) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r7, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x2c, r8, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x44845) (async) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000001500), r7) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001540)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r7, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x34, r9, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x16, 0x14, '/dev/input/mouse#\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x200080c4}, 0x40004) (async, rerun: 64) r11 = getpgid(0x0) (async, rerun: 64) r12 = getpid() kcmp$KCMP_EPOLL_TFD(r11, r12, 0x7, r3, &(0x7f0000001640)={r2, r2, 0x100}) (async) write$P9_RREAD(r4, &(0x7f0000001680)={0xb2, 0x75, 0x2, {0xa7, "708b5cd1947d93746aa051283ad0d9f237543538ee39ee11e06278fd3e29e875e908a2fbab3230f7bf05c557c23b41da3a5b665a3960c9b177e057668e2ede0ff1300d72f186f9130e1dbd2387dea2987fd59b0649f4e03e39546f1e214e06659bfbe569261ebfc8369c9d7e2da934cc9706d6806cdc05fbc6807bd21bab8c6b695b133446562aeee08281de30e7ceeefdf04fb57f08c0031c90b335ef1c399a5d86ef33171b75"}}, 0xb2) 1.201403063s ago: executing program 5 (id=9022): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48) timerfd_create(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) socket$netlink(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x20000000000001f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) r0 = syz_io_uring_setup(0x24f6, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.186876333s ago: executing program 7 (id=9023): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)=',MF\xae\xb1\xc2\x16\xef\xf55\xe3\xd7c^;\x93\xdcV\xbd\"# i\x10*\x00\xef\x1d\xd3\xc9T\xa4_\xa8J`\xd5\xa1\xb6\xcf\x1e\xaf\xe6\xc8\x02\x11\az\xf4\x0e\xf4&I\x85\xe8O\xe3\'K\xcb4\xcdj[\x13i\xdbL\xd9\xcf\xb3\xae\x16\xff\xfcW\xf3\x01\x00\x01\x00>\xbf#\xdcm`\x99\f,\xe4\x8dR&\xb8\xffC\xd1\x89\x02GW\xd6\xae\x16>\x95S\xdcrb\x00\x8fd\x99\fW\xa0\xd6-\x84fY\x99m\x90Ub\'\xc8|)\x00\x04s9\xbf\x90', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) read$ptp(r0, &(0x7f0000000280)=""/176, 0xb0) (fail_nth: 1) 1.183687853s ago: executing program 5 (id=9024): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f8900000020", 0x3f}], 0x1) 933.192407ms ago: executing program 8 (id=9025): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)=',MF\xae\xb1\xc2\x16\xef\xf55\xe3\xd7c^;\x93\xdcV\xbd\"# i\x10*\x00\xef\x1d\xd3\xc9T\xa4_\xa8J`\xd5\xa1\xb6\xcf\x1e\xaf\xe6\xc8\x02\x11\az\xf4\x0e\xf4&I\x85\xe8O\xe3\'K\xcb4\xcdj[\x13i\xdbL\xd9\xcf\xb3\xae\x16\xff\xfcW\xf3\x01\x00\x01\x00>\xbf#\xdcm`\x99\f,\xe4\x8dR&\xb8\xffC\xd1\x89\x02GW\xd6\xae\x16>\x95S\xdcrb\x00\x8fd\x99\fW\xa0\xd6-\x84fY\x99m\x90Ub\'\xc8|)\x00\x04s9\xbf\x90', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) read$ptp(r0, &(0x7f0000000280)=""/176, 0xb0) 932.298047ms ago: executing program 8 (id=9026): clock_settime(0x1ed5d7403, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) memfd_create(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$tipc(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f00000011c0)={0x591002, 0x50}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) rt_sigsuspend(&(0x7f0000000100)={[0x8]}, 0x8) r1 = open(&(0x7f0000001080)='./file0/file0/..\x00', 0x7c3801, 0x1) ftruncate(r1, 0x2007ffb) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x2004d95, &(0x7f00000000c0)={[{@barrier}]}, 0x1, 0x523, &(0x7f0000000a80)="$eJzs3c1vHGcZAPBnNrtJnDi1+ThAJUKhRU4F2bVr2locSpEQnCohyj0Ye21ZXnst77qNVxV1/gIkhACJE1y4IPEHIKFIXDgipEpwBqkIhCCFAwfooJ2d9Vd27W262XXs30+azPvO1/O8m8zszOybmQAurGci4tWIeD9N0+cjYiqSbHohH2KvM7SXe+/BW0vtIYk0ff0fSbZku97dVpKPr+erXY2Ib3494jvJw3Ebu631xVqtup3XK82NrUpjt3V7bWNxtbpa3Zyfn3tp4eWFFxdmh9LOGxHxylf/8sPv/fxrr/z6C2/++c7fbn23ndZkPv9wOz6g4kkzO00vZZ/F4RW2HzHYWVTMWpibGGyde48xHwAA+muf4380Ij4bEc/HVFw6+XQWAAAAeAKlX56M/yYRaW+X+0wHAAAAniCFrA9sUijnfQEmo1Aolzt9eD8e1wq1eqP5+ZX6zuZyp6/sdJQKK2u16mzWVzirJ+36XFY+qL9wrD5/pXO/4QdTE1m9vFSvLY/75gcAAABcENePXf//e6pz/Q8AAACcM9PjTgAAAAB47Fz/AwAAwPnn+h8AAADOtW+89tpERKTd918vv7G7s15/4/ZytbFe3thZKi/Vt7fKq/X6avbMvo3Ttler17e+GJs7dyvNaqNZaey27mzUdzabd9aOvAIbAAAAGKGPfPr+H5OI2PvSRDa0XR53UsBIFPdLST7usff/6anO+N0RJQWMxKUBlnn3yggSAUauOO4EgLEpjTsBYOySU+b37bzzu3z8meHmAwAADN/MJ/v//l84cc29k2cDZ56dGC6uY/t/2jauXIDRyn7/H7TDr5MFOFdKA/UABM6zD/37/6lcVwAAwLhNZkNSKOe39yajUCiXI25krwUoJStrtepsRDwVEX+YKl1p1+diwP84CAAAAAAAAAAAAAAAAAAAAAAAAABk0jTpvPQHAAAAOLciCn9NfpNk7/+amXpu8vj9gcvJf6Yif0Xomz95/Ud3F5vN7bn29H/uT2/+OJ/+wjjuYAAAAADHda/Tu9fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBM7z14a6k7jDLu378SEdO94hfjaja+GqWIuPavJIqH1ksi4tIQ4u/di4hP9IqftNPaD9kr/sTjjx/T+afQK/71IcSHi+x++/jzaq/9rxDPZOPe+18x4kj9UR05/rVuHjn+do9/l/rs/zcGjPH0O7+s9I1/L+LpYu/jTzd+0if+swPG//a3Wq1+89KfRsz0/P5JjsSqNDe2Ko3d1u21jcXV6mp1c35+7qWFlxdeXJitrKzVqvmfPWN8/1O/ev+k9l/rE3/6lPY/N2D7//fO3Qcf6xRLB1Mn9uPferZH/N/+LF/u4fiF/Lvvc3m5PX+mW97rlA+7+Yvf3zyp/csH7S99kL//WwO2fyg7CgAwNI3d1vpirVbdfsIKb+f5n75w+zzrbOT8CIXkbKRxXgtvD3WDaZqm7X+TPWbdj4hBtpPEWfhYssJ4j0sAAMDwHZz0jzsTAAAAAAAAAAAAAAAAAAAAuLgefvpXmsaQH0J2PObefinxZGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Mz4fwAAAP//j6PX8g==") open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001200)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}, {&(0x7f0000001140)}, {&(0x7f0000001500)="3037489d67a74e447a90d35f956d11431f14ab36cbaaa95ab3e026cd67e4be1e95a779c8587dc2ec2dfbd66095c2dbb2ca0ee64a8841c4cfc5e5a5f89fd6d5c874ffe7cc9b113d6b734a80bbde990d27360f45f3693a1e6036f39fcf04464e749874a8a664da38893397d4da3f4b3e3d", 0x70}, {&(0x7f0000001280)="bdf6887e40bebe3ae61ead3a4dd89db00548be4de2ee13309be342efead91047d504d38712a0d4917076044788fa544d6b2cc1fc63189f901a92e92a532defd0f96f2dce05e9e8c3f37e190cdb2eb8dc21f6a5ef842214f18418ed3887933d13326ba75001b05f527f5510a9572629653678f6fc16f310d4c69f2c807b06063be3fd420822f5e07282094326446c7b077255871e4874d80b264d91c294e5344a2f984e0238709f121a8c33799967445d75479054691e42fc72959d3426fef036b72a30b65271f2cb824722c976bd808cc1419b09de3b2797788f9fbb3a9ce0b27cb7c34f060c3685822d0981610596ed43", 0xf1}, {&(0x7f0000001380)="34a454e2fdb4b4783a802a", 0xb}, {&(0x7f00000013c0)="8fb198c8513a2ea8581e18d6427ef47a82e04693fb96bddb856c90ae452c6425b4359414c597196c8b7a067359e8a2317bf7dfe85bb10c7c9c5299c05a4041f41cc52bd71454a5008a413c3bdaf82cd35addb107f13613fa4e0f19b37d53dd5ea90ef31c8633749fd0238c2e7a2d70d1b0ddcd59396f048a5e230031f63a444be1ba32983a9b20a5efa13ee6ef58a5867c2a7cbf", 0x94}], 0x7, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) r4 = fspick(r2, &(0x7f0000001480)='./bus\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xe, 0x9, 0xf, 0x1, 0xd5, 0x9, 0x101, 0xd, 0xb05, 0x0, 0x0, 0x100, 0xebfa, 0xc3e9, 0x1, 0x98, 0x7, 0xed, 0x2, 0xffffff7f, 0x6, 0x9, 0x2}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000040) 902.799677ms ago: executing program 7 (id=9027): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 900.169647ms ago: executing program 5 (id=9028): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001500", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x500, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x10, {[@mss={0x1e, 0x4, 0x2101}]}}}}}}}}, 0x0) 891.135867ms ago: executing program 7 (id=9029): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)=@dstopts={0x62}, 0x8) mlockall(0x3) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'nr0\x00', 0x1432}) close_range(r1, 0xffffffffffffffff, 0x0) 843.836448ms ago: executing program 5 (id=9030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) (async) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) write$ppp(r1, &(0x7f0000000580)="1e08c6b3a1fd17", 0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="200000001a005f0400f9f40700090401800020000000000000000071364715d8", 0x20) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372"], 0xfc}}, 0x20000004) 583.840952ms ago: executing program 6 (id=9031): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) (fail_nth: 5) 430.603754ms ago: executing program 6 (id=9032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f00000009c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r5, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@dioread_nolock}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") 417.229285ms ago: executing program 7 (id=9033): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCX_GETX(r3, 0x80089203, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d52101b080d29308f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r9, @ANYBLOB="080003"], 0x44}}, 0x0) 288.159536ms ago: executing program 6 (id=9034): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r3, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r4}], 0x1, 0x0, 0x0, 0x0) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x13) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x1300) 266.909807ms ago: executing program 6 (id=9035): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x1300) 130.073119ms ago: executing program 8 (id=9036): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCX_GETX(r3, 0x80089203, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB="080003"], 0x44}}, 0x0) 0s ago: executing program 5 (id=9037): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019200)=ANY=[@ANYRES32=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000240)) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@dev, @local}, &(0x7f0000000200)=0xc) openat(r2, &(0x7f0000000180)='./file0\x00', 0x141201, 0x142) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2d4}}, 0x4048010) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x2, {0x2, 0x0, 0x1}, {0x0, 0xf0, 0x2}, 0x2, 0x2}], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="00001e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00"/28], 0x48) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): link+0xf29/0x12d0 [ 499.424778][T30364] ? __kfree_skb+0x109/0x150 [ 499.424807][T30364] ? __memcg_slab_free_hook+0x135/0x230 [ 499.424914][T30364] ? __kfree_skb+0x109/0x150 [ 499.424937][T30364] ? __rcu_read_unlock+0x4f/0x70 [ 499.424956][T30364] ? avc_has_perm_noaudit+0x1b1/0x200 [ 499.425039][T30364] ? selinux_capable+0x1f9/0x270 [ 499.425145][T30364] ? security_capable+0x83/0x90 [ 499.425170][T30364] ? ns_capable+0x7d/0xb0 [ 499.425186][T30364] ? __pfx_rtnl_newlink+0x10/0x10 [ 499.425210][T30364] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 499.425233][T30364] netlink_rcv_skb+0x120/0x220 [ 499.425316][T30364] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 499.425345][T30364] rtnetlink_rcv+0x1c/0x30 [ 499.425366][T30364] netlink_unicast+0x5a1/0x670 [ 499.425396][T30364] netlink_sendmsg+0x58b/0x6b0 [ 499.425482][T30364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.425498][T30364] __sock_sendmsg+0x145/0x180 [ 499.425519][T30364] ____sys_sendmsg+0x31e/0x4e0 [ 499.425551][T30364] ___sys_sendmsg+0x17b/0x1d0 [ 499.425623][T30364] __x64_sys_sendmsg+0xd4/0x160 [ 499.425659][T30364] x64_sys_call+0x2999/0x2fb0 [ 499.425680][T30364] do_syscall_64+0xd2/0x200 [ 499.425759][T30364] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 499.425780][T30364] ? clear_bhb_loop+0x40/0x90 [ 499.425797][T30364] ? clear_bhb_loop+0x40/0x90 [ 499.425842][T30364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.425861][T30364] RIP: 0033:0x7f8c2cc8e929 [ 499.425878][T30364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.425977][T30364] RSP: 002b:00007f8c2b2f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.425997][T30364] RAX: ffffffffffffffda RBX: 00007f8c2ceb5fa0 RCX: 00007f8c2cc8e929 [ 499.426011][T30364] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 499.426025][T30364] RBP: 00007f8c2b2f7090 R08: 0000000000000000 R09: 0000000000000000 [ 499.426037][T30364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.426103][T30364] R13: 0000000000000000 R14: 00007f8c2ceb5fa0 R15: 00007ffe91a24588 [ 499.426123][T30364] [ 499.852170][T30366] loop7: detected capacity change from 0 to 1024 [ 499.870433][T30366] EXT4-fs: Ignoring removed nomblk_io_submit option [ 499.919092][ T29] kauditd_printk_skb: 450 callbacks suppressed [ 499.919106][ T29] audit: type=1326 audit(1751674879.578:28036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30370 comm="syz.5.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea024e929 code=0x7ffc0000 [ 499.948959][ T29] audit: type=1326 audit(1751674879.578:28037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30370 comm="syz.5.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea024e929 code=0x7ffc0000 [ 499.974603][T30366] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 499.984382][T30366] EXT4-fs (loop7): group descriptors corrupted! [ 499.994460][ T144] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 500.006831][ T144] EXT4-fs (loop0): This should not happen!! Data will be lost [ 500.006831][ T144] [ 500.062880][ T29] audit: type=1326 audit(1751674879.651:28038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30370 comm="syz.5.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7efea024e929 code=0x7ffc0000 [ 500.086640][ T29] audit: type=1326 audit(1751674879.651:28039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30370 comm="syz.5.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea024e929 code=0x7ffc0000 [ 500.110322][ T29] audit: type=1326 audit(1751674879.651:28040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30370 comm="syz.5.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea024e929 code=0x7ffc0000 [ 500.134342][ T29] audit: type=1326 audit(1751674879.651:28041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30370 comm="syz.5.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efea024e929 code=0x7ffc0000 [ 500.158203][ T29] audit: type=1326 audit(1751674879.651:28042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30370 comm="syz.5.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea024e929 code=0x7ffc0000 [ 500.181867][ T29] audit: type=1326 audit(1751674879.651:28043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30370 comm="syz.5.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea024e929 code=0x7ffc0000 [ 500.199172][T30388] FAULT_INJECTION: forcing a failure. [ 500.199172][T30388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.205609][ T29] audit: type=1326 audit(1751674879.651:28044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30370 comm="syz.5.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efea024e929 code=0x7ffc0000 [ 500.218761][T30388] CPU: 1 UID: 0 PID: 30388 Comm: syz.6.8588 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 500.218795][T30388] Tainted: [W]=WARN [ 500.218802][T30388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 500.218813][T30388] Call Trace: [ 500.218821][T30388] [ 500.218829][T30388] __dump_stack+0x1d/0x30 [ 500.218850][T30388] dump_stack_lvl+0xe8/0x140 [ 500.218866][T30388] dump_stack+0x15/0x1b [ 500.218896][T30388] should_fail_ex+0x265/0x280 [ 500.218924][T30388] should_fail+0xb/0x20 [ 500.218948][T30388] should_fail_usercopy+0x1a/0x20 [ 500.219024][T30388] _copy_from_user+0x1c/0xb0 [ 500.219044][T30388] ___sys_sendmsg+0xc1/0x1d0 [ 500.219086][T30388] __x64_sys_sendmsg+0xd4/0x160 [ 500.219119][T30388] x64_sys_call+0x2999/0x2fb0 [ 500.219200][T30388] do_syscall_64+0xd2/0x200 [ 500.219218][T30388] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 500.219243][T30388] ? clear_bhb_loop+0x40/0x90 [ 500.219306][T30388] ? clear_bhb_loop+0x40/0x90 [ 500.219326][T30388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.219347][T30388] RIP: 0033:0x7f59206ee929 [ 500.219435][T30388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.219453][T30388] RSP: 002b:00007f591ed57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.219472][T30388] RAX: ffffffffffffffda RBX: 00007f5920915fa0 RCX: 00007f59206ee929 [ 500.219485][T30388] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 500.219496][T30388] RBP: 00007f591ed57090 R08: 0000000000000000 R09: 0000000000000000 [ 500.219509][T30388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.219521][T30388] R13: 0000000000000000 R14: 00007f5920915fa0 R15: 00007ffffc1388e8 [ 500.219610][T30388] [ 500.276401][T30389] netlink: 'syz.7.8587': attribute type 5 has an invalid length. [ 500.276873][ T29] audit: type=1326 audit(1751674879.651:28045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30370 comm="syz.5.