last executing test programs: 1m12.644187807s ago: executing program 2 (id=649): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, 0x0, 0x0) 1m12.579118492s ago: executing program 2 (id=650): setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@block_validity}, {@grpjquota}]}, 0x5, 0x45b, &(0x7f00000010c0)="$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") chdir(&(0x7f00000001c0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) (fail_nth: 2) 1m12.11291766s ago: executing program 2 (id=651): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ea00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) 1m12.010172878s ago: executing program 2 (id=656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$eJzs3T1sG2UfAPD/neO3X3nf9JXeVwLUoQKkIlV1kn5AYWpXRKVKHZBYIHLcqIoTV7EDTZQh3StEBwSoS9lgYAQxMCAWRlYWEDNSRSOQmg5g5K80TZzglDouud9POvuee87+P8+d/499pzs5gMw62nhII56OiItJxMi6uqFoVx5trbe6slS8v7JUTKJev/RLEklE3FtZKnbWT9rPhyJiOSKeiohv8hHH081xqwuL0xPlcmmuXR6tzVwdrS4snrgyMzFVmirNnnrp5TNnT58ZPzm+/mX36+tL+Z319caPN9+98d2rt29++tmR5eL7E0mci+F23fp+PE6tbZKPcxuWn+5HsAFKBt0AHkmuneeNVPp/jESunfXd1Ed2tWlAn9X3RdSBjErkP2RU53dA4/i3M+3m748751sHII24q+2pVTPUOjcR+5vHJgd/TR46Mmkcbx7ezYayJy1fj4ixoaHNn/+k/fl7dGOPo4H01dfnWztq8/5P18af6DL+DHfOnf5NnfFvddP49yB+bovx72KPMX5/46ePtox/PeKZrvGTtfhJl/hpRLzVY/xbr395dqu6+scRx6J7/I5k+/PDo5evlEtjrceuMb46duSV7fp/cIv4rXO2+5tfM922f5fT2l198e3nzy5vE/+F57bf/922/4GIeK/H+P+998lrW9XduZ7cbfwK2On+TyIft3uM/+K5oz/0uCoAAAAAAAAAALADafNatiQtrM2naaHQuof3f3EwLVeqteOXK/Ozk61r3g5HPu1caTXSKieN8nj7etxO+eSG8qlcO2DuQLNcKFbKkwPuOwAAAAAAAAAAAAAAAAAAADwpDm24//+3XPP+/41/Vw3sVVv/5Tew18l/yK6H8z8ZWDuA3ef7HzKrLv8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/AAAAAAAAAAAAAAAAAAAAAAAAAADoi4sXLjSm+v2VpWKjPDm0MD9defvEZKk6XZiZLxaKlbmrhalKZapcKhQrM3/1fkmlcnUsZuevjdZK1dpodWHxzZnK/GznP0VL+b73CAAAAAAAAAAAAAAAAAAAAP55hptTkhYiIm3Op2mhEPHviDicRHL5Srk0FhH/iYjvc/l9jfL4oBsNAAAAAAAAAAAAAAAAAAAAe0x1YXF6olwuzWVkZmgnK0fE8uNtRuMdd/yqfHtfPSnb0EwWZgY8MAEAAAAAAAAAAAAAAAAAQAY9uOm311f80d8GAQAAAAAAAAAAAAAAAAAAQCalPycR0ZiOjTw/vLH2X8lqrvkcEe/cuvTBtYlabW68sfzu2vLah+3lJwfRfqBXnTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQHVhcXqiXC7N9XFm0H0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBR/BgAA///eANcP") ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000980)={'\x00', 0x1, 0x2, 0xc6da800, 0x2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x0, 0x0, 0x0, 0x0, 0x5, 0x510, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, @perf_config_ext={0xc, 0x5}, 0xa20, 0x10000, 0x8, 0x1, 0x6b57, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) write$tun(r2, &(0x7f0000000a80)=ANY=[@ANYBLOB="01aa64c7b1b8183b4b232c961333ae9d0df2e4833c8dba3a8593ce953022ab630000dd0000000000000000"], 0x12) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x1000, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x80}, {0x884, 0x1, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setxattr$trusted_overlay_redirect(&(0x7f0000000880)='./file0\x00', &(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x8, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) r11 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_open_procfs$namespace(r11, &(0x7f00000001c0)='ns/time_for_children\x00') perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xd, 0x8, 0x4, 0x7, 0x0, 0x401, 0x1400, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9cee, 0x0, @perf_config_ext={0xf66, 0x4}, 0x110003, 0x8000, 0x2, 0x3, 0x81, 0x100, 0xb, 0x0, 0x20, 0x0, 0x80000001}, r11, 0xb, 0xffffffffffffffff, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r9, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0], 0x0, 0xf2, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r12, @ANYRES32=r9, @ANYRES32=r13], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r15}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="ef7927bd7000fddbdf25091c1f00180001801400020076657468305f746f5f627269646765003774e61c139bcbe3060b9c8ffa2a73caac6507433bbc07d171525e7d626102c543d1f96053659788dc0800"], 0x2c}, 0x1, 0x0, 0x0, 0x20000848}, 0x4000010) 1m11.74329838s ago: executing program 2 (id=661): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) 1m9.868291541s ago: executing program 2 (id=671): mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x10, 0xffffffffffffffff, 0x3ff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/pid\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) syz_open_procfs(0x0, 0x0) 1m9.842956614s ago: executing program 32 (id=671): mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x10, 0xffffffffffffffff, 0x3ff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/pid\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) syz_open_procfs(0x0, 0x0) 12.775521407s ago: executing program 3 (id=1698): syz_emit_ethernet(0x49, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x13, 0x4, 0x0, @empty, @local, {[], "223427d5c9a46b9fa14172170a013589317d2a"}}}}}, 0x0) 12.774821157s ago: executing program 3 (id=1699): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2821, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000440), 0x1}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000880)="f7f599f093857ba355075dea097bfa23098247923c9f90f69205909cc388dbb10ad98ce0942605f97dd2bdd4b23e26f9a89d19be684db093b296a37f12aee330d9c30c5ea6a52c3bf583e01ad1dd9cb3d055a4e5bff00fe482c32b4acb1b185d3d7252358a603a677552a12b5d76445a470ff0b1633cea22340ca44847ae446346a619aeff8229d91e694349aa3fd6cc3dd5fe8450e3f89b3e68fb3595a6a81a7894e41fa022c9b91a503f140d996683f9e15a15430808682d", &(0x7f0000000740)="a30179373c9fe8ef52d2ba2b960945e193153c047013d2b32fce242615c2bae122f320e59f009dc609e895f2cb74c4b6722aecb5d886bb37ee85bbe55aed9e830b3e650ed7e8c99f0100c1f5856150ac0b9b3e568a28ff1e100493bdd8e618176ad68745122eaf4afc23b8c11eb6", 0x5, r1}, 0x38) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x81) fallocate(r2, 0x0, 0x0, 0x8000c62) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000040)=""/94, 0x5e, 0x0, &(0x7f0000000200)=""/39, 0x27}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYRESOCT=r2, @ANYRES16=r1, @ANYBLOB="e5ffffffffffffffb708001f000000007b8af8ff00000000bfa200000000000d64b16e14a4e8801ea84aa9aecdd7c000070204000063030000850000000100000095eb6be01e4092b2c8c92e6bb6b6963ecd164bfea5499e1d9860983829dd873ca4d3f500eff8cb68c5241c4eab43b0aba9dde6f8de52c01d6b4c96da93a18c1fe5c0928a70c9530191d2d6555d77c3acd91259c463ae00e09e1e1ad6c07ba5a1b01414f022c6c75c14df5856f83fc1c1d8b4d842d202c0d5aa3924004de71ff56ac59d7d41203d4a40"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000500)='xprt_retransmit\x00', r4, 0x0, 0xfffffdfffffffffb}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB="5cd9389599b29bee7647f2b08c644d3923c7bbb43087387f", @ANYRES8=r5, @ANYBLOB="a6c6031e0860", @ANYRES8=r5, @ANYBLOB="00000000000000000000000000000000000000000000000b2d150000a4cf7b80a1187ff085a80038b28c25bda3e71cf4e953800c70cc4192668adf406f88229fbab7d28352530db647ef8c4bc4d3bcfca86c3fc376b06bd212621356fd67eb28bc3b40e5aeecd9ce8f", @ANYBLOB="28204b8b4573dd2ebd6ffa64a3a2d56a1ecae366f682b378c7210578fc504d7e146fe28b03f6ebdf8742fb294cc0a12286fe456b8707827a9b0a23a3fe558093c3d9f5ee4116e36ff86e826c0ae4db34493f5772db7ec62947b11cb582b06400fac70c95d858d8d391981953571f4c044339aa0e972dac015d6acd062a7fb7f6c5f14e93df4cb1aff4f271cd90bb65e000ccd5a010f5f61809f67f747abf7786c8a856ae3018f3491ededacf20fad86817baa67d2719bad454081ae846b4cd8009abf0", @ANYRES8=r3, @ANYRES8=r5], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f00000004c0), &(0x7f0000001c40)=r7}, 0x20) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r9, 0x66a8, 0x4000, 0xc, 0x0, 0xfffffffffffffda4) 11.740424141s ago: executing program 3 (id=1715): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x434, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 10.257988151s ago: executing program 3 (id=1724): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, 0xffffffffffffffff}, 0xfffffffffffffeaa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = gettid() socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4000, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x40000000, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfe, 0x7fffffff}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r8, 0xffffffffffffffff, 0x100000000000000) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r11}, 0x18) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r13 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r13, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @rand_addr=0x64010100}, 0x2}}, 0x2e) socket$nl_xfrm(0x10, 0x3, 0x6) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{0x0}], 0x1, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) 3.96286079s ago: executing program 0 (id=1801): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 3.848170379s ago: executing program 0 (id=1802): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x2, 0xffffffffffffffff, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg2\x00'}) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) 3.494431848s ago: executing program 1 (id=1803): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001e008d2a2abd7000fbdbdf", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x28, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x9}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) getsockopt(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f00000003c0)={0x7, 0x10001, 0x7f, 0x9, 0x6}) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) readv(r5, 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x3, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.116472028s ago: executing program 1 (id=1805): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x400000}]) 2.789917745s ago: executing program 1 (id=1808): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x100) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, 0x0, 0x0) r5 = getuid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x6, 0x7ffc1ffb}]}) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000840)={0x0, r3, 0x4, 0xa2, 0x0, 0x8}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018010099b680e22500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000095000000000000009500000000000000"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x82000, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) r10 = getegid() write$P9_RGETATTR(r8, &(0x7f0000000580)={0xa0, 0x19, 0x2, {0x8, {0x4, 0x3, 0xfffffffffffffffa}, 0x40, r5, r10, 0x1, 0x400, 0x1, 0x6, 0x1, 0x0, 0x60, 0x9e00000, 0x9, 0x80000001, 0x1, 0x800, 0x9, 0x7c62, 0x6c13c532}}, 0xa0) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) getresgid(&(0x7f0000000c40), &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYRES8=r12, @ANYRESHEX=r13, @ANYRES32=r12, @ANYRESDEC, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010001000000000002000200", @ANYRES32=r1, @ANYBLOB="02000400", @ANYRES32=r4, @ANYBLOB="02000000", @ANYRES32=0xee01, @ANYBLOB="040000000000000008000200", @ANYRES32=r10, @ANYBLOB="08000e00", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r11, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000f00", @ANYRES32=r12, @ANYBLOB="10000100000000002000000000000000"], 0x64, 0x1) sendmmsg$inet6(r0, &(0x7f00000006c0), 0x0, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x1ff, 0x0, 0x9, 0x1, 0x4, 0x2, 0x3, {0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0xfffffffb}}, 0x1, 0x200000c, 0x0, 0xffffff4a, 0x2817c26c}}, &(0x7f0000000900)=0xb0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x88c1, 0x0) 2.2233192s ago: executing program 0 (id=1811): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="fb3e0021c551eb80c200000088a8300081"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473fec988ca58e8001d75d38e0d369bd7c50580", 0x1c}, {&(0x7f0000000380)="9c74dfbf7757d9c4135f04770d56", 0xe}], 0x2) fstat(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r2, &(0x7f00000003c0), &(0x7f0000000400)=@v3={0x3000000, [{0x7, 0x1}, {0xffff, 0x4}], r10}, 0x18, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000b1080000000000000018110000", @ANYRES32=r4, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000000)) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r11}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r12}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) remap_file_pages(&(0x7f00001bf000/0xf000)=nil, 0xf000, 0x1000001, 0x608, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYRES8=r7], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 2.022129666s ago: executing program 1 (id=1812): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="123583000000", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002695d9f4c1dd6a011ef17fc3ec76dc8221bc9d4e59b5726ba0a70c32a1cc88c5a3d53f42ef14c79fbce0f3ac2f360e25055c81d601e276c60707274056ba7e1956fd62e053ef8a7e9184730ae281ac71451baf3a2afc681b1e22dda9a0bcce48433136a96a33435fb5b140c3799efd78c5ee644377b22e203cf17cc9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x44}}, 0x0) 2.021440087s ago: executing program 5 (id=1813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) pipe(0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r2, 0x5453, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.872152658s ago: executing program 5 (id=1816): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f00000004c0)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) timer_gettime(0x0, &(0x7f00000002c0)) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040004) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x3c, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r7}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r8, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.847092171s ago: executing program 0 (id=1817): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2821, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000440), 0x1}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000880)="f7f599f093857ba355075dea097bfa23098247923c9f90f69205909cc388dbb10ad98ce0942605f97dd2bdd4b23e26f9a89d19be684db093b296a37f12aee330d9c30c5ea6a52c3bf583e01ad1dd9cb3d055a4e5bff00fe482c32b4acb1b185d3d7252358a603a677552a12b5d76445a470ff0b1633cea22340ca44847ae446346a619aeff8229d91e694349aa3fd6cc3dd5fe8450e3f89b3e68fb3595a6a81a7894e41fa022c9b91a503f140d996683f9e15a15430808682d", &(0x7f0000000740)="a30179373c9fe8ef52d2ba2b960945e193153c047013d2b32fce242615c2bae122f320e59f009dc609e895f2cb74c4b6722aecb5d886bb37ee85bbe55aed9e830b3e650ed7e8c99f0100c1f5856150ac0b9b3e568a28ff1e100493bdd8e618176ad68745122eaf4afc23b8c11eb6", 0x5, r1}, 0x38) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x81) fallocate(r2, 0x0, 0x0, 0x8000c62) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000040)=""/94, 0x5e, 0x0, &(0x7f0000000200)=""/39, 