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea024e929 code=0x7ffc0000 [ 500.283911][T30389] ip6erspan0: entered allmulticast mode [ 500.356855][T30396] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8590'. [ 500.471163][T30396] hsr_slave_0: left promiscuous mode [ 500.477733][T30396] hsr_slave_1: left promiscuous mode [ 500.501280][T30403] macvtap1: entered allmulticast mode [ 500.506688][T30403] veth0_macvtap: entered allmulticast mode [ 500.558925][T30413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.572758][T30413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.608104][T30420] netlink: 'syz.5.8600': attribute type 27 has an invalid length. [ 500.625574][T30420] bridge0: port 3(30ªî{X¹¦) entered disabled state [ 500.636866][T30425] loop0: detected capacity change from 0 to 512 [ 500.643861][T30425] journal_path: Non-blockdev passed as './file0' [ 500.650204][T30425] EXT4-fs: error: could not find journal device path [ 500.662764][T30420] $Hÿ: left promiscuous mode [ 500.667583][T30420] bond_slave_0: left promiscuous mode [ 500.673571][T30420] bond_slave_1: left promiscuous mode [ 500.707133][T30420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.741638][T30420] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.750351][T30420] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.758879][T30420] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.767487][T30420] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.777033][T30420] vlan0: left allmulticast mode [ 500.781919][T30420] $Hÿ: left allmulticast mode [ 500.786942][T30420] bond_slave_0: left allmulticast mode [ 500.792427][T30420] bond_slave_1: left allmulticast mode [ 500.798270][T30420] veth0_macvtap: left allmulticast mode [ 500.804076][T30420] macvtap1: left allmulticast mode [ 500.983585][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.162719][T30446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30446 comm=syz.7.8609 [ 501.337917][T30449] loop7: detected capacity change from 0 to 512 [ 501.347858][T30449] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.359239][T30449] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8610'. [ 501.520264][T30456] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8612'. [ 501.529400][T30456] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8612'. [ 501.598315][T30462] loop0: detected capacity change from 0 to 8192 [ 501.605532][T30462] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 501.617371][T30462] FAULT_INJECTION: forcing a failure. [ 501.617371][T30462] name failslab, interval 1, probability 0, space 0, times 0 [ 501.630047][T30462] CPU: 1 UID: 0 PID: 30462 Comm: syz.0.8615 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 501.630099][T30462] Tainted: [W]=WARN [ 501.630105][T30462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 501.630116][T30462] Call Trace: [ 501.630124][T30462] [ 501.630131][T30462] __dump_stack+0x1d/0x30 [ 501.630152][T30462] dump_stack_lvl+0xe8/0x140 [ 501.630235][T30462] dump_stack+0x15/0x1b [ 501.630268][T30462] should_fail_ex+0x265/0x280 [ 501.630311][T30462] should_failslab+0x8c/0xb0 [ 501.630334][T30462] __kvmalloc_node_noprof+0x123/0x4e0 [ 501.630360][T30462] ? alloc_netdev_mqs+0x8b7/0xab0 [ 501.630431][T30462] ? __kmalloc_cache_noprof+0x22e/0x320 [ 501.630469][T30462] alloc_netdev_mqs+0x8b7/0xab0 [ 501.630565][T30462] rtnl_create_link+0x239/0x710 [ 501.630601][T30462] rtnl_newlink_create+0x14c/0x620 [ 501.630627][T30462] ? security_capable+0x83/0x90 [ 501.630659][T30462] ? netlink_ns_capable+0x86/0xa0 [ 501.630781][T30462] rtnl_newlink+0xf29/0x12d0 [ 501.630808][T30462] ? bpf_trace_run3+0x12c/0x1d0 [ 501.630826][T30462] ? __memcg_slab_free_hook+0x135/0x230 [ 501.630844][T30462] ? __kfree_skb+0x109/0x150 [ 501.630904][T30462] ? __rcu_read_unlock+0x4f/0x70 [ 501.630943][T30462] ? avc_has_perm_noaudit+0x1b1/0x200 [ 501.630959][T30462] ? selinux_capable+0x1f9/0x270 [ 501.630977][T30462] ? security_capable+0x83/0x90 [ 501.630990][T30462] ? ns_capable+0x7d/0xb0 [ 501.631051][T30462] ? __pfx_rtnl_newlink+0x10/0x10 [ 501.631063][T30462] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 501.631131][T30462] netlink_rcv_skb+0x120/0x220 [ 501.631148][T30462] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 501.631163][T30462] rtnetlink_rcv+0x1c/0x30 [ 501.631296][T30462] netlink_unicast+0x5a1/0x670 [ 501.631324][T30462] netlink_sendmsg+0x58b/0x6b0 [ 501.631343][T30462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.631359][T30462] __sock_sendmsg+0x145/0x180 [ 501.631383][T30462] ____sys_sendmsg+0x31e/0x4e0 [ 501.631494][T30462] ___sys_sendmsg+0x17b/0x1d0 [ 501.631537][T30462] __x64_sys_sendmsg+0xd4/0x160 [ 501.631693][T30462] x64_sys_call+0x2999/0x2fb0 [ 501.631713][T30462] do_syscall_64+0xd2/0x200 [ 501.631729][T30462] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 501.631752][T30462] ? clear_bhb_loop+0x40/0x90 [ 501.631846][T30462] ? clear_bhb_loop+0x40/0x90 [ 501.631865][T30462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.631883][T30462] RIP: 0033:0x7fbed9dae929 [ 501.631898][T30462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.631913][T30462] RSP: 002b:00007fbed8417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.632003][T30462] RAX: ffffffffffffffda RBX: 00007fbed9fd5fa0 RCX: 00007fbed9dae929 [ 501.632014][T30462] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 501.632097][T30462] RBP: 00007fbed8417090 R08: 0000000000000000 R09: 0000000000000000 [ 501.632107][T30462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.632153][T30462] R13: 0000000000000000 R14: 00007fbed9fd5fa0 R15: 00007fffb287fc08 [ 501.632169][T30462] [ 501.972586][T30467] FAULT_INJECTION: forcing a failure. [ 501.972586][T30467] name failslab, interval 1, probability 0, space 0, times 0 [ 501.987290][T30467] CPU: 0 UID: 0 PID: 30467 Comm: syz.0.8617 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 501.987321][T30467] Tainted: [W]=WARN [ 501.987327][T30467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 501.987351][T30467] Call Trace: [ 501.987358][T30467] [ 501.987366][T30467] __dump_stack+0x1d/0x30 [ 501.987387][T30467] dump_stack_lvl+0xe8/0x140 [ 501.987405][T30467] dump_stack+0x15/0x1b [ 501.987421][T30467] should_fail_ex+0x265/0x280 [ 501.987515][T30467] should_failslab+0x8c/0xb0 [ 501.987536][T30467] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 501.987561][T30467] ? v9fs_session_init+0x4b/0xde0 [ 501.987583][T30467] kstrdup+0x3e/0xd0 [ 501.987629][T30467] v9fs_session_init+0x4b/0xde0 [ 501.987648][T30467] ? obj_cgroup_charge_account+0x122/0x1a0 [ 501.987676][T30467] ? __rcu_read_unlock+0x4f/0x70 [ 501.987733][T30467] ? should_fail_ex+0xdb/0x280 [ 501.987759][T30467] ? v9fs_mount+0x51/0x590 [ 501.987810][T30467] ? should_failslab+0x8c/0xb0 [ 501.987830][T30467] ? __kmalloc_cache_noprof+0x189/0x320 [ 501.987858][T30467] v9fs_mount+0x67/0x590 [ 501.987881][T30467] ? __pfx_v9fs_mount+0x10/0x10 [ 501.987939][T30467] legacy_get_tree+0x78/0xd0 [ 501.987973][T30467] vfs_get_tree+0x54/0x1d0 [ 501.987998][T30467] do_new_mount+0x207/0x680 [ 501.988059][T30467] path_mount+0x4a4/0xb20 [ 501.988089][T30467] ? user_path_at+0x109/0x130 [ 501.988116][T30467] __se_sys_mount+0x28f/0x2e0 [ 501.988186][T30467] ? fput+0x8f/0xc0 [ 501.988206][T30467] __x64_sys_mount+0x67/0x80 [ 501.988221][T30467] x64_sys_call+0xd36/0x2fb0 [ 501.988238][T30467] do_syscall_64+0xd2/0x200 [ 501.988274][T30467] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 501.988328][T30467] ? clear_bhb_loop+0x40/0x90 [ 501.988387][T30467] ? clear_bhb_loop+0x40/0x90 [ 501.988409][T30467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.988437][T30467] RIP: 0033:0x7fbed9dae929 [ 501.988480][T30467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.988547][T30467] RSP: 002b:00007fbed8417038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 501.988564][T30467] RAX: ffffffffffffffda RBX: 00007fbed9fd5fa0 RCX: 00007fbed9dae929 [ 501.988576][T30467] RDX: 00002000000002c0 RSI: 0000200000000140 RDI: 0000000000000000 [ 501.988588][T30467] RBP: 00007fbed8417090 R08: 00002000000003c0 R09: 0000000000000000 [ 501.988601][T30467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.988668][T30467] R13: 0000000000000000 R14: 00007fbed9fd5fa0 R15: 00007fffb287fc08 [ 501.988684][T30467] [ 502.286467][T30473] FAULT_INJECTION: forcing a failure. [ 502.286467][T30473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.299561][T30473] CPU: 1 UID: 0 PID: 30473 Comm: syz.7.8620 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 502.299592][T30473] Tainted: [W]=WARN [ 502.299598][T30473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 502.299609][T30473] Call Trace: [ 502.299615][T30473] [ 502.299645][T30473] __dump_stack+0x1d/0x30 [ 502.299664][T30473] dump_stack_lvl+0xe8/0x140 [ 502.299679][T30473] dump_stack+0x15/0x1b [ 502.299767][T30473] should_fail_ex+0x265/0x280 [ 502.299790][T30473] should_fail+0xb/0x20 [ 502.299810][T30473] should_fail_usercopy+0x1a/0x20 [ 502.299834][T30473] _copy_to_user+0x20/0xa0 [ 502.299851][T30473] simple_read_from_buffer+0xb5/0x130 [ 502.299875][T30473] proc_fail_nth_read+0x100/0x140 [ 502.299939][T30473] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 502.299996][T30473] vfs_read+0x1a0/0x6f0 [ 502.300019][T30473] ? __rcu_read_unlock+0x4f/0x70 [ 502.300037][T30473] ? __fget_files+0x184/0x1c0 [ 502.300108][T30473] ? __sys_bind+0x223/0x2a0 [ 502.300177][T30473] ksys_read+0xda/0x1a0 [ 502.300208][T30473] __x64_sys_read+0x40/0x50 [ 502.300231][T30473] x64_sys_call+0x2d77/0x2fb0 [ 502.300253][T30473] do_syscall_64+0xd2/0x200 [ 502.300268][T30473] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 502.300288][T30473] ? clear_bhb_loop+0x40/0x90 [ 502.300304][T30473] ? clear_bhb_loop+0x40/0x90 [ 502.300348][T30473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.300364][T30473] RIP: 0033:0x7f8c2cc8d33c [ 502.300377][T30473] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 502.300392][T30473] RSP: 002b:00007f8c2b2f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 502.300408][T30473] RAX: ffffffffffffffda RBX: 00007f8c2ceb5fa0 RCX: 00007f8c2cc8d33c [ 502.300435][T30473] RDX: 000000000000000f RSI: 00007f8c2b2f70a0 RDI: 0000000000000005 [ 502.300445][T30473] RBP: 00007f8c2b2f7090 R08: 0000000000000000 R09: 0000000000000000 [ 502.300455][T30473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.300465][T30473] R13: 0000000000000000 R14: 00007f8c2ceb5fa0 R15: 00007ffe91a24588 [ 502.300479][T30473] [ 502.545522][T30475] loop0: detected capacity change from 0 to 512 [ 502.566144][T30475] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.8621: Failed to acquire dquot type 1 [ 502.578023][T30475] EXT4-fs (loop0): 1 truncate cleaned up [ 502.584174][T30475] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.602845][T30475] batman_adv: batadv0: Adding interface: ipvlan2 [ 502.609270][T30475] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.634846][T30475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.645351][T30475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.655497][T30475] batman_adv: batadv0: Interface activated: ipvlan2 [ 502.811674][T30514] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8636'. [ 502.821392][T30506] loop7: detected capacity change from 0 to 1024 [ 502.830091][T30506] EXT4-fs: Invalid want_extra_isize 0 [ 502.876783][T30522] loop0: detected capacity change from 0 to 512 [ 502.900937][T30526] loop0: detected capacity change from 0 to 1024 [ 502.907650][T30526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 502.914779][T30526] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 502.924616][T30526] EXT4-fs (loop0): group descriptors corrupted! [ 502.954539][T30532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.963189][T30532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.966739][T30534] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8645'. [ 503.016236][T30540] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8648'. [ 503.170700][T30546] loop0: detected capacity change from 0 to 512 [ 503.183402][T30546] EXT4-fs: Ignoring removed i_version option [ 503.190093][T30546] EXT4-fs: Ignoring removed mblk_io_submit option [ 503.197551][T30546] journal_path: Lookup failure for './file2' [ 503.203828][T30546] EXT4-fs: error: could not find journal device path [ 503.556367][T30546] loop0: detected capacity change from 0 to 8192 [ 503.585718][T30546] loop0: p1 < > p2 p4 [ 503.590155][T30546] loop0: partition table partially beyond EOD, truncated [ 503.598288][T30546] loop0: p1 start 408832 is beyond EOD, truncated [ 503.605036][T30546] loop0: p2 size 8388352 extends beyond EOD, truncated [ 503.672665][T30559] loop7: detected capacity change from 0 to 1024 [ 503.679496][T30559] EXT4-fs: Ignoring removed nomblk_io_submit option [ 503.686831][T30559] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 503.696727][T30559] EXT4-fs (loop7): group descriptors corrupted! [ 503.774582][T30574] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8663'. [ 503.783689][T30574] netlink: 'syz.7.8663': attribute type 5 has an invalid length. [ 503.791463][T30574] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8663'. [ 503.803868][T30574] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 503.812053][T30574] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 503.820205][T30574] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 503.828410][T30574] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 503.837635][T30574] geneve2: entered promiscuous mode [ 503.842938][T30574] geneve2: entered allmulticast mode [ 503.879494][T30584] loop7: detected capacity change from 0 to 1024 [ 503.887290][T30584] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 503.905874][T30584] loop7: detected capacity change from 0 to 1024 [ 503.953424][T30589] loop0: detected capacity change from 0 to 1024 [ 503.960426][T30589] EXT4-fs: Ignoring removed nomblk_io_submit option [ 503.968411][T30589] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 503.978185][T30589] EXT4-fs (loop0): group descriptors corrupted! [ 504.041533][T30595] serio: Serial port ptm0 [ 504.118728][T30602] FAULT_INJECTION: forcing a failure. [ 504.118728][T30602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.131914][T30602] CPU: 0 UID: 0 PID: 30602 Comm: syz.7.8673 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 504.131946][T30602] Tainted: [W]=WARN [ 504.131954][T30602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 504.131967][T30602] Call Trace: [ 504.131978][T30602] [ 504.131987][T30602] __dump_stack+0x1d/0x30 [ 504.132112][T30602] dump_stack_lvl+0xe8/0x140 [ 504.132128][T30602] dump_stack+0x15/0x1b [ 504.132142][T30602] should_fail_ex+0x265/0x280 [ 504.132171][T30602] should_fail+0xb/0x20 [ 504.132218][T30602] should_fail_usercopy+0x1a/0x20 [ 504.132246][T30602] strncpy_from_user+0x25/0x230 [ 504.132329][T30602] path_setxattrat+0xeb/0x310 [ 504.132366][T30602] __x64_sys_fsetxattr+0x6b/0x80 [ 504.132383][T30602] x64_sys_call+0x2f7c/0x2fb0 [ 504.132404][T30602] do_syscall_64+0xd2/0x200 [ 504.132421][T30602] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 504.132443][T30602] ? clear_bhb_loop+0x40/0x90 [ 504.132531][T30602] ? clear_bhb_loop+0x40/0x90 [ 504.132549][T30602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.132567][T30602] RIP: 0033:0x7f8c2cc8e929 [ 504.132580][T30602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.132673][T30602] RSP: 002b:00007f8c2b2f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 504.132689][T30602] RAX: ffffffffffffffda RBX: 00007f8c2ceb5fa0 RCX: 00007f8c2cc8e929 [ 504.132700][T30602] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000006 [ 504.132711][T30602] RBP: 00007f8c2b2f7090 R08: 0000000000000000 R09: 0000000000000000 [ 504.132721][T30602] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 504.132732][T30602] R13: 0000000000000000 R14: 00007f8c2ceb5fa0 R15: 00007ffe91a24588 [ 504.132815][T30602] [ 504.351275][T30608] loop0: detected capacity change from 0 to 1024 [ 504.358091][T30608] EXT4-fs: Ignoring removed orlov option [ 504.529211][T30604] xt_CT: No such helper "pptp" [ 504.541361][T30604] loop5: detected capacity change from 0 to 1024 [ 504.549343][T30604] EXT4-fs: Ignoring removed nobh option [ 504.554935][T30604] EXT4-fs: Ignoring removed bh option [ 504.702754][T30630] loop0: detected capacity change from 0 to 1024 [ 504.709705][T30630] EXT4-fs: Ignoring removed orlov option [ 504.720370][T30630] FAULT_INJECTION: forcing a failure. [ 504.720370][T30630] name failslab, interval 1, probability 0, space 0, times 0 [ 504.733179][T30630] CPU: 0 UID: 0 PID: 30630 Comm: syz.0.8681 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 504.733200][T30630] Tainted: [W]=WARN [ 504.733209][T30630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 504.733216][T30630] Call Trace: [ 504.733220][T30630] [ 504.733226][T30630] __dump_stack+0x1d/0x30 [ 504.733239][T30630] dump_stack_lvl+0xe8/0x140 [ 504.733250][T30630] dump_stack+0x15/0x1b [ 504.733259][T30630] should_fail_ex+0x265/0x280 [ 504.733288][T30630] should_failslab+0x8c/0xb0 [ 504.733351][T30630] __kmalloc_noprof+0xa5/0x3e0 [ 504.733365][T30630] ? copy_splice_read+0xc2/0x5f0 [ 504.733381][T30630] copy_splice_read+0xc2/0x5f0 [ 504.733422][T30630] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 504.733435][T30630] splice_direct_to_actor+0x290/0x680 [ 504.733452][T30630] ? __pfx_direct_splice_actor+0x10/0x10 [ 504.733546][T30630] do_splice_direct+0xda/0x150 [ 504.733562][T30630] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 504.733631][T30630] do_sendfile+0x380/0x650 [ 504.733646][T30630] __x64_sys_sendfile64+0x105/0x150 [ 504.733659][T30630] x64_sys_call+0xb39/0x2fb0 [ 504.733728][T30630] do_syscall_64+0xd2/0x200 [ 504.733739][T30630] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 504.733801][T30630] ? clear_bhb_loop+0x40/0x90 [ 504.733813][T30630] ? clear_bhb_loop+0x40/0x90 [ 504.733824][T30630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.733836][T30630] RIP: 0033:0x7fbed9dae929 [ 504.733845][T30630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.733909][T30630] RSP: 002b:00007fbed8417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 504.733920][T30630] RAX: ffffffffffffffda RBX: 00007fbed9fd5fa0 RCX: 00007fbed9dae929 [ 504.733927][T30630] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000007 [ 504.733934][T30630] RBP: 00007fbed8417090 R08: 0000000000000000 R09: 0000000000000000 [ 504.734016][T30630] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 504.734023][T30630] R13: 0000000000000000 R14: 00007fbed9fd5fa0 R15: 00007fffb287fc08 [ 504.734103][T30630] [ 504.970149][T30633] loop0: detected capacity change from 0 to 1024 [ 504.976956][T30633] EXT4-fs: Ignoring removed orlov option [ 505.170788][ T29] kauditd_printk_skb: 426 callbacks suppressed [ 505.170802][ T29] audit: type=1326 audit(1751674885.088:28470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30646 comm="syz.0.8688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed9dae929 code=0x7ffc0000 [ 505.200802][ T29] audit: type=1326 audit(1751674885.088:28471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30646 comm="syz.0.8688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed9dae929 code=0x7ffc0000 [ 505.224612][T30645] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.8687' sets config #0 [ 505.224668][ T29] audit: type=1326 audit(1751674885.098:28472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30646 comm="syz.0.8688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbed9dae929 code=0x7ffc0000 [ 505.257841][ T29] audit: type=1326 audit(1751674885.098:28473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30646 comm="syz.0.8688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed9dae929 code=0x7ffc0000 [ 505.281569][ T29] audit: type=1326 audit(1751674885.098:28474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30646 comm="syz.0.8688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed9dae929 code=0x7ffc0000 [ 505.305390][ T29] audit: type=1326 audit(1751674885.098:28475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30646 comm="syz.0.8688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbed9dae929 code=0x7ffc0000 [ 505.329041][ T29] audit: type=1326 audit(1751674885.098:28476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30646 comm="syz.0.8688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed9dae929 code=0x7ffc0000 [ 505.352709][ T29] audit: type=1326 audit(1751674885.098:28477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30646 comm="syz.0.8688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbed9dae929 code=0x7ffc0000 [ 505.376335][ T29] audit: type=1326 audit(1751674885.098:28478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30646 comm="syz.0.8688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed9dae929 code=0x7ffc0000 [ 505.399965][ T29] audit: type=1326 audit(1751674885.098:28479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30646 comm="syz.0.8688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbed9dae929 code=0x7ffc0000 [ 505.449937][T30659] FAULT_INJECTION: forcing a failure. [ 505.449937][T30659] name failslab, interval 1, probability 0, space 0, times 0 [ 505.462733][T30659] CPU: 0 UID: 0 PID: 30659 Comm: syz.7.8693 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 505.462781][T30659] Tainted: [W]=WARN [ 505.462787][T30659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 505.462826][T30659] Call Trace: [ 505.462831][T30659] [ 505.462838][T30659] __dump_stack+0x1d/0x30 [ 505.462858][T30659] dump_stack_lvl+0xe8/0x140 [ 505.462874][T30659] dump_stack+0x15/0x1b [ 505.462928][T30659] should_fail_ex+0x265/0x280 [ 505.462953][T30659] should_failslab+0x8c/0xb0 [ 505.463043][T30659] kmem_cache_alloc_noprof+0x50/0x310 [ 505.463101][T30659] ? copy_pid_ns+0x17f/0x550 [ 505.463122][T30659] ? inc_ucount+0xcb/0x140 [ 505.463147][T30659] copy_pid_ns+0x17f/0x550 [ 505.463166][T30659] ? copy_mnt_ns+0x77/0x5e0 [ 505.463200][T30659] ? kmem_cache_alloc_noprof+0x220/0x310 [ 505.463221][T30659] ? create_new_namespaces+0x3c/0x3d0 [ 505.463246][T30659] create_new_namespaces+0x176/0x3d0 [ 505.463340][T30659] unshare_nsproxy_namespaces+0xe8/0x120 [ 505.463366][T30659] ksys_unshare+0x3d0/0x6d0 [ 505.463388][T30659] ? ksys_write+0x192/0x1a0 [ 505.463458][T30659] __x64_sys_unshare+0x1f/0x30 [ 505.463530][T30659] x64_sys_call+0x2d4b/0x2fb0 [ 505.463547][T30659] do_syscall_64+0xd2/0x200 [ 505.463563][T30659] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 505.463656][T30659] ? clear_bhb_loop+0x40/0x90 [ 505.463673][T30659] ? clear_bhb_loop+0x40/0x90 [ 505.463768][T30659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.463786][T30659] RIP: 0033:0x7f8c2cc8e929 [ 505.463819][T30659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.463833][T30659] RSP: 002b:00007f8c2b2f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 505.463848][T30659] RAX: ffffffffffffffda RBX: 00007f8c2ceb5fa0 RCX: 00007f8c2cc8e929 [ 505.463858][T30659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020040400 [ 505.463868][T30659] RBP: 00007f8c2b2f7090 R08: 0000000000000000 R09: 0000000000000000 [ 505.463878][T30659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.463892][T30659] R13: 0000000000000000 R14: 00007f8c2ceb5fa0 R15: 00007ffe91a24588 [ 505.463932][T30659] [ 505.747302][T30665] 9pnet_fd: Insufficient options for proto=fd [ 505.762243][T30661] loop0: detected capacity change from 0 to 8192 [ 505.991687][T30671] loop0: detected capacity change from 0 to 256 [ 506.022840][T30673] loop0: detected capacity change from 0 to 128 [ 506.029351][T30673] vfat: Unknown parameter '/dev/loop#' [ 506.248259][T30676] program syz.8.8699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.291906][T30684] loop6: detected capacity change from 0 to 512 [ 506.320914][T30684] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.337342][T30688] FAULT_INJECTION: forcing a failure. [ 506.337342][T30688] name failslab, interval 1, probability 0, space 0, times 0 [ 506.350240][T30688] CPU: 0 UID: 0 PID: 30688 Comm: syz.8.8701 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 506.350274][T30688] Tainted: [W]=WARN [ 506.350281][T30688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 506.350291][T30688] Call Trace: [ 506.350297][T30688] [ 506.350362][T30688] __dump_stack+0x1d/0x30 [ 506.350384][T30688] dump_stack_lvl+0xe8/0x140 [ 506.350402][T30688] dump_stack+0x15/0x1b [ 506.350473][T30688] should_fail_ex+0x265/0x280 [ 506.350536][T30688] should_failslab+0x8c/0xb0 [ 506.350559][T30688] __kmalloc_noprof+0xa5/0x3e0 [ 506.350587][T30688] ? sctp_make_abort_user+0x17b/0x3a0 [ 506.350613][T30688] sctp_make_abort_user+0x17b/0x3a0 [ 506.350644][T30688] sctp_sendmsg_check_sflags+0x17e/0x1e0 [ 506.350752][T30688] sctp_sendmsg+0x10bb/0x18d0 [ 506.350781][T30688] ? __pfx_sctp_sendmsg+0x10/0x10 [ 506.350804][T30688] inet_sendmsg+0xc2/0xd0 [ 506.350844][T30688] __sock_sendmsg+0x102/0x180 [ 506.350880][T30688] ____sys_sendmsg+0x31e/0x4e0 [ 506.350936][T30688] ___sys_sendmsg+0x17b/0x1d0 [ 506.350971][T30688] __x64_sys_sendmsg+0xd4/0x160 [ 506.351045][T30688] x64_sys_call+0x2999/0x2fb0 [ 506.351122][T30688] do_syscall_64+0xd2/0x200 [ 506.351141][T30688] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 506.351167][T30688] ? clear_bhb_loop+0x40/0x90 [ 506.351184][T30688] ? clear_bhb_loop+0x40/0x90 [ 506.351224][T30688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.351246][T30688] RIP: 0033:0x7fd5ef3ce929 [ 506.351261][T30688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.351279][T30688] RSP: 002b:00007fd5eda16038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.351316][T30688] RAX: ffffffffffffffda RBX: 00007fd5ef5f6080 RCX: 00007fd5ef3ce929 [ 506.351327][T30688] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 506.351338][T30688] RBP: 00007fd5eda16090 R08: 0000000000000000 R09: 0000000000000000 [ 506.351348][T30688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.351361][T30688] R13: 0000000000000000 R14: 00007fd5ef5f6080 R15: 00007ffede6ed758 [ 506.351457][T30688] [ 506.641622][T30692] netlink: 'syz.7.8703': attribute type 2 has an invalid length. [ 506.899148][T30704] veth1_to_bond: entered allmulticast mode [ 506.905673][T30704] veth1_to_bond: entered promiscuous mode [ 506.913043][T30704] veth1_to_bond: left promiscuous mode [ 506.918593][T30704] veth1_to_bond: left allmulticast mode [ 507.064523][T30717] loop5: detected capacity change from 0 to 512 [ 507.073553][T30717] EXT4-fs mount: 26 callbacks suppressed [ 507.073563][T30717] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 507.110747][T24639] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 507.159484][T30726] FAULT_INJECTION: forcing a failure. [ 507.159484][T30726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.172721][T30726] CPU: 0 UID: 0 PID: 30726 Comm: syz.5.8717 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 507.172805][T30726] Tainted: [W]=WARN [ 507.172811][T30726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 507.172822][T30726] Call Trace: [ 507.172866][T30726] [ 507.172873][T30726] __dump_stack+0x1d/0x30 [ 507.172894][T30726] dump_stack_lvl+0xe8/0x140 [ 507.172912][T30726] dump_stack+0x15/0x1b [ 507.172929][T30726] should_fail_ex+0x265/0x280 [ 507.172957][T30726] should_fail+0xb/0x20 [ 507.173027][T30726] should_fail_usercopy+0x1a/0x20 [ 507.173054][T30726] _copy_from_user+0x1c/0xb0 [ 507.173075][T30726] kstrtouint_from_user+0x69/0xf0 [ 507.173185][T30726] ? 0xffffffff81000000 [ 507.173197][T30726] ? selinux_file_permission+0x1e4/0x320 [ 507.173219][T30726] proc_fail_nth_write+0x50/0x160 [ 507.173286][T30726] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 507.173317][T30726] vfs_write+0x266/0x8e0 [ 507.173347][T30726] ? __rcu_read_unlock+0x4f/0x70 [ 507.173380][T30726] ? __fget_files+0x184/0x1c0 [ 507.173448][T30726] ksys_write+0xda/0x1a0 [ 507.173482][T30726] __x64_sys_write+0x40/0x50 [ 507.173640][T30726] x64_sys_call+0x2cdd/0x2fb0 [ 507.173666][T30726] do_syscall_64+0xd2/0x200 [ 507.173685][T30726] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 507.173708][T30726] ? clear_bhb_loop+0x40/0x90 [ 507.173725][T30726] ? clear_bhb_loop+0x40/0x90 [ 507.173746][T30726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.173832][T30726] RIP: 0033:0x7efea024d3df [ 507.173841][T30726] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 507.173877][T30726] RSP: 002b:00007efe9e8b7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 507.173888][T30726] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efea024d3df [ 507.173896][T30726] RDX: 0000000000000001 RSI: 00007efe9e8b70a0 RDI: 0000000000000007 [ 507.173903][T30726] RBP: 00007efe9e8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 507.173910][T30726] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 507.173990][T30726] R13: 0000000000000000 R14: 00007efea0475fa0 R15: 00007ffec5d6a5f8 [ 507.174002][T30726] [ 507.421791][T30728] loop5: detected capacity change from 0 to 1024 [ 507.430599][T30728] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.8718: Failed to acquire dquot type 0 [ 507.442704][T30728] EXT4-fs (loop5): 1 truncate cleaned up [ 507.448607][T30728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.472129][T24639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.585257][T30740] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8723'. [ 507.595351][T30740] FAULT_INJECTION: forcing a failure. [ 507.595351][T30740] name failslab, interval 1, probability 0, space 0, times 0 [ 507.608218][T30740] CPU: 1 UID: 0 PID: 30740 Comm: syz.7.8723 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 507.608251][T30740] Tainted: [W]=WARN [ 507.608337][T30740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 507.608349][T30740] Call Trace: [ 507.608408][T30740] [ 