0x27}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18a720a274b6b8f58a008500000008000000951d96228185e31ea9de2a094fd89e96b389a25ebf934b8dad9222d6ee490940d111fb964f9652b3e7fe8871cd0cf0892eced6ece23f677567722ddd312fd354b5bb7cf3ed2736e996f45cbdd744f31f94acdf4fd5c7ae363ae8b6bb3e7ed0d79b37192613d2fe9fe7d1eed8de7f2b754a251484fdc71bfd4f70f553825bc46b4119b13e3557e9a8cfb30bb8ea45796c7235b5f5c084906cd2d0a65bf4a03f62230fc73a31c3b4af4ea002cde54385266731c1fc9ca553acfdb5408f2ed01383348997d9cdc40121006e0ed8e57284b495301c374798b97040158dc8a077fa3e1e0b5efef008ed74253c76681f854d4d56408159cb804848e56fa28dc5243352ba8986fd1c05b2e7cf6143fad8bef90babf970309cc8977b6398f621bb6b35"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYRESOCT=r2, @ANYRES16=r1, @ANYBLOB="e5ffffffffffffffb708001f000000007b8af8ff00000000bfa200000000000d64b16e14a4e8801ea84aa9aecdd7c000070204000063030000850000000100000095eb6be01e4092b2c8c92e6bb6b6963ecd164bfea5499e1d9860983829dd873ca4d3f500eff8cb68c5241c4eab43b0aba9dde6f8de52c01d6b4c96da93a18c1fe5c0928a70c9530191d2d6555d77c3acd91259c463ae00e09e1e1ad6c07ba5a1b01414f022c6c75c14df5856f83fc1c1d8b4d842d202c0d5aa3924004de71ff56ac59d7d41203d4a40"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000500)='xprt_retransmit\x00', r4, 0x0, 0xfffffdfffffffffb}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB="5cd9389599b29bee7647f2b08c644d3923c7bbb43087387f", @ANYRES8=r5, @ANYBLOB="a6c6031e0860", @ANYRES8=r5, @ANYBLOB="00000000000000000000000000000000000000000000000b2d150000a4cf7b80a1187ff085a80038b28c25bda3e71cf4e953800c70cc4192668adf406f88229fbab7d28352530db647ef8c4bc4d3bcfca86c3fc376b06bd212621356fd67eb28bc3b40e5aeecd9ce8f", @ANYBLOB="28204b8b4573dd2ebd6ffa64a3a2d56a1ecae366f682b378c7210578fc504d7e146fe28b03f6ebdf8742fb294cc0a12286fe456b8707827a9b0a23a3fe558093c3d9f5ee4116e36ff86e826c0ae4db34493f5772db7ec62947b11cb582b06400fac70c95d858d8d391981953571f4c044339aa0e972dac015d6acd062a7fb7f6c5f14e93df4cb1aff4f271cd90bb65e000ccd5a010f5f61809f67f747abf7786c8a856ae3018f3491ededacf20fad86817baa67d2719bad454081ae846b4cd8009abf0", @ANYRES8=r3, @ANYRES8=r5], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f00000004c0), &(0x7f0000001c40)=r7}, 0x20) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x66a8, 0x4000, 0xc, 0x0, 0xfffffffffffffda4) 1.646579387s ago: executing program 5 (id=1820): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') pread64(r1, &(0x7f000001a240)=""/102392, 0x18ff8, 0x0) 1.646063617s ago: executing program 5 (id=1821): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x2, 0xffffffffffffffff, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg2\x00'}) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) 1.566289433s ago: executing program 4 (id=1822): r0 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) lseek(r0, 0x5, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r7, @ANYBLOB="00000016010000001800120008000100736974000c00020008"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r7, @ANYBLOB="001100000000000040001280080001007369740034000280050009002900000008000200ac1414bb08000c000000010006000d00", @ANYRES8, @ANYRES16=r4], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)="f30192c732540dfe88914db5ff06d65b1cf919c882e21b4f4a35109d6fc63643d6fd3350cf993402b0fe06f716a838af4d3721800e01509703db0abc34addd276dc877db529674ca906b0461e59db1a8a53a529cd9151b76c5dcab201f0608118e5b4448cca2ce46e58ee77f9f0371ac5e94cebee243f18f6dff85af34cb6d1ac26a71233d764bb4cd", 0x89, 0x20048081, &(0x7f00000005c0)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10001}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fef2000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r9) recvmsg$unix(r8, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[], 0xfdef) 1.505479908s ago: executing program 3 (id=1823): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2c450, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x3, 0x8, 0x8, 0x20002, 0x40b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) chmod(0x0, 0x13) syz_clone(0x410e6080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000580)="0dd252394d0a426d1c46e9a99ad9393e43e6a40791775e8a6d84b21f84ecc78e18744941f8f28bcf0e8e434e16da6a40250d60c9b43de1f96f1b87fa6c734cc89acafb476f6795b6caa1d4f48878eac7211656ee66da4daba7d23a8e5647d2715384399dd7b8635a287ff20b2865538946dfb95ca8ca09a22b5e72f196c8f37de96869e49d3e009d4061aeb1fd1630a506a92009a34c1c78176b726b91a6adf38e47e402f390897bc0c3d1d16e31750ca701df2f2cd16024fb9b678799f89fb56db89392fbced221410d1013c0fd34d97ae419be3bc81237ad8ee3ae39c00d7262261375463995def4d5952b925358afb02e19be970c8c76ca", 0xf9}, {&(0x7f0000000900)="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", 0x11a}, {&(0x7f0000000840)="63005c5b6f2292ee1d06fda235d4b63fcff7eb08af818351939a3fe24c52dd7564c26ed0a99241494dfbf5f2028978356f495fdd1437674ec3734170a0bd4a4197fb187aa5065f53908e2d5bf718c0e7c6042ec1d1bbb54c83321e2de70c6868ca56c591e9f8b3dfe7c73744c8c4300a9505eca9a342e2984f1eabc130d321c8d67eca0cca1956fb4a3e8a5c7d3efbdbe520d9f589aa5c56eb15c849dc61bff6e045000000000000000000", 0xab}, {&(0x7f00000003c0)="3a694441037d1dcd7ea8945e16a296cbae7e92cfaea801c783a9792f07ebeb164431bb03f56c7b51fd0241d403dc607ccdfdf6a482be8ad83559d4397bde4132b73478cbba713f53e0ceee139c176c1315cf5c14b4d7a3972ff61b7fa99e6abaa6", 0x61}, {&(0x7f00000004c0)="d26c1aaa5cfafb9f7f52d3732bbbcc809f04fc8c47ad71a7e6321b5010e7e8133690c4934bd0c8ace527c578b2da7c66cbd385747efaea74fd88100ae0576c51", 0x40}, {&(0x7f0000000740)="3b1ac166bf40db7503de0a871b37e394e8babea6e799aa82bd26bf68a94bf91774de715b13147c9eaefcf4648e8975bd258b8499007742b473b0279f8cf9e6889e2270e35c4c9efd0c5c1acda8e3109d6023c848985a4d98d1104c9637c54ddf72ddf2bdc95def660f8560582ca164cf59fd359b3654ee5f98caee48c421c820012c7849d1a881317b18e67e3e0b60f61f636918d415ba51c3893d1318984f520bbc7b3e56f4ec543efdef1dbbcc72afed7bae7a633e7d98e12de2e7fdc6bed13a3321f036c34ef05ec7286b89e61c3060832f0688db1ae0bf1cb3caff4f4144264b520991c867c787d3e81ad97c3ef6ee6b", 0xf2}, {&(0x7f0000001b80)="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", 0x134}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1.504809629s ago: executing program 4 (id=1824): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') pread64(r1, &(0x7f000001a240)=""/102392, 0x18ff8, 0x0) 1.359245s ago: executing program 4 (id=1825): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) utimes(&(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 6) 994.324329ms ago: executing program 4 (id=1826): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="123583000000", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002695d9f4c1dd6a011ef17fc3ec76dc8221bc9d4e59b5726ba0a70c32a1cc88c5a3d53f42ef14c79fbce0f3ac2f360e25055c81d601e276c60707274056ba7e1956fd62e053ef8a7e9184730ae281ac71451baf3a2afc681b1e22dda9a0bcce48433136a96a33435fb5b140c3799efd78c5ee644377b22e203cf17cc9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) lremovexattr(0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffce2a0000000000000011424203"], 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 993.618849ms ago: executing program 1 (id=1827): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34920, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='io_uring_create\x00'}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r3}) 858.406991ms ago: executing program 3 (id=1828): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000001a80)={0x1, 0x1, 0x5, 0xfffffffffffffffc}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0xf, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000003000000008000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000004f00000000000000000000000068ad218d138cb717c4b154a876ce5d1f454b8d3942c9e8ee37b2ccb9558de1d6654cd531dfa5c75b6e1b0d9d5e2a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 330.202123ms ago: executing program 0 (id=1829): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080006000a00010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x2}, {r1, 0x14}], 0x2, &(0x7f0000000200)={0x77359400}, &(0x7f00000002c0)={[0x101]}, 0x8) futex(0x0, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="01", 0x400000}]) 207.748913ms ago: executing program 0 (id=1830): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000420008042abd7000ffdbdf25aefd464e137585c70bd1309072c2e260b5bc9246aac4747b525b99f6a0aaebfb9a8d7b03e4325456fa680f983ca45f6a16078afb4ccc1e8c4b969f8d645daab276713ca266208661bcd3aae591b95ea04b0358b9b2e5751aebc004e1837d2562439eb7f671d5d9a42c88ea66540b38d0b6966ba4d4184e5f822ead91eadab7195d7da4f33c"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x7, &(0x7f00000021c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, &(0x7f0000000b80)="babeeca80bf696871b087f49c112bf8195dbcff5cc6f83d0bcef2262271ab410cd04f8ce4baebce8e78ce7e17bd32cbdb4162be4c417166996e2c712a097f89ca776644dfa555e5586fdca59dc527d70dc7b3cff2136229ac15479dea878d96c1561646d0d35841d307a2457adc99367f038e35d45d404e94556e268ff83443874f37f07ab08c4f152a77481bfd23921bc21ef614a20744c620d12285e223680", 0xa0, 0x9}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0xe189, 0xffffffffffffffff, &(0x7f0000000c40)="96f9ae1b222ebc46cbc76a98bfc49f864f2a99b6df6f8740d57acf91d9b46990395c4c631e4c8e289e68bb0085c372ce8e8e4e1e97d6bd0b4a1277f0cc2624450ae8e0a6ca16b479c6ebe34f55f32382340f6d19e3920d12ca2af252d3a2c13db2d3f974a5d7fd765c622af75fef306308a38211af1c80f6d520178b5fba1b2ec64726ade35a88ceb764ab0e55a1b4f7a2135adbfc5d33f694a419d2d0d95963507cfd686b7609b802056977f1bcbd8977e41d38d62c68ee685901a2aa", 0xbd, 0x269, 0x0, 0x2, r2}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3, 0xfffa, r0, &(0x7f0000000d40)="62424f5f8300c0a757bbf64d16a483af75b43d222df0fef440e4f5ebe82dc5c59845960fde06a45122df152146a7816ec1aece0eb191cec95c642ae0b0be12f9d2fdce3f760273aa138389a8ae76f4e0f2b38103f6deee4a3cbcb41d0aecaba2e1e6bd75d7ee14dda1f15f2932ffa0407b0f9276a23b3f08a1", 0x79, 0xe}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x7, 0xb4ce, 0xffffffffffffffff, &(0x7f00000022c0)="c014b83ca3a589e6299b8aba95b1b31499e9053eed2b2b35dbc40fe64f221b433b6cd52786d62667131ee5a32bf5ea3ccefab49d2542e92f925d8c9711cfda54454b6e3717158b6e1114ca244631e31a3c0df12d1eb37437d69745cbe0b32bdac0ffe1de7a56b8a28f822b274e205383915d0b2ac40226660d84738f2bac8648c264e92526c85a77281080f105e64202319879d121567c88243fd1cb0c1e8a609fdc9aeac60d9c20016b25fd47e46663be42707137b5c09f52032933ccd663346dec1b6c102c391800000000c2fbc4b50bedef7848c3b8520177f5068afd14b270d27e11d4f552d9daf8f647292edff3b80f8b204c7c7996e3d151953de4b1e571642b1af6388a0dfad37fb819c3653d8e81511f7d8a2c45178066b4bd2781be2e067ddaf76cfcb9c42dfa4052e2a0262e475256d1", 0x135, 0x9, 0x0, 0x1}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x5, 0x8, r2, &(0x7f0000000f40)="00faed1ca8676d006624b3e95685a2156e47236ffb4315a3410e89181f373e67c085b8f60caa66decff01c6c74c979f07ede18e5c382b2cc984bfff556d79d8dd5ee7084a46a41b1c837527d351597762788253da407bdc5d0d5b4b0a1a34b", 0x5f, 0x101, 0x0, 0x1, r2}, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000001100)="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", 0x1000, 0x1, 0x0, 0x3}, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x1, 0xa, r0, &(0x7f0000002100)="a45ae4a52d3a59a1e8712fcca94a2f2321c78734b8d4d957d85d2d8c9b9545e3d4c7f3ec00d457d0db9ecff32343f0085d08672e464de4bde1ab4ba43fb5119438dfaac06c75", 0x46, 0x5, 0x0, 0x2}]) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, 0x2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{}, &(0x7f0000000200), &(0x7f0000000340)='%pB \x00'}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000000010104000000000000000002000000240001801400018008000100e000000108000200640101020c000280050001000000000024000280140001800800010000000000080002007f0000010c00028040a6ec4844480500010000000000080007400000712833fad1eff78c42e3e22bbde5cd9f96308d"], 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000000080)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000002200)=ANY=[@ANYBLOB="02000000010003000000000002000100", @ANYRES32=0x0, @ANYBLOB="02001fd3", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="b034572044ca4e7d926147a590348d8ec76b2713ca481ab89b9db84ab963e44522d77c4441d4d9500f4f87c9d4cf6b0e05bcc147013f01545c1c4ab25cc68c44679ddfb33856fc4829e701a1dd27", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040003000000000008000200", @ANYRES32=0x0, @ANYBLOB="10000700000000002000010000000000"], 0x54, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0, @in={{0x2, 0x4e21, @private=0xa010102}}, 0x7387, 0x5, 0x61, 0xb1, 0x88, 0x3b80, 0x1}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000200)={r5, 0x400, 0x8}, &(0x7f0000000280)=0x8) 84.047623ms ago: executing program 1 (id=1832): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x2014001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) truncate(0x0, 0xffffffffffffffff) r4 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1, 0x0, 0x0, r3}, &(0x7f0000000580), &(0x7f00000000c0)) io_uring_enter(r4, 0x0, 0x235c, 0x3, 0x0, 0x0) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000140)=[0x0, 0x7fff], 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r6, &(0x7f0000000180)=ANY=[], 0x78) sendfile(0xffffffffffffffff, r6, &(0x7f00000001c0), 0x7) fcntl$addseals(r6, 0x409, 0x8) fallocate(r6, 0x3, 0x9100, 0x3) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) 83.000883ms ago: executing program 5 (id=1833): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0xfffffffffffffdfa, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x14, r3, 0x300, 0x1000}, 0x14}}, 0x4048850) r4 = socket$key(0xf, 0x3, 0x2) dup2(0xffffffffffffffff, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c587c7ab18285f7a55d53e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r4}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r8}, 0x3d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='hrtimer_start\x00'}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6_vti0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000004c0)=@framed={{}, [@jmp={0x5, 0x1, 0x6, 0x7, 0x0, 0x4, 0x8}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800003}, 0x94) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) 6.377509ms ago: executing program 4 (id=1834): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x6) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000001280), 0x6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x5) r7 = perf_event_open(&(0x7f00000003c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r9) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES16=r2, @ANYRESOCT=r7, @ANYRES16=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0x20) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0xfc, 0x1, 0x0, 0x7, 0x2, 0x5, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000002, 0x0, 0x3c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000000000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYRESHEX=r0], 0x2c}], 0x1}, 0x4004) 0s ago: executing program 5 (id=1835): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) (async) r1 = socket(0x2c, 0x3, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp=r1}, 0x20) (async) socket$inet6(0xa, 0x3, 0x3c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c00040014000100f5000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="040000000400000008000000010000008000000018da3e5a8ae2426cff26", @ANYRES32, @ANYBLOB="a600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) brk(0x9) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = dup(r5) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xd, &(0x7f0000001040)=ANY=[@ANYRESOCT, @ANYRES32=r7, @ANYRESDEC=r3, @ANYRES32], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = semget(0x3, 0x3, 0x541) semctl$IPC_RMID(r9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$USBDEVFS_RESETEP(r6, 0x80045503, &(0x7f00000010c0)) (async) socket$inet_smc(0x2b, 