507.608416][T30740] __dump_stack+0x1d/0x30 [ 507.608438][T30740] dump_stack_lvl+0xe8/0x140 [ 507.608457][T30740] dump_stack+0x15/0x1b [ 507.608473][T30740] should_fail_ex+0x265/0x280 [ 507.608513][T30740] should_failslab+0x8c/0xb0 [ 507.608545][T30740] __kmalloc_noprof+0xa5/0x3e0 [ 507.608619][T30740] ? fib_nl2rule+0x215/0xc50 [ 507.608640][T30740] fib_nl2rule+0x215/0xc50 [ 507.608660][T30740] fib_newrule+0x2c1/0x930 [ 507.608692][T30740] fib_nl_newrule+0x46/0x60 [ 507.608783][T30740] ? __pfx_fib_nl_newrule+0x10/0x10 [ 507.608803][T30740] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 507.608829][T30740] netlink_rcv_skb+0x120/0x220 [ 507.608857][T30740] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 507.608961][T30740] rtnetlink_rcv+0x1c/0x30 [ 507.608980][T30740] netlink_unicast+0x5a1/0x670 [ 507.609009][T30740] netlink_sendmsg+0x58b/0x6b0 [ 507.609025][T30740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.609041][T30740] __sock_sendmsg+0x145/0x180 [ 507.609157][T30740] ____sys_sendmsg+0x31e/0x4e0 [ 507.609190][T30740] ___sys_sendmsg+0x17b/0x1d0 [ 507.609312][T30740] __x64_sys_sendmsg+0xd4/0x160 [ 507.609416][T30740] x64_sys_call+0x2999/0x2fb0 [ 507.609439][T30740] do_syscall_64+0xd2/0x200 [ 507.609500][T30740] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 507.609592][T30740] ? clear_bhb_loop+0x40/0x90 [ 507.609653][T30740] ? clear_bhb_loop+0x40/0x90 [ 507.609675][T30740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.609697][T30740] RIP: 0033:0x7f8c2cc8e929 [ 507.609714][T30740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.609731][T30740] RSP: 002b:00007f8c2b2f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.609765][T30740] RAX: ffffffffffffffda RBX: 00007f8c2ceb5fa0 RCX: 00007f8c2cc8e929 [ 507.609778][T30740] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 507.609792][T30740] RBP: 00007f8c2b2f7090 R08: 0000000000000000 R09: 0000000000000000 [ 507.609807][T30740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.609820][T30740] R13: 0000000000000000 R14: 00007f8c2ceb5fa0 R15: 00007ffe91a24588 [ 507.609912][T30740] [ 507.898198][T30746] FAULT_INJECTION: forcing a failure. [ 507.898198][T30746] name failslab, interval 1, probability 0, space 0, times 0 [ 507.910918][T30746] CPU: 1 UID: 0 PID: 30746 Comm: syz.8.8726 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 507.910974][T30746] Tainted: [W]=WARN [ 507.910980][T30746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 507.910990][T30746] Call Trace: [ 507.910995][T30746] [ 507.911001][T30746] __dump_stack+0x1d/0x30 [ 507.911020][T30746] dump_stack_lvl+0xe8/0x140 [ 507.911041][T30746] dump_stack+0x15/0x1b [ 507.911137][T30746] should_fail_ex+0x265/0x280 [ 507.911163][T30746] should_failslab+0x8c/0xb0 [ 507.911186][T30746] kmem_cache_alloc_node_noprof+0x57/0x320 [ 507.911209][T30746] ? __alloc_skb+0x101/0x320 [ 507.911287][T30746] __alloc_skb+0x101/0x320 [ 507.911335][T30746] ? audit_log_start+0x365/0x6c0 [ 507.911366][T30746] audit_log_start+0x380/0x6c0 [ 507.911447][T30746] audit_seccomp+0x48/0x100 [ 507.911470][T30746] ? __seccomp_filter+0x68c/0x10d0 [ 507.911491][T30746] __seccomp_filter+0x69d/0x10d0 [ 507.911515][T30746] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 507.911604][T30746] ? vfs_write+0x75e/0x8e0 [ 507.911633][T30746] ? __rcu_read_unlock+0x4f/0x70 [ 507.911652][T30746] ? __fget_files+0x184/0x1c0 [ 507.911669][T30746] __secure_computing+0x82/0x150 [ 507.911773][T30746] syscall_trace_enter+0xcf/0x1e0 [ 507.911797][T30746] do_syscall_64+0xac/0x200 [ 507.911888][T30746] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 507.911912][T30746] ? clear_bhb_loop+0x40/0x90 [ 507.911930][T30746] ? clear_bhb_loop+0x40/0x90 [ 507.912029][T30746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.912071][T30746] RIP: 0033:0x7fd5ef3ce929 [ 507.912084][T30746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.912098][T30746] RSP: 002b:00007fd5eda37038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 507.912114][T30746] RAX: ffffffffffffffda RBX: 00007fd5ef5f5fa0 RCX: 00007fd5ef3ce929 [ 507.912171][T30746] RDX: 0000200000000900 RSI: 0000000000000016 RDI: 0000000000000003 [ 507.912184][T30746] RBP: 00007fd5eda37090 R08: 0000000000000000 R09: 0000000000000000 [ 507.912197][T30746] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 507.912210][T30746] R13: 0000000000000000 R14: 00007fd5ef5f5fa0 R15: 00007ffede6ed758 [ 507.912276][T30746] [ 508.159737][T30750] FAULT_INJECTION: forcing a failure. [ 508.159737][T30750] name failslab, interval 1, probability 0, space 0, times 0 [ 508.174398][T30750] CPU: 0 UID: 0 PID: 30750 Comm: syz.0.8728 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 508.174432][T30750] Tainted: [W]=WARN [ 508.174440][T30750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 508.174452][T30750] Call Trace: [ 508.174458][T30750] [ 508.174466][T30750] __dump_stack+0x1d/0x30 [ 508.174541][T30750] dump_stack_lvl+0xe8/0x140 [ 508.174562][T30750] dump_stack+0x15/0x1b [ 508.174579][T30750] should_fail_ex+0x265/0x280 [ 508.174609][T30750] ? p9_client_create+0x59/0xbc0 [ 508.174685][T30750] should_failslab+0x8c/0xb0 [ 508.174708][T30750] __kmalloc_cache_noprof+0x4c/0x320 [ 508.174765][T30750] p9_client_create+0x59/0xbc0 [ 508.174787][T30750] ? should_failslab+0x8c/0xb0 [ 508.174868][T30750] ? __kmalloc_node_track_caller_noprof+0x1e5/0x410 [ 508.174894][T30750] ? v9fs_session_init+0x78/0xde0 [ 508.174919][T30750] v9fs_session_init+0xf7/0xde0 [ 508.174939][T30750] ? obj_cgroup_charge_account+0x122/0x1a0 [ 508.174981][T30750] ? __rcu_read_unlock+0x4f/0x70 [ 508.175003][T30750] ? should_fail_ex+0xdb/0x280 [ 508.175030][T30750] ? v9fs_mount+0x51/0x590 [ 508.175055][T30750] ? should_failslab+0x8c/0xb0 [ 508.175086][T30750] ? __kmalloc_cache_noprof+0x189/0x320 [ 508.175114][T30750] v9fs_mount+0x67/0x590 [ 508.175142][T30750] ? __pfx_v9fs_mount+0x10/0x10 [ 508.175175][T30750] legacy_get_tree+0x78/0xd0 [ 508.175201][T30750] vfs_get_tree+0x54/0x1d0 [ 508.175226][T30750] do_new_mount+0x207/0x680 [ 508.175308][T30750] path_mount+0x4a4/0xb20 [ 508.175332][T30750] ? user_path_at+0x109/0x130 [ 508.175425][T30750] __se_sys_mount+0x28f/0x2e0 [ 508.175440][T30750] ? fput+0x8f/0xc0 [ 508.175477][T30750] __x64_sys_mount+0x67/0x80 [ 508.175497][T30750] x64_sys_call+0xd36/0x2fb0 [ 508.175514][T30750] do_syscall_64+0xd2/0x200 [ 508.175529][T30750] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 508.175550][T30750] ? clear_bhb_loop+0x40/0x90 [ 508.175583][T30750] ? clear_bhb_loop+0x40/0x90 [ 508.175600][T30750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.175617][T30750] RIP: 0033:0x7fbed9dae929 [ 508.175641][T30750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.175656][T30750] RSP: 002b:00007fbed8417038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 508.175672][T30750] RAX: ffffffffffffffda RBX: 00007fbed9fd5fa0 RCX: 00007fbed9dae929 [ 508.175771][T30750] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 508.175781][T30750] RBP: 00007fbed8417090 R08: 0000200000000400 R09: 0000000000000000 [ 508.175864][T30750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 508.175946][T30750] R13: 0000000000000000 R14: 00007fbed9fd5fa0 R15: 00007fffb287fc08 [ 508.175965][T30750] [ 508.184560][T30751] netlink: 196 bytes leftover after parsing attributes in process `syz.6.8727'. [ 508.481098][T30758] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.515095][T30767] loop6: detected capacity change from 0 to 1024 [ 508.561635][T30758] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.578367][T30772] vhci_hcd: invalid port number 96 [ 508.583520][T30772] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 508.611752][T30776] FAULT_INJECTION: forcing a failure. [ 508.611752][T30776] name failslab, interval 1, probability 0, space 0, times 0 [ 508.624480][T30776] CPU: 0 UID: 0 PID: 30776 Comm: syz.0.8736 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 508.624529][T30776] Tainted: [W]=WARN [ 508.624536][T30776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 508.624548][T30776] Call Trace: [ 508.624554][T30776] [ 508.624563][T30776] __dump_stack+0x1d/0x30 [ 508.624631][T30776] dump_stack_lvl+0xe8/0x140 [ 508.624650][T30776] dump_stack+0x15/0x1b [ 508.624667][T30776] should_fail_ex+0x265/0x280 [ 508.624696][T30776] should_failslab+0x8c/0xb0 [ 508.624724][T30776] __kmalloc_noprof+0xa5/0x3e0 [ 508.624808][T30776] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 508.624877][T30776] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 508.624901][T30776] genl_family_rcv_msg_doit+0x48/0x1b0 [ 508.624998][T30776] ? security_capable+0x83/0x90 [ 508.625061][T30776] ? ns_capable+0x7d/0xb0 [ 508.625077][T30776] genl_rcv_msg+0x422/0x460 [ 508.625097][T30776] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 508.625116][T30776] netlink_rcv_skb+0x120/0x220 [ 508.625141][T30776] ? __pfx_genl_rcv_msg+0x10/0x10 [ 508.625203][T30776] genl_rcv+0x28/0x40 [ 508.625220][T30776] netlink_unicast+0x5a1/0x670 [ 508.625313][T30776] netlink_sendmsg+0x58b/0x6b0 [ 508.625330][T30776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.625396][T30776] __sock_sendmsg+0x145/0x180 [ 508.625418][T30776] ____sys_sendmsg+0x31e/0x4e0 [ 508.625446][T30776] ___sys_sendmsg+0x17b/0x1d0 [ 508.625530][T30776] __x64_sys_sendmsg+0xd4/0x160 [ 508.625559][T30776] x64_sys_call+0x2999/0x2fb0 [ 508.625606][T30776] do_syscall_64+0xd2/0x200 [ 508.625622][T30776] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 508.625778][T30776] ? clear_bhb_loop+0x40/0x90 [ 508.625796][T30776] ? clear_bhb_loop+0x40/0x90 [ 508.625814][T30776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.625871][T30776] RIP: 0033:0x7fbed9dae929 [ 508.625885][T30776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.625899][T30776] RSP: 002b:00007fbed8417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.625916][T30776] RAX: ffffffffffffffda RBX: 00007fbed9fd5fa0 RCX: 00007fbed9dae929 [ 508.625926][T30776] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001c [ 508.625937][T30776] RBP: 00007fbed8417090 R08: 0000000000000000 R09: 0000000000000000 [ 508.625986][T30776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.625996][T30776] R13: 0000000000000000 R14: 00007fbed9fd5fa0 R15: 00007fffb287fc08 [ 508.626064][T30776] [ 508.627307][T30774] loop6: detected capacity change from 0 to 1024 [ 508.721845][T30778] SELinux: syz.7.8737 (30778) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 508.740015][T30774] EXT4-fs: Ignoring removed nomblk_io_submit option [ 508.742199][T30758] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.747740][T30774] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 508.927784][T30774] EXT4-fs (loop6): group descriptors corrupted! [ 508.987171][T30758] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.011824][T30795] serio: Serial port ptm0 [ 509.043204][T30800] FAULT_INJECTION: forcing a failure. [ 509.043204][T30800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.056335][T30800] CPU: 0 UID: 0 PID: 30800 Comm: syz.0.8746 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 509.056367][T30800] Tainted: [W]=WARN [ 509.056433][T30800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 509.056445][T30800] Call Trace: [ 509.056454][T30800] [ 509.056462][T30800] __dump_stack+0x1d/0x30 [ 509.056484][T30800] dump_stack_lvl+0xe8/0x140 [ 509.056502][T30800] dump_stack+0x15/0x1b [ 509.056585][T30800] should_fail_ex+0x265/0x280 [ 509.056670][T30800] should_fail+0xb/0x20 [ 509.056696][T30800] should_fail_usercopy+0x1a/0x20 [ 509.056769][T30800] _copy_from_user+0x1c/0xb0 [ 509.056790][T30800] ___sys_sendmsg+0xc1/0x1d0 [ 509.056833][T30800] __x64_sys_sendmsg+0xd4/0x160 [ 509.056882][T30800] x64_sys_call+0x2999/0x2fb0 [ 509.056902][T30800] do_syscall_64+0xd2/0x200 [ 509.056993][T30800] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 509.057017][T30800] ? clear_bhb_loop+0x40/0x90 [ 509.057034][T30800] ? clear_bhb_loop+0x40/0x90 [ 509.057168][T30800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.057185][T30800] RIP: 0033:0x7fbed9dae929 [ 509.057199][T30800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.057215][T30800] RSP: 002b:00007fbed8417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.057294][T30800] RAX: ffffffffffffffda RBX: 00007fbed9fd5fa0 RCX: 00007fbed9dae929 [ 509.057307][T30800] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 509.057366][T30800] RBP: 00007fbed8417090 R08: 0000000000000000 R09: 0000000000000000 [ 509.057373][T30800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.057441][T30800] R13: 0000000000000000 R14: 00007fbed9fd5fa0 R15: 00007fffb287fc08 [ 509.057452][T30800] [ 509.306388][T30758] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.334504][T30758] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.345949][T30758] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.357763][T30758] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.396821][T30812] xt_CT: No such helper "pptp" [ 509.492213][T30825] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26137 sclass=netlink_xfrm_socket pid=30825 comm=syz.5.8756 [ 509.694425][T30833] serio: Serial port ptm0 [ 509.771883][T30837] loop8: detected capacity change from 0 to 512 [ 509.789187][T30837] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm syz.8.8760: casefold flag without casefold feature [ 509.803783][T30837] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.8760: couldn't read orphan inode 15 (err -117) [ 509.816373][T30837] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.882504][T30842] loop6: detected capacity change from 0 to 256 [ 509.910409][T30845] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.920230][T30845] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 509.953569][T29956] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.967747][T30842] FAT-fs (loop6): Directory bread(block 64) failed [ 509.974292][T30842] FAT-fs (loop6): Directory bread(block 65) failed [ 509.982898][T30845] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.985435][T30842] FAT-fs (loop6): Directory bread(block 66) failed [ 509.992889][T30845] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 510.012043][ T29] kauditd_printk_skb: 575 callbacks suppressed [ 510.012091][ T29] audit: type=1326 audit(1751674890.141:29051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30851 comm="syz.8.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ef3ce929 code=0x7ffc0000 [ 510.017594][T30842] FAT-fs (loop6): Directory bread(block 67) failed [ 510.053070][ T29] audit: type=1326 audit(1751674890.172:29052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30851 comm="syz.8.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fd5ef3ce929 code=0x7ffc0000 [ 510.076830][T30842] FAT-fs (loop6): Directory bread(block 68) failed [ 510.076899][T30842] FAT-fs (loop6): Directory bread(block 69) failed [ 510.076919][T30842] FAT-fs (loop6): Directory bread(block 70) failed [ 510.083419][ T29] audit: type=1326 audit(1751674890.172:29053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30851 comm="syz.8.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ef3ce929 code=0x7ffc0000 [ 510.133785][T30842] FAT-fs (loop6): Directory bread(block 71) failed [ 510.142681][T30845] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.148816][ T29] audit: type=1400 audit(1751674890.255:29054): avc: denied { create } for pid=30855 comm="syz.0.8766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 510.152529][T30845] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 510.172363][ T29] audit: type=1400 audit(1751674890.266:29055): avc: denied { read } for pid=30855 comm="syz.0.8766" dev="nsfs" ino=4026532680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 510.184603][T30842] FAT-fs (loop6): Directory bread(block 72) failed [ 510.203253][ T29] audit: type=1400 audit(1751674890.266:29056): avc: denied { open } for pid=30855 comm="syz.0.8766" path="net:[4026532680]" dev="nsfs" ino=4026532680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 510.203277][ T29] audit: type=1400 audit(1751674890.266:29057): avc: denied { ioctl } for pid=30857 comm="syz.5.8767" path="socket:[128313]" dev="sockfs" ino=128313 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 510.240833][T30862] loop8: detected capacity change from 0 to 1024 [ 510.265000][T30842] FAT-fs (loop6): Directory bread(block 73) failed [ 510.269926][T30862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 510.278814][T30863] FAULT_INJECTION: forcing a failure. [ 510.278814][T30863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.291925][T30863] CPU: 0 UID: 0 PID: 30863 Comm: syz.5.8769 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 510.291995][T30863] Tainted: [W]=WARN [ 510.292001][T30863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 510.292075][T30863] Call Trace: [ 510.292081][T30863] [ 510.292088][T30863] __dump_stack+0x1d/0x30 [ 510.292109][T30863] dump_stack_lvl+0xe8/0x140 [ 510.292162][T30863] dump_stack+0x15/0x1b [ 510.292178][T30863] should_fail_ex+0x265/0x280 [ 510.292204][T30863] should_fail+0xb/0x20 [ 510.292226][T30863] should_fail_usercopy+0x1a/0x20 [ 510.292343][T30863] _copy_from_user+0x1c/0xb0 [ 510.292360][T30863] ___sys_sendmsg+0xc1/0x1d0 [ 510.292468][T30863] __x64_sys_sendmsg+0xd4/0x160 [ 510.292503][T30863] x64_sys_call+0x2999/0x2fb0 [ 510.292525][T30863] do_syscall_64+0xd2/0x200 [ 510.292600][T30863] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 510.292627][T30863] ? clear_bhb_loop+0x40/0x90 [ 510.292645][T30863] ? clear_bhb_loop+0x40/0x90 [ 510.292663][T30863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.292739][T30863] RIP: 0033:0x7efea024e929 [ 510.292753][T30863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.292782][T30863] RSP: 002b:00007efe9e8b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.292801][T30863] RAX: ffffffffffffffda RBX: 00007efea0475fa0 RCX: 00007efea024e929 [ 510.292815][T30863] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 510.292829][T30863] RBP: 00007efe9e8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 510.292842][T30863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.292853][T30863] R13: 0000000000000000 R14: 00007efea0475fa0 R15: 00007ffec5d6a5f8 [ 510.292982][T30863] [ 510.293405][T30862] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 510.324671][T30842] FAULT_INJECTION: forcing a failure. [ 510.324671][T30842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.327323][T30862] EXT4-fs (loop8): group descriptors corrupted! [ 510.327741][ T29] audit: type=1400 audit(1751674890.464:29058): avc: denied { mount } for pid=30841 comm="syz.6.8761" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 510.331673][T30842] CPU: 0 UID: 0 PID: 30842 Comm: syz.6.8761 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 510.331776][T30842] Tainted: [W]=WARN [ 510.331783][T30842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 510.331795][T30842] Call Trace: [ 510.331803][T30842] [ 510.331812][T30842] __dump_stack+0x1d/0x30 [ 510.331832][T30842] dump_stack_lvl+0xe8/0x140 [ 510.331851][T30842] dump_stack+0x15/0x1b [ 510.331868][T30842] should_fail_ex+0x265/0x280 [ 510.331958][T30842] should_fail+0xb/0x20 [ 510.332002][T30842] should_fail_usercopy+0x1a/0x20 [ 510.332031][T30842] strncpy_from_user+0x25/0x230 [ 510.332082][T30842] __x64_sys_lgetxattr+0xa5/0x140 [ 510.332178][T30842] x64_sys_call+0x1b0e/0x2fb0 [ 510.332198][T30842] do_syscall_64+0xd2/0x200 [ 510.332216][T30842] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 510.332262][T30842] ? clear_bhb_loop+0x40/0x90 [ 510.332342][T30842] ? clear_bhb_loop+0x40/0x90 [ 510.332363][T30842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.332448][T30842] RIP: 0033:0x7f59206ee929 [ 510.332464][T30842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.332505][T30842] RSP: 002b:00007f591ed57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 510.332523][T30842] RAX: ffffffffffffffda RBX: 00007f5920915fa0 RCX: 00007f59206ee929 [ 510.332536][T30842] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000000 [ 510.332548][T30842] RBP: 00007f591ed57090 R08: 0000000000000000 R09: 0000000000000000 [ 510.332560][T30842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.332572][T30842] R13: 0000000000000000 R14: 00007f5920915fa0 R15: 00007ffffc1388e8 [ 510.332591][T30842] [ 510.710655][T30845] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.713637][ T29] audit: type=1400 audit(1751674890.860:29059): avc: denied { unmount } for pid=27904 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 510.720436][T30845] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 510.783561][ T29] audit: type=1400 audit(1751674890.943:29060): avc: denied { create } for pid=30866 comm="syz.8.8771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 510.815224][T30845] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 510.823381][T30845] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 510.843635][T30845] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 510.851990][T30845] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 510.863425][T30845] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 510.871686][T30845] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 510.883644][T30845] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 510.891887][T30845] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 510.899810][T30872] serio: Serial port ptm0 [ 510.906941][T30876] loop8: detected capacity change from 0 to 256 [ 510.914480][T30876] msdos: Unknown parameter 'dot' [ 510.924834][T30874] loop5: detected capacity change from 0 to 512 [ 510.942815][T30874] journal_path: Non-blockdev passed as './bus' [ 510.949312][T30874] EXT4-fs: error: could not find journal device path [ 511.139445][T30901] netlink: 'syz.6.8784': attribute type 3 has an invalid length. [ 511.156450][T30903] 9pnet_fd: Insufficient options for proto=fd [ 511.168541][T30905] FAULT_INJECTION: forcing a failure. [ 511.168541][T30905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.181781][T30905] CPU: 0 UID: 0 PID: 30905 Comm: syz.8.8786 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 511.181816][T30905] Tainted: [W]=WARN [ 511.181822][T30905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 511.181834][T30905] Call Trace: [ 511.181841][T30905] [ 511.181849][T30905] __dump_stack+0x1d/0x30 [ 511.181870][T30905] dump_stack_lvl+0xe8/0x140 [ 511.181910][T30905] dump_stack+0x15/0x1b [ 511.181927][T30905] should_fail_ex+0x265/0x280 [ 511.181959][T30905] should_fail+0xb/0x20 [ 511.181986][T30905] should_fail_usercopy+0x1a/0x20 [ 511.182017][T30905] _copy_from_user+0x1c/0xb0 [ 511.182069][T30905] ___sys_sendmsg+0xc1/0x1d0 [ 511.182112][T30905] __x64_sys_sendmsg+0xd4/0x160 [ 511.182162][T30905] x64_sys_call+0x2999/0x2fb0 [ 511.182211][T30905] do_syscall_64+0xd2/0x200 [ 511.182227][T30905] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 511.182259][T30905] ? clear_bhb_loop+0x40/0x90 [ 511.182281][T30905] ? clear_bhb_loop+0x40/0x90 [ 511.182310][T30905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.182403][T30905] RIP: 0033:0x7fd5ef3ce929 [ 511.182419][T30905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.182435][T30905] RSP: 002b:00007fd5eda37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.182522][T30905] RAX: ffffffffffffffda RBX: 00007fd5ef5f5fa0 RCX: 00007fd5ef3ce929 [ 511.182605][T30905] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 511.182616][T30905] RBP: 00007fd5eda37090 R08: 0000000000000000 R09: 0000000000000000 [ 511.182630][T30905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.182642][T30905] R13: 0000000000000000 R14: 00007fd5ef5f5fa0 R15: 00007ffede6ed758 [ 511.182663][T30905] [ 511.388131][T30909] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 511.584077][T30928] loop6: detected capacity change from 0 to 2048 [ 511.633135][T30928] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.667009][T30932] random: crng reseeded on system resumption [ 511.678658][T30928] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30928 comm=syz.6.8795 [ 511.691334][T30928] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30928 comm=syz.6.8795 [ 511.713408][T30928] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 511.728998][T30928] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 511.741383][T30928] EXT4-fs (loop6): This should not happen!! Data will be lost [ 511.741383][T30928] [ 511.751167][T30928] EXT4-fs (loop6): Total free blocks count 0 [ 511.757257][T30928] EXT4-fs (loop6): Free/Dirty block details [ 511.763198][T30928] EXT4-fs (loop6): free_blocks=2415919104 [ 511.765021][T30937] veth1_to_bond: entered allmulticast mode [ 511.768926][T30928] EXT4-fs (loop6): dirty_blocks=32 [ 511.768942][T30928] EXT4-fs (loop6): Block reservation details [ 511.768953][T30928] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 511.782351][T30937] veth1_to_bond: entered promiscuous mode [ 511.809254][T30927] veth1_to_bond: left promiscuous mode [ 511.814918][T30927] veth1_to_bond: left allmulticast mode [ 511.845028][ T51] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 511.857851][T30943] loop5: detected capacity change from 0 to 1024 [ 511.877817][T30943] loop5: detected capacity change from 0 to 512 [ 511.879840][T30936] tipc: Started in network mode [ 511.889031][T30936] tipc: Node identity de08f2bad72, cluster identity 4711 [ 511.896143][T30936] tipc: Enabled bearer , priority 0 [ 511.903335][T30943] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 511.906140][T30939] syzkaller1: entered promiscuous mode [ 511.913501][T30945] FAULT_INJECTION: forcing a failure. [ 511.913501][T30945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.918707][T30939] syzkaller1: entered allmulticast mode [ 511.931691][T30945] CPU: 1 UID: 0 PID: 30945 Comm: syz.0.8803 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 511.931721][T30945] Tainted: [W]=WARN [ 511.931729][T30945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 511.931740][T30945] Call Trace: [ 511.931746][T30945] [ 511.931755][T30945] __dump_stack+0x1d/0x30 [ 511.931777][T30945] dump_stack_lvl+0xe8/0x140 [ 511.931797][T30945] dump_stack+0x15/0x1b [ 511.931894][T30945] should_fail_ex+0x265/0x280 [ 511.931923][T30945] should_fail+0xb/0x20 [ 511.931948][T30945] should_fail_usercopy+0x1a/0x20 [ 511.932040][T30945] _copy_from_user+0x1c/0xb0 [ 511.932060][T30945] ___sys_sendmsg+0xc1/0x1d0 [ 511.932146][T30945] __x64_sys_sendmsg+0xd4/0x160 [ 511.932195][T30945] x64_sys_call+0x2999/0x2fb0 [ 511.932271][T30945] do_syscall_64+0xd2/0x200 [ 511.932290][T30945] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 511.932315][T30945] ? clear_bhb_loop+0x40/0x90 [ 511.932341][T30945] ? clear_bhb_loop+0x40/0x90 [ 511.932362][T30945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.932382][T30945] RIP: 0033:0x7fbed9dae929 [ 511.932399][T30945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.932416][T30945] RSP: 002b:00007fbed8417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.932434][T30945] RAX: ffffffffffffffda RBX: 00007fbed9fd5fa0 RCX: 00007fbed9dae929 [ 511.932467][T30945] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 511.932480][T30945] RBP: 00007fbed8417090 R08: 0000000000000000 R09: 0000000000000000 [ 511.932493][T30945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.932505][T30945] R13: 0000000000000000 R14: 00007fbed9fd5fa0 R15: 00007fffb287fc08 [ 511.932523][T30945] [ 511.995287][T30943] EXT4-fs (loop5): orphan cleanup on readonly fs [ 512.125779][T30943] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.8801: bad orphan inode 458763 [ 512.136498][T30943] EXT4-fs (loop5): Remounting filesystem read-only [ 512.143531][T30943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 512.158120][T30935] tipc: Resetting bearer [ 512.173472][T30935] tipc: Disabling bearer [ 512.258385][T24639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.323322][T30969] FAULT_INJECTION: forcing a failure. [ 512.323322][T30969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.336486][T30969] CPU: 0 UID: 0 PID: 30969 Comm: syz.6.8810 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 512.336521][T30969] Tainted: [W]=WARN [ 512.336528][T30969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 512.336540][T30969] Call Trace: [ 512.336603][T30969] [ 512.336610][T30969] __dump_stack+0x1d/0x30 [ 512.336629][T30969] dump_stack_lvl+0xe8/0x140 [ 512.336770][T30969] dump_stack+0x15/0x1b [ 512.336787][T30969] should_fail_ex+0x265/0x280 [ 512.336817][T30969] should_fail+0xb/0x20 [ 512.336858][T30969] should_fail_usercopy+0x1a/0x20 [ 512.336886][T30969] _copy_from_user+0x1c/0xb0 [ 512.336903][T30969] ___sys_sendmsg+0xc1/0x1d0 [ 512.337052][T30969] __x64_sys_sendmsg+0xd4/0x160 [ 512.337122][T30969] x64_sys_call+0x2999/0x2fb0 [ 512.337142][T30969] do_syscall_64+0xd2/0x200 [ 512.337202][T30969] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 512.337228][T30969] ? clear_bhb_loop+0x40/0x90 [ 512.337245][T30969] ? clear_bhb_loop+0x40/0x90 [ 512.337322][T30969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.337342][T30969] RIP: 0033:0x7f59206ee929 [ 512.337356][T30969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.337371][T30969] RSP: 002b:00007f591ed57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.337389][T30969] RAX: ffffffffffffffda RBX: 00007f5920915fa0 RCX: 00007f59206ee929 [ 512.337472][T30969] RDX: 0000000004008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 512.337483][T30969] RBP: 00007f591ed57090 R08: 0000000000000000 R09: 0000000000000000 [ 512.337546][T30969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.337557][T30969] R13: 0000000000000000 R14: 00007f5920915fa0 R15: 00007ffffc1388e8 [ 512.337573][T30969] [ 512.599838][T30973] serio: Serial port ptm0 [ 512.613975][T30976] FAULT_INJECTION: forcing a failure. [ 512.613975][T30976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.627211][T30976] CPU: 1 UID: 0 PID: 30976 Comm: syz.5.8813 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 512.627242][T30976] Tainted: [W]=WARN [ 512.627248][T30976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 512.627260][T30976] Call Trace: [ 512.627267][T30976] [ 512.627275][T30976] __dump_stack+0x1d/0x30 [ 512.627361][T30976] dump_stack_lvl+0xe8/0x140 [ 512.627461][T30976] dump_stack+0x15/0x1b [ 512.627522][T30976] should_fail_ex+0x265/0x280 [ 512.627547][T30976] should_fail+0xb/0x20 [ 512.627571][T30976] should_fail_usercopy+0x1a/0x20 [ 512.627679][T30976] _copy_from_iter+0xcf/0xe40 [ 512.627708][T30976] ? alloc_pages_mpol+0x201/0x250 [ 512.627740][T30976] copy_page_from_iter+0x178/0x2a0 [ 512.627783][T30976] tun_get_user+0x5f0/0x2500 [ 512.627811][T30976] ? ref_tracker_alloc+0x1f2/0x2f0 [ 512.627882][T30976] tun_chr_write_iter+0x15e/0x210 [ 512.627936][T30976] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 512.627957][T30976] vfs_write+0x4a0/0x8e0 [ 512.628000][T30976] ksys_write+0xda/0x1a0 [ 512.628026][T30976] __x64_sys_write+0x40/0x50 [ 512.628083][T30976] x64_sys_call+0x2cdd/0x2fb0 [ 512.628145][T30976] do_syscall_64+0xd2/0x200 [ 512.628172][T30976] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 512.628200][T30976] ? clear_bhb_loop+0x40/0x90 [ 512.628221][T30976] ? clear_bhb_loop+0x40/0x90 [ 512.628243][T30976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.628263][T30976] RIP: 0033:0x7efea024d3df [ 512.628277][T30976] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 512.628361][T30976] RSP: 002b:00007efe9e8b7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 512.628448][T30976] RAX: ffffffffffffffda RBX: 00007efea0475fa0 RCX: 00007efea024d3df [ 512.628461][T30976] RDX: 000000000000003a RSI: 0000200000000100 RDI: 00000000000000c8 [ 512.628474][T30976] RBP: 00007efe9e8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 512.628487][T30976] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001 [ 512.628499][T30976] R13: 0000000000000000 R14: 00007efea0475fa0 R15: 00007ffec5d6a5f8 [ 512.628515][T30976] [ 512.873105][T30981] tipc: Enabled bearer , priority 0 [ 512.896267][T30981] tipc: Disabling bearer [ 512.963426][T30989] loop6: detected capacity change from 0 to 128 [ 513.002981][T30989] 9pnet_fd: Insufficient options for proto=fd [ 513.009765][T30987] pim6reg: entered allmulticast mode [ 513.087038][T31005] loop8: detected capacity change from 0 to 512 [ 513.106896][T31005] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 513.118927][T31005] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 513.133654][T31005] EXT4-fs (loop8): 1 truncate cleaned up [ 513.139849][T31005] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.167724][T29956] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.185233][T31022] serio: Serial port ptm0 [ 513.238671][T31032] loop8: detected capacity change from 0 to 2048 [ 513.260087][T31032] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.274292][T31032] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.8832: corrupted in-inode xattr: invalid ea_ino [ 513.527299][ T3477] kernel write not supported for file /121/loginuid (pid: 3477 comm: kworker/0:6) [ 513.587416][T31061] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8844'. [ 513.667328][T31071] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 513.768267][T31079] loop5: detected capacity change from 0 to 256 [ 513.794906][T31079] FAT-fs (loop5): Directory bread(block 64) failed [ 513.804101][T31079] FAT-fs (loop5): Directory bread(block 65) failed [ 513.810872][T31079] FAT-fs (loop5): Directory bread(block 66) failed [ 513.819401][T31079] FAT-fs (loop5): Directory bread(block 67) failed [ 513.826077][T31079] FAT-fs (loop5): Directory bread(block 68) failed [ 513.832773][T31079] FAT-fs (loop5): Directory bread(block 69) failed [ 513.840649][T31081] FAULT_INJECTION: forcing a failure. [ 513.840649][T31081] name failslab, interval 1, probability 0, space 0, times 0 [ 513.841191][T31079] FAT-fs (loop5): Directory bread(block 70) failed [ 513.853339][T31081] CPU: 1 UID: 0 PID: 31081 Comm: syz.6.8851 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 513.853416][T31081] Tainted: [W]=WARN [ 513.853423][T31081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 513.853435][T31081] Call Trace: [ 513.853441][T31081] [ 513.853450][T31081] __dump_stack+0x1d/0x30 [ 513.853472][T31081] dump_stack_lvl+0xe8/0x140 [ 513.853564][T31081] dump_stack+0x15/0x1b [ 513.853619][T31081] should_fail_ex+0x265/0x280 [ 513.853647][T31081] should_failslab+0x8c/0xb0 [ 513.853670][T31081] kmem_cache_alloc_node_noprof+0x57/0x320 [ 513.853698][T31081] ? __alloc_skb+0x101/0x320 [ 513.853862][T31081] __alloc_skb+0x101/0x320 [ 513.853886][T31081] ? audit_log_start+0x365/0x6c0 [ 513.853971][T31081] audit_log_start+0x380/0x6c0 [ 513.854003][T31081] audit_seccomp+0x48/0x100 [ 513.854073][T31081] ? __seccomp_filter+0x68c/0x10d0 [ 513.854140][T31081] __seccomp_filter+0x69d/0x10d0 [ 513.854164][T31081] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 513.854205][T31081] ? vfs_write+0x75e/0x8e0 [ 513.854238][T31081] __secure_computing+0x82/0x150 [ 513.854260][T31081] syscall_trace_enter+0xcf/0x1e0 [ 513.854324][T31081] do_syscall_64+0xac/0x200 [ 513.854433][T31081] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 513.854457][T31081] ? clear_bhb_loop+0x40/0x90 [ 513.854477][T31081] ? clear_bhb_loop+0x40/0x90 [ 513.854498][T31081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.854537][T31081] RIP: 0033:0x7f59206ee929 [ 513.854552][T31081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.854570][T31081] RSP: 002b:00007f591ed57038 EFLAGS: 00000246 ORIG_RAX: 000000000000004a [ 513.854588][T31081] RAX: ffffffffffffffda RBX: 00007f5920915fa0 RCX: 00007f59206ee929 [ 513.854601][T31081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 513.854678][T31081] RBP: 00007f591ed57090 R08: 0000000000000000 R09: 0000000000000000 [ 513.854690][T31081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.854703][T31081] R13: 0000000000000000 R14: 00007f5920915fa0 R15: 00007ffffc1388e8 [ 513.854721][T31081] [ 514.079161][T31079] FAT-fs (loop5): Directory bread(block 71) failed [ 514.085997][T31079] FAT-fs (loop5): Directory bread(block 72) failed [ 514.092991][T31079] FAT-fs (loop5): Directory bread(block 73) failed [ 514.113582][T31091] loop6: detected capacity change from 0 to 1024 [ 514.123515][T31091] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 514.134494][T31091] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 514.151505][T31094] loop7: detected capacity change from 0 to 4096 [ 514.158304][T31091] JBD2: no valid journal superblock found [ 514.164126][T31091] EXT4-fs (loop6): Could not load journal inode [ 514.172526][T31094] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.228586][T31094] syzkaller1: entered promiscuous mode [ 514.234180][T31094] syzkaller1: entered allmulticast mode [ 514.266515][T31104] loop6: detected capacity change from 0 to 128 [ 514.301008][T31106] SELinux: syz.6.8861 (31106) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 514.319928][T31106] SELinux: Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped). [ 514.357522][T31110] ref_ctr_offset mismatch. inode: 0x503 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 514.421791][T31115] FAULT_INJECTION: forcing a failure. [ 514.421791][T31115] name failslab, interval 1, probability 0, space 0, times 0 [ 514.434477][T31115] CPU: 0 UID: 0 PID: 31115 Comm: syz.0.8864 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 514.434509][T31115] Tainted: [W]=WARN [ 514.434516][T31115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 514.434527][T31115] Call Trace: [ 514.434534][T31115] [ 514.434541][T31115] __dump_stack+0x1d/0x30 [ 514.434558][T31115] dump_stack_lvl+0xe8/0x140 [ 514.434574][T31115] dump_stack+0x15/0x1b [ 514.434586][T31115] should_fail_ex+0x265/0x280 [ 514.434610][T31115] should_failslab+0x8c/0xb0 [ 514.434632][T31115] kmem_cache_alloc_noprof+0x50/0x310 [ 514.434657][T31115] ? vm_area_alloc+0x2c/0xb0 [ 514.434682][T31115] vm_area_alloc+0x2c/0xb0 [ 514.434705][T31115] mmap_region+0xa43/0x1580 [ 514.434748][T31115] do_mmap+0x9b3/0xbe0 [ 514.434774][T31115] vm_mmap_pgoff+0x17a/0x2e0 [ 514.434797][T31115] ksys_mmap_pgoff+0xc2/0x310 [ 514.434825][T31115] ? __x64_sys_mmap+0x49/0x70 [ 514.434845][T31115] x64_sys_call+0x1602/0x2fb0 [ 514.434862][T31115] do_syscall_64+0xd2/0x200 [ 514.434877][T31115] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 514.434899][T31115] ? clear_bhb_loop+0x40/0x90 [ 514.434985][T31115] ? clear_bhb_loop+0x40/0x90 [ 514.435003][T31115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.435024][T31115] RIP: 0033:0x7fbed9dae963 [ 514.435039][T31115] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 514.435055][T31115] RSP: 002b:00007fbed8416e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 514.435074][T31115] RAX: ffffffffffffffda RBX: 0000000000000470 RCX: 00007fbed9dae963 [ 514.435086][T31115] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 514.435098][T31115] RBP: 0000200000000942 R08: 00000000ffffffff R09: 0000000000000000 [ 514.435108][T31115] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 514.435118][T31115] R13: 00007fbed8416ef0 R14: 00007fbed8416eb0 R15: 0000200000000100 [ 514.435133][T31115] [ 514.737772][T31125] FAULT_INJECTION: forcing a failure. [ 514.737772][T31125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.750930][T31125] CPU: 0 UID: 0 PID: 31125 Comm: syz.6.8868 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 514.750963][T31125] Tainted: [W]=WARN [ 514.751035][T31125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 514.751046][T31125] Call Trace: [ 514.751051][T31125] [ 514.751058][T31125] __dump_stack+0x1d/0x30 [ 514.751076][T31125] dump_stack_lvl+0xe8/0x140 [ 514.751092][T31125] dump_stack+0x15/0x1b [ 514.751108][T31125] should_fail_ex+0x265/0x280 [ 514.751139][T31125] should_fail+0xb/0x20 [ 514.751233][T31125] should_fail_usercopy+0x1a/0x20 [ 514.751293][T31125] _copy_to_user+0x20/0xa0 [ 514.751315][T31125] simple_read_from_buffer+0xb5/0x130 [ 514.751380][T31125] proc_fail_nth_read+0x100/0x140 [ 514.751407][T31125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.751446][T31125] vfs_read+0x1a0/0x6f0 [ 514.751470][T31125] ? __rcu_read_unlock+0x4f/0x70 [ 514.751488][T31125] ? __fget_files+0x184/0x1c0 [ 514.751570][T31125] ksys_read+0xda/0x1a0 [ 514.751617][T31125] __x64_sys_read+0x40/0x50 [ 514.751654][T31125] x64_sys_call+0x2d77/0x2fb0 [ 514.751676][T31125] do_syscall_64+0xd2/0x200 [ 514.751693][T31125] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 514.751811][T31125] ? clear_bhb_loop+0x40/0x90 [ 514.751829][T31125] ? clear_bhb_loop+0x40/0x90 [ 514.751848][T31125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.751870][T31125] RIP: 0033:0x7f59206ed33c [ 514.751891][T31125] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 514.751970][T31125] RSP: 002b:00007f591ed57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 514.752042][T31125] RAX: ffffffffffffffda RBX: 00007f5920915fa0 RCX: 00007f59206ed33c [ 514.752055][T31125] RDX: 000000000000000f RSI: 00007f591ed570a0 RDI: 0000000000000006 [ 514.752075][T31125] RBP: 00007f591ed57090 R08: 0000000000000000 R09: 0000000000000000 [ 514.752085][T31125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 514.752096][T31125] R13: 0000000000000000 R14: 00007f5920915fa0 R15: 00007ffffc1388e8 [ 514.752116][T31125] [ 514.961595][ T29] kauditd_printk_skb: 487 callbacks suppressed [ 514.961610][ T29] audit: type=1400 audit(1751674895.041:29544): avc: denied { execmem } for pid=31120 comm="syz.5.8867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 514.987397][ T29] audit: type=1326 audit(1751674895.083:29545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.6.8866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f59206ee929 code=0x7ffc0000 [ 515.010975][ T29] audit: type=1326 audit(1751674895.083:29546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.6.8866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59206ee929 code=0x7ffc0000 [ 515.035003][ T29] audit: type=1326 audit(1751674895.083:29547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.6.8866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59206ee929 code=0x7ffc0000 [ 515.058590][ T29] audit: type=1326 audit(1751674895.115:29548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.6.8868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59206ee929 code=0x7ffc0000 [ 515.082231][ T29] audit: type=1326 audit(1751674895.115:29549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.6.8868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59206ee929 code=0x7ffc0000 [ 515.105818][ T29] audit: type=1326 audit(1751674895.115:29550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.6.8868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59206ee929 code=0x7ffc0000 [ 515.129398][ T29] audit: type=1326 audit(1751674895.115:29551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.6.8868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59206ee929 code=0x7ffc0000 [ 515.153126][ T29] audit: type=1326 audit(1751674895.115:29552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.6.8868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59206ee929 code=0x7ffc0000 [ 515.176892][ T29] audit: type=1326 audit(1751674895.115:29553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.6.8868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59206ee929 code=0x7ffc0000 [ 515.177082][T31134] loop5: detected capacity change from 0 to 512 [ 515.208470][T31134] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 515.229837][T31134] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.242702][T31134] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.256804][T31137] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.316244][T24639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.331231][T31137] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.364780][T31144] bond0: entered promiscuous mode [ 515.369966][T31144] bond0: entered allmulticast mode [ 515.375563][T31144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.385050][T31144] bond0 (unregistering): Released all slaves [ 515.406938][T31137] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.417246][T31153] loop5: detected capacity change from 0 to 128 [ 515.423856][T31153] vfat: Unknown parameter 'ÿÿÿÿ' [ 515.437008][T31153] loop5: detected capacity change from 0 to 2048 [ 515.506939][T31157] netlink: 'syz.0.8877': attribute type 13 has an invalid length. [ 515.539331][T31157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 515.559091][T31137] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.625715][T31137] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.637873][T31137] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.664225][T31137] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.678502][T31137] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.707825][T31170] FAULT_INJECTION: forcing a failure. [ 515.707825][T31170] name failslab, interval 1, probability 0, space 0, times 0 [ 515.720749][T31170] CPU: 0 UID: 0 PID: 31170 Comm: syz.5.8881 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 515.720805][T31170] Tainted: [W]=WARN [ 515.720812][T31170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 515.720850][T31170] Call Trace: [ 515.720857][T31170] [ 515.720865][T31170] __dump_stack+0x1d/0x30 [ 515.720887][T31170] dump_stack_lvl+0xe8/0x140 [ 515.720907][T31170] dump_stack+0x15/0x1b [ 515.720924][T31170] should_fail_ex+0x265/0x280 [ 515.721002][T31170] should_failslab+0x8c/0xb0 [ 515.721022][T31170] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 515.721207][T31170] ? v9fs_session_init+0x78/0xde0 [ 515.721264][T31170] kstrdup+0x3e/0xd0 [ 515.721285][T31170] v9fs_session_init+0x78/0xde0 [ 515.721305][T31170] ? obj_cgroup_charge_account+0x122/0x1a0 [ 515.721346][T31170] ? __rcu_read_unlock+0x4f/0x70 [ 515.721368][T31170] ? should_fail_ex+0xdb/0x280 [ 515.721395][T31170] ? v9fs_mount+0x51/0x590 [ 515.721501][T31170] ? should_failslab+0x8c/0xb0 [ 515.721519][T31170] ? __kmalloc_cache_noprof+0x189/0x320 [ 515.721553][T31170] v9fs_mount+0x67/0x590 [ 515.721580][T31170] ? __pfx_v9fs_mount+0x10/0x10 [ 515.721675][T31170] legacy_get_tree+0x78/0xd0 [ 515.721705][T31170] vfs_get_tree+0x54/0x1d0 [ 515.721735][T31170] do_new_mount+0x207/0x680 [ 515.721763][T31170] path_mount+0x4a4/0xb20 [ 515.721905][T31170] ? user_path_at+0x109/0x130 [ 515.721932][T31170] __se_sys_mount+0x28f/0x2e0 [ 515.721964][T31170] ? fput+0x8f/0xc0 [ 515.721990][T31170] __x64_sys_mount+0x67/0x80 [ 515.722009][T31170] x64_sys_call+0xd36/0x2fb0 [ 515.722031][T31170] do_syscall_64+0xd2/0x200 [ 515.722071][T31170] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 515.722158][T31170] ? clear_bhb_loop+0x40/0x90 [ 515.722205][T31170] ? clear_bhb_loop+0x40/0x90 [ 515.722226][T31170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.722247][T31170] RIP: 0033:0x7efea024e929 [ 515.722263][T31170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.722281][T31170] RSP: 002b:00007efe9e8b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 515.722311][T31170] RAX: ffffffffffffffda RBX: 00007efea0475fa0 RCX: 00007efea024e929 [ 515.722325][T31170] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 515.722338][T31170] RBP: 00007efe9e8b7090 R08: 0000200000000240 R09: 0000000000000000 [ 515.722352][T31170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 515.722364][T31170] R13: 0000000000000000 R14: 00007efea0475fa0 R15: 00007ffec5d6a5f8 [ 515.722384][T31170] [ 516.067989][T31197] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8891'. [ 516.078021][T31199] FAULT_INJECTION: forcing a failure. [ 516.078021][T31199] name failslab, interval 1, probability 0, space 0, times 0 [ 516.090893][T31199] CPU: 0 UID: 0 PID: 31199 Comm: syz.5.8892 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 516.090922][T31199] Tainted: [W]=WARN [ 516.090993][T31199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 516.091005][T31199] Call Trace: [ 516.091012][T31199] [ 516.091020][T31199] __dump_stack+0x1d/0x30 [ 516.091036][T31199] dump_stack_lvl+0xe8/0x140 [ 516.091047][T31199] dump_stack+0x15/0x1b [ 516.091060][T31199] should_fail_ex+0x265/0x280 [ 516.091149][T31199] ? __xdp_reg_mem_model+0x173/0x3e0 [ 516.091164][T31199] should_failslab+0x8c/0xb0 [ 516.091177][T31199] __kmalloc_cache_noprof+0x4c/0x320 [ 516.091224][T31199] __xdp_reg_mem_model+0x173/0x3e0 [ 516.091329][T31199] ? page_pool_create_percpu+0x515/0x630 [ 516.091344][T31199] xdp_reg_mem_model+0x22/0x40 [ 516.091388][T31199] bpf_test_run_xdp_live+0x172/0xfe0 [ 516.091475][T31199] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 516.091491][T31199] ? __pfx_autoremove_wake_function+0x10/0x10 [ 516.091510][T31199] ? 0xffffffffa0205480 [ 516.091578][T31199] ? synchronize_rcu+0x45/0x320 [ 516.091594][T31199] ? 0xffffffffa0205480 [ 516.091601][T31199] ? 0xffffffffa0205480 [ 516.091610][T31199] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 516.091665][T31199] ? 0xffffffffa02018d8 [ 516.091678][T31199] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 516.091693][T31199] bpf_prog_test_run_xdp+0x4f5/0x910 [ 516.091710][T31199] ? __rcu_read_unlock+0x4f/0x70 [ 516.091786][T31199] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 516.091807][T31199] bpf_prog_test_run+0x22a/0x390 [ 516.091819][T31199] __sys_bpf+0x3dc/0x790 [ 516.091906][T31199] __x64_sys_bpf+0x41/0x50 [ 516.091921][T31199] x64_sys_call+0x2478/0x2fb0 [ 516.091932][T31199] do_syscall_64+0xd2/0x200 [ 516.091942][T31199] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 516.091957][T31199] ? clear_bhb_loop+0x40/0x90 [ 516.092073][T31199] ? clear_bhb_loop+0x40/0x90 [ 516.092085][T31199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.092097][T31199] RIP: 0033:0x7efea024e929 [ 516.092105][T31199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.092153][T31199] RSP: 002b:00007efe9e8b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 516.092164][T31199] RAX: ffffffffffffffda RBX: 00007efea0475fa0 RCX: 00007efea024e929 [ 516.092171][T31199] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 516.092178][T31199] RBP: 00007efe9e8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 516.092185][T31199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 516.092192][T31199] R13: 0000000000000000 R14: 00007efea0475fa0 R15: 00007ffec5d6a5f8 [ 516.092278][T31199] [ 516.111974][T31199] xt_CT: No such helper "pptp" [ 516.386930][T31205] netlink: 'syz.6.8893': attribute type 16 has an invalid length. [ 516.394838][T31205] netlink: 'syz.6.8893': attribute type 17 has an invalid length. [ 516.395958][T31204] loop5: detected capacity change from 0 to 2048 [ 516.445935][T31204] loop5: p1 < > p4 [ 516.450918][T31204] loop5: p4 size 8388608 extends beyond EOD, truncated [ 516.459590][T31211] FAULT_INJECTION: forcing a failure. [ 516.459590][T31211] name failslab, interval 1, probability 0, space 0, times 0 [ 516.472467][T31211] CPU: 0 UID: 0 PID: 31211 Comm: syz.6.8895 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 516.472499][T31211] Tainted: [W]=WARN [ 516.472575][T31211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 516.472586][T31211] Call Trace: [ 516.472667][T31211] [ 516.472676][T31211] __dump_stack+0x1d/0x30 [ 516.472754][T31211] dump_stack_lvl+0xe8/0x140 [ 516.472772][T31211] dump_stack+0x15/0x1b [ 516.472845][T31211] should_fail_ex+0x265/0x280 [ 516.472917][T31211] should_failslab+0x8c/0xb0 [ 516.472937][T31211] kmem_cache_alloc_node_noprof+0x57/0x320 [ 516.472963][T31211] ? __alloc_skb+0x101/0x320 [ 516.472993][T31211] __alloc_skb+0x101/0x320 [ 516.473060][T31211] ? audit_log_start+0x365/0x6c0 [ 516.473086][T31211] audit_log_start+0x380/0x6c0 [ 516.473116][T31211] audit_seccomp+0x48/0x100 [ 516.473186][T31211] ? __seccomp_filter+0x68c/0x10d0 [ 516.473205][T31211] __seccomp_filter+0x69d/0x10d0 [ 516.473228][T31211] __secure_computing+0x82/0x150 [ 516.473374][T31211] syscall_trace_enter+0xcf/0x1e0 [ 516.473393][T31211] do_syscall_64+0xac/0x200 [ 516.473408][T31211] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 516.473429][T31211] ? clear_bhb_loop+0x40/0x90 [ 516.473445][T31211] ? clear_bhb_loop+0x40/0x90 [ 516.473461][T31211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.473477][T31211] RIP: 0033:0x7f59206ed33c [ 516.473490][T31211] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 516.473504][T31211] RSP: 002b:00007f591ed57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 516.473540][T31211] RAX: ffffffffffffffda RBX: 00007f5920915fa0 RCX: 00007f59206ed33c [ 516.473627][T31211] RDX: 000000000000000f RSI: 00007f591ed570a0 RDI: 0000000000000006 [ 516.473638][T31211] RBP: 00007f591ed57090 R08: 0000000000000000 R09: 0000000000000000 [ 516.473647][T31211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.473657][T31211] R13: 0000000000000000 R14: 00007f5920915fa0 R15: 00007ffffc1388e8 [ 516.473672][T31211] [ 516.722888][T31219] FAULT_INJECTION: forcing a failure. [ 516.722888][T31219] name failslab, interval 1, probability 0, space 0, times 0 [ 516.735589][T31219] CPU: 0 UID: 0 PID: 31219 Comm: syz.6.8899 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 516.735677][T31219] Tainted: [W]=WARN [ 516.735684][T31219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 516.735755][T31219] Call Trace: [ 516.735761][T31219] [ 516.735769][T31219] __dump_stack+0x1d/0x30 [ 516.735790][T31219] dump_stack_lvl+0xe8/0x140 [ 516.735809][T31219] dump_stack+0x15/0x1b [ 516.735875][T31219] should_fail_ex+0x265/0x280 [ 516.735902][T31219] should_failslab+0x8c/0xb0 [ 516.735927][T31219] kmem_cache_alloc_node_noprof+0x57/0x320 [ 516.735979][T31219] ? __alloc_skb+0x101/0x320 [ 516.736007][T31219] __alloc_skb+0x101/0x320 [ 516.736033][T31219] ? audit_log_start+0x365/0x6c0 [ 516.736061][T31219] audit_log_start+0x380/0x6c0 [ 516.736140][T31219] audit_seccomp+0x48/0x100 [ 516.736165][T31219] ? __seccomp_filter+0x68c/0x10d0 [ 516.736183][T31219] __seccomp_filter+0x69d/0x10d0 [ 516.736222][T31219] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 516.736249][T31219] ? vfs_write+0x75e/0x8e0 [ 516.736277][T31219] ? __rcu_read_unlock+0x4f/0x70 [ 516.736298][T31219] ? up_write+0x18/0x60 [ 516.736375][T31219] ? ipcget+0x4a9/0x4f0 [ 516.736397][T31219] __secure_computing+0x82/0x150 [ 516.736420][T31219] syscall_trace_enter+0xcf/0x1e0 [ 516.736445][T31219] do_syscall_64+0xac/0x200 [ 516.736464][T31219] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 516.736503][T31219] ? clear_bhb_loop+0x40/0x90 [ 516.736523][T31219] ? clear_bhb_loop+0x40/0x90 [ 516.736543][T31219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.736645][T31219] RIP: 0033:0x7f59206ed33c [ 516.736662][T31219] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 516.736677][T31219] RSP: 002b:00007f591ed57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 516.736695][T31219] RAX: ffffffffffffffda RBX: 00007f5920915fa0 RCX: 00007f59206ed33c [ 516.736751][T31219] RDX: 000000000000000f RSI: 00007f591ed570a0 RDI: 0000000000000006 [ 516.736763][T31219] RBP: 00007f591ed57090 R08: 0000000000000000 R09: 0000000000000000 [ 516.736779][T31219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.736790][T31219] R13: 0000000000000000 R14: 00007f5920915fa0 R15: 00007ffffc1388e8 [ 516.736809][T31219] [ 516.982835][T31221] can0: slcan on ptm0. [ 517.041737][T31220] can0 (unregistered): slcan off ptm0. [ 517.113565][T31234] loop6: detected capacity change from 0 to 512 [ 517.122393][T31234] EXT4-fs (loop6): orphan cleanup on readonly fs [ 517.129533][T31234] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.8904: Failed to acquire dquot type 1 [ 517.146333][T31234] EXT4-fs (loop6): 1 truncate cleaned up [ 517.152634][T31234] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 517.259927][T27208] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.285787][T31254] SELinux: policydb magic number 0x5c does not match expected magic number 0xf97cff8c [ 517.296118][T31254] SELinux: failed to load policy [ 517.347373][T31264] FAULT_INJECTION: forcing a failure. [ 517.347373][T31264] name failslab, interval 1, probability 0, space 0, times 0 [ 517.360203][T31264] CPU: 1 UID: 0 PID: 31264 Comm: syz.0.8916 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 517.360234][T31264] Tainted: [W]=WARN [ 517.360241][T31264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 517.360252][T31264] Call Trace: [ 517.360259][T31264] [ 517.360268][T31264] __dump_stack+0x1d/0x30 [ 517.360363][T31264] dump_stack_lvl+0xe8/0x140 [ 517.360375][T31264] dump_stack+0x15/0x1b [ 517.360397][T31264] should_fail_ex+0x265/0x280 [ 517.360414][T31264] should_failslab+0x8c/0xb0 [ 517.360454][T31264] __kmalloc_noprof+0xa5/0x3e0 [ 517.360469][T31264] ? user_preparse+0x6f/0xf0 [ 517.360486][T31264] ? selinux_key_permission+0x161/0x190 [ 517.360498][T31264] user_preparse+0x6f/0xf0 [ 517.360571][T31264] __key_create_or_update+0x28b/0x750 [ 517.360588][T31264] ? key_validate+0xad/0xd0 [ 517.360606][T31264] key_create_or_update+0x42/0x60 [ 517.360631][T31264] __se_sys_add_key+0x296/0x350 [ 517.360682][T31264] __x64_sys_add_key+0x67/0x80 [ 517.360945][T31264] x64_sys_call+0x1d0d/0x2fb0 [ 517.360966][T31264] do_syscall_64+0xd2/0x200 [ 517.361042][T31264] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 517.361063][T31264] ? clear_bhb_loop+0x40/0x90 [ 517.361086][T31264] ? clear_bhb_loop+0x40/0x90 [ 517.361098][T31264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.361141][T31264] RIP: 0033:0x7fbed9dae929 [ 517.361164][T31264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.361181][T31264] RSP: 002b:00007fbed8417038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 517.361199][T31264] RAX: ffffffffffffffda RBX: 00007fbed9fd5fa0 RCX: 00007fbed9dae929 [ 517.361255][T31264] RDX: 0000200000000340 RSI: 00002000000002c0 RDI: 00002000000001c0 [ 517.361266][T31264] RBP: 00007fbed8417090 R08: ffffffffffffffff R09: 0000000000000000 [ 517.361349][T31264] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 517.361413][T31264] R13: 0000000000000000 R14: 00007fbed9fd5fa0 R15: 00007fffb287fc08 [ 517.361431][T31264] [ 517.600321][T31013] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 517.658955][T31278] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31278 comm=syz.0.8922 [ 517.690750][T31281] vlan2: entered allmulticast mode [ 517.754934][T31291] FAULT_INJECTION: forcing a failure. [ 517.754934][T31291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.768146][T31291] CPU: 1 UID: 0 PID: 31291 Comm: syz.0.8924 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 517.768177][T31291] Tainted: [W]=WARN [ 517.768181][T31291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 517.768188][T31291] Call Trace: [ 517.768193][T31291] [ 517.768198][T31291] __dump_stack+0x1d/0x30 [ 517.768212][T31291] dump_stack_lvl+0xe8/0x140 [ 517.768227][T31291] dump_stack+0x15/0x1b [ 517.768236][T31291] should_fail_ex+0x265/0x280 [ 517.768256][T31291] should_fail+0xb/0x20 [ 517.768270][T31291] should_fail_usercopy+0x1a/0x20 [ 517.768287][T31291] _copy_from_iter+0xcf/0xe40 [ 517.768415][T31291] ? __build_skb_around+0x1a0/0x200 [ 517.768432][T31291] ? __alloc_skb+0x223/0x320 [ 517.768524][T31291] netlink_sendmsg+0x471/0x6b0 [ 517.768537][T31291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.768548][T31291] __sock_sendmsg+0x145/0x180 [ 517.768562][T31291] ____sys_sendmsg+0x31e/0x4e0 [ 517.768607][T31291] ___sys_sendmsg+0x17b/0x1d0 [ 517.768631][T31291] __x64_sys_sendmsg+0xd4/0x160 [ 517.768709][T31291] x64_sys_call+0x2999/0x2fb0 [ 517.768720][T31291] do_syscall_64+0xd2/0x200 [ 517.768731][T31291] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 517.768746][T31291] ? clear_bhb_loop+0x40/0x90 [ 517.768780][T31291] ? clear_bhb_loop+0x40/0x90 [ 517.768792][T31291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.768823][T31291] RIP: 0033:0x7fbed9dae929 [ 517.768833][T31291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.768844][T31291] RSP: 002b:00007fbed8417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.768859][T31291] RAX: ffffffffffffffda RBX: 00007fbed9fd5fa0 RCX: 00007fbed9dae929 [ 517.768872][T31291] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 517.768884][T31291] RBP: 00007fbed8417090 R08: 0000000000000000 R09: 0000000000000000 [ 517.768911][T31291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.768918][T31291] R13: 0000000000000000 R14: 00007fbed9fd5fa0 R15: 00007fffb287fc08 [ 517.768929][T31291] [ 518.000266][T27904] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.032097][T31300] veth0: entered promiscuous mode [ 518.039091][T31300] veth0: left promiscuous mode [ 518.078121][T31302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8928'. [ 518.087370][T31302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8928'. [ 518.138075][T31308] 9pnet: Could not find request transport: 0xffffffffffffffff [ 518.140585][T31311] loop6: detected capacity change from 0 to 2048 [ 518.163438][T31311] EXT4-fs: test_dummy_encryption option not supported [ 518.183196][T31316] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 518.193175][T31316] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 518.265747][T31316] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 518.275488][T31316] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 518.278089][T31326] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8937'. [ 518.340634][T31327] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8936'. [ 518.367950][T31330] netlink: 