0x1, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000fcffffff000000000000000018000000030000000000000001000000950000009bfb7094"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async) sendmsg$tipc(r10, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x21, &(0x7f0000001080)=r8, 0x4) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f00000062c0)="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", 0x5dd}], 0x1}}], 0x6, 0x20004095) write$UHID_INPUT(r6, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): the MTU to 1560 would solve the problem. [ 85.413660][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.425257][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.432310][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.458297][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.469511][ T29] audit: type=1326 audit(1754285676.586:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f9e3f15eb69 code=0x7ffc0000 [ 85.508819][ T5858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.677'. [ 85.517841][ T5858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.677'. [ 85.573859][ T5858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.677'. [ 85.589433][ T5796] hsr_slave_0: entered promiscuous mode [ 85.604716][ T5796] hsr_slave_1: entered promiscuous mode [ 85.610776][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 85.616641][ T5796] Cannot create hsr debugfs directory [ 85.638207][ T5858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.677'. [ 85.658779][ T29] audit: type=1326 audit(1754285676.856:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3f15eb69 code=0x7ffc0000 [ 85.677733][ T5900] netlink: 'syz.0.682': attribute type 1 has an invalid length. [ 85.713035][ T5900] 8021q: adding VLAN 0 to HW filter on device bond3 [ 85.829494][ T5904] tipc: Started in network mode [ 85.834977][ T5904] tipc: Node identity ac14140f, cluster identity 4711 [ 85.842121][ T5904] tipc: New replicast peer: 255.255.255.83 [ 85.848201][ T5904] tipc: Enabled bearer , priority 10 [ 85.935405][ T5908] loop4: detected capacity change from 0 to 764 [ 85.989791][ T5796] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.029680][ T5796] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.066141][ T5796] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.117501][ T5796] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.172077][ T5916] netlink: 'syz.0.687': attribute type 10 has an invalid length. [ 86.228431][ T5918] dummy0: entered promiscuous mode [ 86.235679][ T5918] bond0: entered promiscuous mode [ 86.240808][ T5918] bond_slave_0: entered promiscuous mode [ 86.246562][ T5918] bond_slave_1: entered promiscuous mode [ 86.259133][ T5908] rock: directory entry would overflow storage [ 86.265461][ T5908] rock: sig=0x4654, size=5, remaining=4 [ 86.277978][ T5918] hsr1: entered allmulticast mode [ 86.283187][ T5918] dummy0: entered allmulticast mode [ 86.288495][ T5918] bond0: entered allmulticast mode [ 86.293756][ T5918] bond_slave_0: entered allmulticast mode [ 86.299526][ T5918] bond_slave_1: entered allmulticast mode [ 86.308649][ T5908] rock: directory entry would overflow storage [ 86.314959][ T5908] rock: sig=0x4f50, size=4, remaining=3 [ 86.320543][ T5908] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 86.388009][ T5925] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 86.398564][ T5925] 0ªî{X¹¦: entered allmulticast mode [ 86.404755][ T5925] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 86.551918][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.568317][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.580345][ T5319] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.587492][ T5319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.609377][ T5319] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.616513][ T5319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.641932][ T5796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.652451][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.785119][ T5941] ref_ctr_offset mismatch. inode: 0x332 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 86.914346][ T5945] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 86.942683][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.092523][ T5956] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 87.118876][ T5956] 0ªî{X¹¦: entered allmulticast mode [ 87.128078][ T5956] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 87.263565][ T5963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 87.317781][ T5796] veth0_vlan: entered promiscuous mode [ 87.329746][ T5796] veth1_vlan: entered promiscuous mode [ 87.391044][ T5796] veth0_macvtap: entered promiscuous mode [ 87.419800][ T5796] veth1_macvtap: entered promiscuous mode [ 87.478564][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.518194][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.560212][ T5317] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.602737][ T5317] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.659992][ T5317] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.678602][ T5980] tipc: Started in network mode [ 87.683752][ T5980] tipc: Node identity ac14140f, cluster identity 4711 [ 87.726400][ T5980] tipc: New replicast peer: 255.255.255.83 [ 87.732368][ T5980] tipc: Enabled bearer , priority 10 [ 87.747696][ T5317] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.789091][ T5988] vxcan1: tx address claim with dest, not broadcast [ 87.878225][ T3423] tipc: Node number set to 2886997007 [ 87.966952][ T6005] netlink: 'syz.5.711': attribute type 10 has an invalid length. [ 87.978544][ T6005] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 88.008974][ T6008] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 88.035314][ T6013] 9pnet_fd: Insufficient options for proto=fd [ 88.121483][ T3423] hid_parser_main: 33 callbacks suppressed [ 88.121579][ T3423] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 88.135007][ T3423] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 88.142417][ T3423] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 88.149900][ T3423] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 88.157434][ T3423] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 88.164905][ T3423] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 88.172336][ T3423] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 88.179834][ T3423] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 88.187276][ T3423] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 88.194708][ T3423] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 88.306949][ T3423] hid-generic 0008:0006:0007.0003: hidraw0: HID v0.0b Device [syz1] on syz1 [ 88.352734][ T6029] fido_id[6029]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.512903][ T6043] loop5: detected capacity change from 0 to 128 [ 88.598207][ T6043] FAT-fs (loop5): Directory bread(block 162) failed [ 88.633408][ T6043] FAT-fs (loop5): Directory bread(block 163) failed [ 88.781956][ T6043] FAT-fs (loop5): Directory bread(block 164) failed [ 88.869525][ T6043] FAT-fs (loop5): Directory bread(block 165) failed [ 88.939909][ T6043] FAT-fs (loop5): Directory bread(block 166) failed [ 89.023367][ T6043] FAT-fs (loop5): Directory bread(block 167) failed [ 89.104089][ T6043] FAT-fs (loop5): Directory bread(block 168) failed [ 89.130516][ T3396] tipc: Node number set to 2886997007 [ 89.183877][ T6043] FAT-fs (loop5): Directory bread(block 169) failed [ 89.218605][ T6043] FAT-fs (loop5): Directory bread(block 162) failed [ 89.229892][ T6060] __nla_validate_parse: 9 callbacks suppressed [ 89.229929][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 