'syz.8.8935': attribute type 1 has an invalid length. [ 518.393847][T31331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8936'. [ 518.485896][T31333] loop6: detected capacity change from 0 to 128 [ 518.494495][T31333] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 518.507251][T31333] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 518.591538][T31330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 518.623020][T31316] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 518.632778][T31316] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 518.706052][T31335] loop6: detected capacity change from 0 to 512 [ 518.714435][T31316] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 518.724185][T31316] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 518.738858][T31335] EXT4-fs (loop6): orphan cleanup on readonly fs [ 518.747694][T31335] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.8940: Failed to acquire dquot type 1 [ 518.762841][T31335] EXT4-fs (loop6): 1 truncate cleaned up [ 518.803634][T31316] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 518.811810][T31316] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 518.826455][T31316] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 518.834623][T31316] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 518.850352][T31316] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 518.858521][T31316] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 518.874367][T31316] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 518.882532][T31316] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 519.008276][T31343] tipc: Enabled bearer , priority 0 [ 519.016383][T31342] tipc: Resetting bearer [ 519.043731][T31342] tipc: Disabling bearer [ 519.254075][T31335] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 519.407746][T27904] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.561066][T31362] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 519.588105][T31362] loop6: detected capacity change from 0 to 512 [ 519.619331][T31367] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8950'. [ 519.676717][T31374] loop7: detected capacity change from 0 to 512 [ 519.703431][ T29] kauditd_printk_skb: 404 callbacks suppressed [ 519.703445][ T29] audit: type=1400 audit(1751674900.357:29950): avc: denied { mounton } for pid=31372 comm="syz.7.8952" path="/221/bus" dev="tmpfs" ino=1234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 519.734846][T31374] ext4: Unknown parameter '' [ 519.749110][ T29] audit: type=1400 audit(1751674900.400:29951): avc: denied { read write } for pid=31368 comm="syz.8.8951" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 519.773635][ T29] audit: type=1400 audit(1751674900.400:29952): avc: denied { open } for pid=31368 comm="syz.8.8951" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 519.797800][ T29] audit: type=1400 audit(1751674900.410:29953): avc: denied { map_create } for pid=31372 comm="syz.7.8952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 519.817224][ T29] audit: type=1400 audit(1751674900.410:29954): avc: denied { map_read map_write } for pid=31372 comm="syz.7.8952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 519.837760][ T29] audit: type=1400 audit(1751674900.431:29955): avc: denied { create } for pid=31368 comm="syz.8.8951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 519.857549][ T29] audit: type=1400 audit(1751674900.431:29956): avc: denied { write } for pid=31368 comm="syz.8.8951" lport=115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 519.886321][ T29] audit: type=1400 audit(1751674900.548:29957): avc: denied { prog_load } for pid=31379 comm="syz.0.8953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 519.905643][ T29] audit: type=1400 audit(1751674900.548:29958): avc: denied { bpf } for pid=31379 comm="syz.0.8953" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 519.926398][ T29] audit: type=1400 audit(1751674900.548:29959): avc: denied { perfmon } for pid=31379 comm="syz.0.8953" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 520.033903][T31397] loop7: detected capacity change from 0 to 512 [ 520.051609][T31396] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.064139][T31397] EXT4-fs (loop7): orphan cleanup on readonly fs [ 520.070915][T31397] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8955: Failed to acquire dquot type 1 [ 520.084789][T31397] EXT4-fs (loop7): 1 truncate cleaned up [ 520.090880][T31397] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 520.108872][T31396] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.156487][T31396] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.213299][T31396] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.239047][T31405] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8962'. [ 520.273808][T31396] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.296118][T31396] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.320272][T31396] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.344045][T31396] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.727561][T31438] loop6: detected capacity change from 0 to 1024 [ 520.735412][T31438] EXT4-fs: Invalid want_extra_isize 0 [ 520.769806][T27208] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.926517][T31446] loop5: detected capacity change from 0 to 512 [ 520.933501][T31446] EXT4-fs: Ignoring removed mblk_io_submit option [ 520.939938][T31446] EXT4-fs: Ignoring removed bh option [ 520.946846][T31446] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 520.998161][T31446] EXT4-fs (loop5): 1 truncate cleaned up [ 521.004631][T31446] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.140463][T31457] loop6: detected capacity change from 0 to 2048 [ 521.150796][T31457] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 521.199264][T27904] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 521.360736][T31475] 9pnet: p9_errstr2errno: server reported unknown error [ 521.494312][T24639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.547247][T31481] syzkaller1: entered promiscuous mode [ 521.552804][T31481] syzkaller1: entered allmulticast mode [ 521.598027][T31493] syzkaller1: entered promiscuous mode [ 521.603618][T31493] syzkaller1: entered allmulticast mode [ 521.637993][T31495] loop7: detected capacity change from 0 to 512 [ 521.652557][T31495] EXT4-fs (loop7): orphan cleanup on readonly fs [ 521.669836][T31495] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8989: Failed to acquire dquot type 1 [ 521.707842][T31495] EXT4-fs (loop7): 1 truncate cleaned up [ 521.724010][T31495] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 521.756202][T31495] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 522.106888][T31522] netlink: zone id is out of range [ 522.112006][T31522] netlink: zone id is out of range [ 522.117264][T31522] netlink: zone id is out of range [ 522.122392][T31522] netlink: zone id is out of range [ 522.127527][T31522] netlink: zone id is out of range [ 522.132634][T31522] netlink: zone id is out of range [ 522.137752][T31522] netlink: zone id is out of range [ 522.142903][T31522] netlink: zone id is out of range [ 522.148017][T31522] netlink: zone id is out of range [ 522.153279][T31522] netlink: zone id is out of range [ 522.194789][T31527] FAULT_INJECTION: forcing a failure. [ 522.194789][T31527] name failslab, interval 1, probability 0, space 0, times 0 [ 522.207527][T31527] CPU: 0 UID: 0 PID: 31527 Comm: syz.6.9005 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 522.207548][T31527] Tainted: [W]=WARN [ 522.207575][T31527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 522.207583][T31527] Call Trace: [ 522.207588][T31527] [ 522.207593][T31527] __dump_stack+0x1d/0x30 [ 522.207606][T31527] dump_stack_lvl+0xe8/0x140 [ 522.207617][T31527] dump_stack+0x15/0x1b [ 522.207688][T31527] should_fail_ex+0x265/0x280 [ 522.207705][T31527] should_failslab+0x8c/0xb0 [ 522.207718][T31527] __kvmalloc_node_noprof+0x123/0x4e0 [ 522.207738][T31527] ? alloc_netdev_mqs+0x73f/0xab0 [ 522.207814][T31527] alloc_netdev_mqs+0x73f/0xab0 [ 522.207832][T31527] rtnl_create_link+0x239/0x710 [ 522.207850][T31527] rtnl_newlink_create+0x14c/0x620 [ 522.207879][T31527] ? security_capable+0x83/0x90 [ 522.207895][T31527] ? netlink_ns_capable+0x86/0xa0 [ 522.207911][T31527] rtnl_newlink+0xf29/0x12d0 [ 522.207932][T31527] ? xas_load+0x413/0x430 [ 522.207949][T31527] ? __memcg_slab_free_hook+0x135/0x230 [ 522.207967][T31527] ? __kfree_skb+0x109/0x150 [ 522.208042][T31527] ? __rcu_read_unlock+0x4f/0x70 [ 522.208072][T31527] ? avc_has_perm_noaudit+0x1b1/0x200 [ 522.208088][T31527] ? selinux_capable+0x1f9/0x270 [ 522.208161][T31527] ? security_capable+0x83/0x90 [ 522.208175][T31527] ? ns_capable+0x7d/0xb0 [ 522.208190][T31527] ? __pfx_rtnl_newlink+0x10/0x10 [ 522.208264][T31527] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 522.208283][T31527] netlink_rcv_skb+0x120/0x220 [ 522.208347][T31527] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 522.208381][T31527] rtnetlink_rcv+0x1c/0x30 [ 522.208415][T31527] netlink_unicast+0x5a1/0x670 [ 522.208446][T31527] netlink_sendmsg+0x58b/0x6b0 [ 522.208501][T31527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.208593][T31527] __sock_sendmsg+0x145/0x180 [ 522.208613][T31527] ____sys_sendmsg+0x31e/0x4e0 [ 522.208696][T31527] ___sys_sendmsg+0x17b/0x1d0 [ 522.208740][T31527] __x64_sys_sendmsg+0xd4/0x160 [ 522.208771][T31527] x64_sys_call+0x2999/0x2fb0 [ 522.208789][T31527] do_syscall_64+0xd2/0x200 [ 522.208860][T31527] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 522.208883][T31527] ? clear_bhb_loop+0x40/0x90 [ 522.208901][T31527] ? clear_bhb_loop+0x40/0x90 [ 522.208922][T31527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.209022][T31527] RIP: 0033:0x7f59206ee929 [ 522.209035][T31527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.209049][T31527] RSP: 002b:00007f591ed57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.209065][T31527] RAX: ffffffffffffffda RBX: 00007f5920915fa0 RCX: 00007f59206ee929 [ 522.209077][T31527] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 522.209087][T31527] RBP: 00007f591ed57090 R08: 0000000000000000 R09: 0000000000000000 [ 522.209172][T31527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 522.209182][T31527] R13: 0000000000000000 R14: 00007f5920915fa0 R15: 00007ffffc1388e8 [ 522.209198][T31527] [ 522.569989][T27208] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.968966][T31552] loop6: detected capacity change from 0 to 512 [ 522.985407][T31552] EXT4-fs (loop6): orphan cleanup on readonly fs [ 523.004258][T31552] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.9014: Failed to acquire dquot type 1 [ 523.016410][T31552] EXT4-fs (loop6): 1 truncate cleaned up [ 523.032266][T31552] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 523.202202][T31578] FAULT_INJECTION: forcing a failure. [ 523.202202][T31578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.215424][T31578] CPU: 0 UID: 0 PID: 31578 Comm: syz.7.9023 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 523.215454][T31578] Tainted: [W]=WARN [ 523.215460][T31578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 523.215471][T31578] Call Trace: [ 523.215478][T31578] [ 523.215541][T31578] __dump_stack+0x1d/0x30 [ 523.215561][T31578] dump_stack_lvl+0xe8/0x140 [ 523.215639][T31578] dump_stack+0x15/0x1b [ 523.215672][T31578] should_fail_ex+0x265/0x280 [ 523.215697][T31578] should_fail+0xb/0x20 [ 523.215718][T31578] should_fail_usercopy+0x1a/0x20 [ 523.215816][T31578] _copy_to_user+0x20/0xa0 [ 523.215834][T31578] fscontext_read+0x1b7/0x240 [ 523.215915][T31578] ? __pfx_fscontext_read+0x10/0x10 [ 523.215952][T31578] vfs_read+0x1a0/0x6f0 [ 523.216036][T31578] ? __rcu_read_unlock+0x4f/0x70 [ 523.216088][T31578] ? __fget_files+0x184/0x1c0 [ 523.216107][T31578] ksys_read+0xda/0x1a0 [ 523.216142][T31578] __x64_sys_read+0x40/0x50 [ 523.216168][T31578] x64_sys_call+0x2d77/0x2fb0 [ 523.216242][T31578] do_syscall_64+0xd2/0x200 [ 523.216258][T31578] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 523.216341][T31578] ? clear_bhb_loop+0x40/0x90 [ 523.216358][T31578] ? clear_bhb_loop+0x40/0x90 [ 523.216376][T31578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.216422][T31578] RIP: 0033:0x7f8c2cc8e929 [ 523.216436][T31578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.216451][T31578] RSP: 002b:00007f8c2b2f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 523.216466][T31578] RAX: ffffffffffffffda RBX: 00007f8c2ceb5fa0 RCX: 00007f8c2cc8e929 [ 523.216477][T31578] RDX: 00000000000000b0 RSI: 0000200000000280 RDI: 0000000000000003 [ 523.216486][T31578] RBP: 00007f8c2b2f7090 R08: 0000000000000000 R09: 0000000000000000 [ 523.216496][T31578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.216506][T31578] R13: 0000000000000000 R14: 00007f8c2ceb5fa0 R15: 00007ffe91a24588 [ 523.216654][T31578] [ 523.583808][T31596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9030'. [ 523.784838][T27904] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.028537][T31605] loop6: detected capacity change from 0 to 512 [ 524.035026][T31605] EXT4-fs: quotafile must be on filesystem root [ 524.082852][T31612] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.9033'. [ 524.351045][T31621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9037'. [ 524.366410][T31622] ================================================================== [ 524.374491][T31622] BUG: KCSAN: data-race in __process_echoes / n_tty_write [ 524.381595][T31622] [ 524.383906][T31622] write to 0xffffc900011bd280 of 8 bytes by task 51 on cpu 0: [ 524.391438][T31622] __process_echoes+0x63e/0x6b0 [ 524.396274][T31622] n_tty_receive_buf_common+0x8e4/0xbe0 [ 524.401907][T31622] n_tty_receive_buf2+0x33/0x40 [ 524.406751][T31622] tty_ldisc_receive_buf+0x66/0xf0 [ 524.411864][T31622] tty_port_default_receive_buf+0x59/0x90 [ 524.417595][T31622] flush_to_ldisc+0x144/0x360 [ 524.422284][T31622] process_scheduled_works+0x4cb/0x9d0 [ 524.427743][T31622] worker_thread+0x582/0x770 [ 524.432417][T31622] kthread+0x489/0x510 [ 524.436488][T31622] ret_from_fork+0xda/0x150 [ 524.440982][T31622] ret_from_fork_asm+0x1a/0x30 [ 524.445733][T31622] [ 524.448044][T31622] read to 0xffffc900011bd280 of 8 bytes by task 31622 on cpu 1: [ 524.455658][T31622] n_tty_write+0x161/0xb10 [ 524.460167][T31622] file_tty_write+0x389/0x670 [ 524.464936][T31622] tty_write+0x25/0x30 [ 524.469020][T31622] vfs_write+0x4a0/0x8e0 [ 524.473268][T31622] ksys_write+0xda/0x1a0 [ 524.477606][T31622] __x64_sys_write+0x40/0x50 [ 524.482204][T31622] x64_sys_call+0x2cdd/0x2fb0 [ 524.486870][T31622] do_syscall_64+0xd2/0x200 [ 524.491360][T31622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.497240][T31622] [ 524.499551][T31622] value changed: 0x0000000000000008 -> 0x000000000000000e [ 524.506639][T31622] [ 524.508952][T31622] Reported by Kernel Concurrency Sanitizer on: [ 524.515094][T31622] CPU: 1 UID: 0 PID: 31622 Comm: syz.8.9036 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 524.529146][T31622] Tainted: [W]=WARN [ 524.533030][T31622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 524.543077][T31622] ================================================================== [ 524.554943][T31624] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.9036'. [ 524.556927][T31624] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9036'.