89.244959][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 89.267058][ T6043] FAT-fs (loop5): Directory bread(block 163) failed [ 89.305847][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 89.412319][ T6067] loop5: detected capacity change from 0 to 1024 [ 89.438010][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 89.446884][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 89.461431][ T6067] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 89.514741][ T6067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.610045][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 89.779849][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 89.788816][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 89.832237][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 89.846264][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 89.846280][ T29] audit: type=1326 audit(1754285681.046:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3f15eb69 code=0x7ffc0000 [ 89.875758][ T29] audit: type=1326 audit(1754285681.046:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3f15eb69 code=0x7ffc0000 [ 89.922411][ T5796] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.003047][ T29] audit: type=1326 audit(1754285681.186:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6083 comm="syz.5.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 90.026538][ T29] audit: type=1326 audit(1754285681.186:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6083 comm="syz.5.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 90.050131][ T29] audit: type=1326 audit(1754285681.196:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6083 comm="syz.5.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 90.073576][ T29] audit: type=1326 audit(1754285681.196:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6083 comm="syz.5.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 90.097055][ T29] audit: type=1326 audit(1754285681.196:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6083 comm="syz.5.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 90.120495][ T29] audit: type=1326 audit(1754285681.196:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6083 comm="syz.5.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 90.143915][ T29] audit: type=1326 audit(1754285681.196:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6083 comm="syz.5.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 90.167285][ T29] audit: type=1326 audit(1754285681.196:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6083 comm="syz.5.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 90.192464][ T6084] loop5: detected capacity change from 0 to 512 [ 90.194894][ T6088] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.214480][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.739'. [ 90.263674][ T6088] loop4: detected capacity change from 0 to 1024 [ 90.272849][ T6084] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 90.283734][ T6084] EXT4-fs (loop5): orphan cleanup on readonly fs [ 90.293341][ T6084] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.736: corrupted inode contents [ 90.317173][ T6084] EXT4-fs (loop5): Remounting filesystem read-only [ 90.323825][ T6084] EXT4-fs (loop5): 1 truncate cleaned up [ 90.332122][ T6088] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.342841][ T5317] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 90.353490][ T5317] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 90.370907][ T5317] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 90.382832][ T6084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.395986][ T6088] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.738: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.410030][ T6088] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.738: Failed to acquire dquot type 0 [ 90.414946][ T6084] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.435902][ T6088] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.738: Freeing blocks not in datazone - block = 0, count = 4096 [ 90.481102][ T6088] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.738: Invalid inode bitmap blk 0 in block_group 0 [ 90.502322][ T5299] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.539662][ T5299] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:25: Failed to release dquot type 0 [ 90.572337][ T6088] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 90.635250][ T6088] EXT4-fs (loop4): 1 orphan inode deleted [ 90.654911][ T6088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.696214][ T6088] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.841634][ T6138] ref_ctr_offset mismatch. inode: 0x4c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 91.920242][ T6156] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 92.333634][ T6180] bond0: (slave dummy0): Releasing backup interface [ 92.415208][ T6187] loop4: detected capacity change from 0 to 128 [ 92.422663][ T6187] FAT-fs (loop4): Directory bread(block 162) failed [ 92.436314][ T6187] FAT-fs (loop4): Directory bread(block 163) failed [ 92.437843][ T6180] bridge_slave_0: left allmulticast mode [ 92.443343][ T6187] FAT-fs (loop4): Directory bread(block 164) failed [ 92.448700][ T6180] bridge_slave_0: left promiscuous mode [ 92.457142][ T6187] FAT-fs (loop4): Directory bread(block 165) failed [ 92.461084][ T6180] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.467726][ T6187] FAT-fs (loop4): Directory bread(block 166) failed [ 92.486526][ T6187] FAT-fs (loop4): Directory bread(block 167) failed [ 92.493274][ T6187] FAT-fs (loop4): Directory bread(block 168) failed [ 92.503431][ T6180] bridge_slave_1: left allmulticast mode [ 92.509232][ T6180] bridge_slave_1: left promiscuous mode [ 92.515055][ T6180] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.527993][ T6187] FAT-fs (loop4): Directory bread(block 169) failed [ 92.537601][ T6180] bond0: (slave bond_slave_0): Releasing backup interface [ 92.550461][ T6180] bond0: (slave bond_slave_1): Releasing backup interface [ 92.563354][ T6187] FAT-fs (loop4): Directory bread(block 162) failed [ 92.570312][ T6187] FAT-fs (loop4): Directory bread(block 163) failed [ 92.579123][ T6180] team0: Port device team_slave_0 removed [ 92.589395][ T6180] team0: Port device team_slave_1 removed [ 92.596393][ T6180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.603791][ T6180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.621183][ T6180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.628655][ T6180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.673360][ T6189] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 92.683486][ T6189] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 93.572104][ T6228] loop4: detected capacity change from 0 to 1024 [ 93.593654][ T6228] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 93.608826][ T6226] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 93.632133][ T6229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.642210][ T6226] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 93.642604][ T6229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.689267][ T6228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.036204][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.350115][ T6254] __nla_validate_parse: 42 callbacks suppressed [ 94.350143][ T6254] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.790'. [ 94.418158][ T6259] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.793'. [ 94.649651][ T6269] netlink: 5 bytes leftover after parsing attributes in process `syz.1.796'. [ 94.698428][ T6269] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 94.721591][ T6269] 1ªî{X¹¦: entered allmulticast mode [ 94.736562][ T6269] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 94.897047][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 94.897065][ T29] audit: type=1326 audit(1754285686.096:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b5fea5b27 code=0x7ffc0000 [ 94.984543][ T29] audit: type=1326 audit(1754285686.126:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b5fe4ad69 code=0x7ffc0000 [ 95.007952][ T29] audit: type=1326 audit(1754285686.126:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b5fea5b27 code=0x7ffc0000 [ 95.031217][ T29] audit: type=1326 audit(1754285686.126:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b5fe4ad69 code=0x7ffc0000 [ 95.054695][ T29] audit: type=1326 audit(1754285686.126:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 95.078131][ T29] audit: type=1326 audit(1754285686.136:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 95.101617][ T29] audit: type=1326 audit(1754285686.136:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b5fea5b27 code=0x7ffc0000 [ 95.124912][ T29] audit: type=1326 audit(1754285686.136:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b5fe4ad69 code=0x7ffc0000 [ 95.148169][ T29] audit: type=1326 audit(1754285686.136:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 95.171708][ T29] audit: type=1326 audit(1754285686.136:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 95.287417][ T6278] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 95.352496][ T6287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.798'. [ 95.393237][ T6292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.802'. [ 95.415180][ T6292] loop4: detected capacity change from 0 to 764 [ 95.427339][ T6292] rock: directory entry would overflow storage [ 95.433549][ T6292] rock: sig=0x4654, size=5, remaining=4 [ 95.456598][ T6294] netlink: 5 bytes leftover after parsing attributes in process `syz.0.805'. [ 95.466497][ T6292] rock: directory entry would overflow storage [ 95.472742][ T6292] rock: sig=0x4f50, size=4, remaining=3 [ 95.478452][ T6292] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 95.499472][ T6294] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 95.525085][ T6294] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 95.714984][ T6306] netlink: 32 bytes leftover after parsing attributes in process `syz.3.808'. [ 95.725077][ T4774] IPVS: starting estimator thread 0... [ 95.750120][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.811'. [ 95.752573][ T6313] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 95.793811][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 95.802835][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 95.834492][ T6308] IPVS: using max 2400 ests per chain, 120000 per kthread [ 95.871357][ T6318] bridge_slave_0: left allmulticast mode [ 95.877263][ T6318] bridge_slave_0: left promiscuous mode [ 95.883038][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.893510][ T6318] bridge_slave_1: left allmulticast mode [ 95.899405][ T6318] bridge_slave_1: left promiscuous mode [ 95.905162][ T6318] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.916182][ T6318] bond0: (slave bond_slave_0): Releasing backup interface [ 95.924331][ T6318] bond_slave_0: left promiscuous mode [ 95.930000][ T6318] bond_slave_0: left allmulticast mode [ 95.938403][ T6318] bond0: (slave bond_slave_1): Releasing backup interface [ 95.946908][ T6318] bond_slave_1: left promiscuous mode [ 95.952446][ T6318] bond_slave_1: left allmulticast mode [ 95.965409][ T6318] team0: Port device team_slave_0 removed [ 95.974817][ T6318] team0: Port device team_slave_1 removed [ 95.981758][ T6318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.989230][ T6318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.151014][ T6348] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 96.246901][ T6362] FAULT_INJECTION: forcing a failure. [ 96.246901][ T6362] name failslab, interval 1, probability 0, space 0, times 0 [ 96.259783][ T6362] CPU: 0 UID: 0 PID: 6362 Comm: syz.0.831 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 96.259889][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.259906][ T6362] Call Trace: [ 96.259914][ T6362] [ 96.260001][ T6362] __dump_stack+0x1d/0x30 [ 96.260028][ T6362] dump_stack_lvl+0xe8/0x140 [ 96.260047][ T6362] dump_stack+0x15/0x1b [ 96.260089][ T6362] should_fail_ex+0x265/0x280 [ 96.260132][ T6362] should_failslab+0x8c/0xb0 [ 96.260165][ T6362] kmem_cache_alloc_node_noprof+0x57/0x320 [ 96.260196][ T6362] ? __alloc_skb+0x101/0x320 [ 96.260237][ T6362] __alloc_skb+0x101/0x320 [ 96.260276][ T6362] netlink_alloc_large_skb+0xba/0xf0 [ 96.260363][ T6362] netlink_sendmsg+0x3cf/0x6b0 [ 96.260401][ T6362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.260504][ T6362] __sock_sendmsg+0x145/0x180 [ 96.260550][ T6362] __sys_sendto+0x268/0x330 [ 96.260603][ T6362] __x64_sys_sendto+0x76/0x90 [ 96.260668][ T6362] x64_sys_call+0x2d05/0x2ff0 [ 96.260693][ T6362] do_syscall_64+0xd2/0x200 [ 96.260716][ T6362] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 96.260745][ T6362] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 96.260833][ T6362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.260861][ T6362] RIP: 0033:0x7fedc4a0eb69 [ 96.260880][ T6362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.260904][ T6362] RSP: 002b:00007fedc306f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 96.260927][ T6362] RAX: ffffffffffffffda RBX: 00007fedc4c35fa0 RCX: 00007fedc4a0eb69 [ 96.261004][ T6362] RDX: 0000000000000078 RSI: 0000200000000180 RDI: 0000000000000003 [ 96.261019][ T6362] RBP: 00007fedc306f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.261035][ T6362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.261050][ T6362] R13: 0000000000000000 R14: 00007fedc4c35fa0 R15: 00007ffe6a566d78 [ 96.261077][ T6362] [ 96.484590][ T6371] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 96.493099][ T6371] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 96.623854][ T6382] netlink: 'syz.3.836': attribute type 10 has an invalid length. [ 96.835003][ T6402] random: crng reseeded on system resumption [ 97.404998][ T6445] random: crng reseeded on system resumption [ 97.764082][ T6460] loop5: detected capacity change from 0 to 512 [ 97.771055][ T6460] EXT4-fs: Ignoring removed i_version option [ 97.780313][ T6460] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 97.846835][ T6460] EXT4-fs (loop5): 1 truncate cleaned up [ 97.853635][ T6460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.112303][ T6470] netlink: 'syz.4.871': attribute type 10 has an invalid length. [ 98.274736][ T6473] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 98.301375][ T6473] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 98.525230][ T6480] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 98.545728][ T6480] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 98.955801][ T6497] syz.1.878 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 99.028716][ T6504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.048405][ T6504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.065684][ T6504] FAULT_INJECTION: forcing a failure. [ 99.065684][ T6504] name failslab, interval 1, probability 0, space 0, times 0 [ 99.078458][ T6504] CPU: 1 UID: 0 PID: 6504 Comm: syz.1.881 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 99.078496][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.078510][ T6504] Call Trace: [ 99.078515][ T6504] [ 99.078523][ T6504] __dump_stack+0x1d/0x30 [ 99.078590][ T6504] dump_stack_lvl+0xe8/0x140 [ 99.078616][ T6504] dump_stack+0x15/0x1b [ 99.078707][ T6504] should_fail_ex+0x265/0x280 [ 99.078755][ T6504] should_failslab+0x8c/0xb0 [ 99.078785][ T6504] kmem_cache_alloc_noprof+0x50/0x310 [ 99.078841][ T6504] ? alloc_empty_file+0x76/0x200 [ 99.078910][ T6504] alloc_empty_file+0x76/0x200 [ 99.078956][ T6504] path_openat+0x68/0x2170 [ 99.078976][ T6504] ? _parse_integer_limit+0x170/0x190 [ 99.079106][ T6504] ? kstrtoull+0x111/0x140 [ 99.079148][ T6504] ? kstrtouint+0x76/0xc0 [ 99.079180][ T6504] do_filp_open+0x109/0x230 [ 99.079237][ T6504] do_sys_openat2+0xa6/0x110 [ 99.079280][ T6504] __x64_sys_openat+0xf2/0x120 [ 99.079344][ T6504] x64_sys_call+0x2e9c/0x2ff0 [ 99.079372][ T6504] do_syscall_64+0xd2/0x200 [ 99.079443][ T6504] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 99.079492][ T6504] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 99.079520][ T6504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.079546][ T6504] RIP: 0033:0x7f2b5feaeb69 [ 99.079560][ T6504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.079606][ T6504] RSP: 002b:00007f2b5e50f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 99.079637][ T6504] RAX: ffffffffffffffda RBX: 00007f2b600d5fa0 RCX: 00007f2b5feaeb69 [ 99.079654][ T6504] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 99.079688][ T6504] RBP: 00007f2b5e50f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.079703][ T6504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.079714][ T6504] R13: 0000000000000000 R14: 00007f2b600d5fa0 R15: 00007ffda2a61228 [ 99.079741][ T6504] [ 99.309827][ T5796] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.372150][ T6507] __nla_validate_parse: 37 callbacks suppressed [ 99.372172][ T6507] netlink: 5 bytes leftover after parsing attributes in process `syz.0.883'. [ 99.397146][ T6507] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 99.409731][ T6507] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 99.448790][ T6514] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 99.523456][ T6516] netlink: 'syz.4.886': attribute type 11 has an invalid length. [ 99.531293][ T6516] netlink: 36 bytes leftover after parsing attributes in process `syz.4.886'. [ 99.544263][ T6516] syz.4.886 (6516): attempted to duplicate a private mapping with mremap. This is not supported. [ 99.593122][ T6525] netlink: 76 bytes leftover after parsing attributes in process `syz.4.889'. [ 99.630096][ T6528] netlink: 'syz.0.890': attribute type 10 has an invalid length. [ 99.642471][ T6530] netlink: 5 bytes leftover after parsing attributes in process `syz.4.891'. [ 99.651657][ T6530] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 99.660242][ T6530] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 99.846174][ T6546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.858617][ T6546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.928157][ T6550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.899'. [ 100.409366][ T6574] netlink: 5 bytes leftover after parsing attributes in process `syz.1.908'. [ 100.419929][ T6574] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 100.428318][ T6574] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 100.548062][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 100.548139][ T29] audit: type=1326 audit(1754285691.746:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 100.577759][ T29] audit: type=1326 audit(1754285691.746:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 100.603103][ T29] audit: type=1326 audit(1754285691.796:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 100.626530][ T29] audit: type=1326 audit(1754285691.796:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 100.649967][ T29] audit: type=1326 audit(1754285691.796:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 100.675540][ T29] audit: type=1326 audit(1754285691.876:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 100.709447][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 100.748357][ T29] audit: type=1326 audit(1754285691.926:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 100.767673][ T6602] capability: warning: `syz.3.920' uses 32-bit capabilities (legacy support in use) [ 100.771801][ T29] audit: type=1326 audit(1754285691.926:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 100.932918][ T6624] netlink: 5 bytes leftover after parsing attributes in process `syz.1.929'. [ 100.942738][ T6624] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 100.953459][ T6624] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 101.091858][ T29] audit: type=1326 audit(1754285692.286:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6623 comm="syz.1.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 101.115275][ T29] audit: type=1326 audit(1754285692.286:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6623 comm="syz.1.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 101.498626][ T6640] random: crng reseeded on system resumption [ 101.553848][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'. [ 101.935443][ T6652] netlink: 5 bytes leftover after parsing attributes in process `syz.5.936'. [ 101.954752][ T6644] netlink: 'syz.0.933': attribute type 2 has an invalid length. [ 101.975435][ T6652] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 102.002683][ T6652] 0ªî{X¹¦: entered allmulticast mode [ 102.026115][ T6652] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 102.102285][ T6667] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 102.111708][ T6667] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 102.260691][ T6674] random: crng reseeded on system resumption [ 102.380270][ T6680] netlink: 'syz.3.947': attribute type 10 has an invalid length. [ 102.422525][ T6681] FAULT_INJECTION: forcing a failure. [ 102.422525][ T6681] name failslab, interval 1, probability 0, space 0, times 0 [ 102.435273][ T6681] CPU: 0 UID: 0 PID: 6681 Comm: syz.1.946 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 102.435311][ T6681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.435327][ T6681] Call Trace: [ 102.435335][ T6681] [ 102.435343][ T6681] __dump_stack+0x1d/0x30 [ 102.435370][ T6681] dump_stack_lvl+0xe8/0x140 [ 102.435488][ T6681] dump_stack+0x15/0x1b [ 102.435504][ T6681] should_fail_ex+0x265/0x280 [ 102.435620][ T6681] ? cgroup_pidlist_start+0x46e/0x820 [ 102.435670][ T6681] should_failslab+0x8c/0xb0 [ 102.435737][ T6681] __kmalloc_cache_noprof+0x4c/0x320 [ 102.435773][ T6681] cgroup_pidlist_start+0x46e/0x820 [ 102.435826][ T6681] cgroup_seqfile_start+0x58/0x70 [ 102.435853][ T6681] kernfs_seq_start+0x83/0x130 [ 102.435946][ T6681] traverse+0xec/0x3a0 [ 102.436026][ T6681] seq_read_iter+0x853/0x940 [ 102.436063][ T6681] ? _parse_integer_limit+0x170/0x190 [ 102.436104][ T6681] ? _parse_integer+0x27/0x40 [ 102.436216][ T6681] kernfs_fop_read_iter+0xc4/0x300 [ 102.436317][ T6681] ? __import_iovec+0x321/0x540 [ 102.436351][ T6681] do_iter_readv_writev+0x421/0x4c0 [ 102.436420][ T6681] vfs_readv+0x1ea/0x690 [ 102.436464][ T6681] __x64_sys_preadv+0xfd/0x1c0 [ 102.436493][ T6681] x64_sys_call+0x282a/0x2ff0 [ 102.436562][ T6681] do_syscall_64+0xd2/0x200 [ 102.436591][ T6681] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 102.436646][ T6681] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 102.436669][ T6681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.436698][ T6681] RIP: 0033:0x7f2b5feaeb69 [ 102.436714][ T6681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.436733][ T6681] RSP: 002b:00007f2b5e4ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 102.436750][ T6681] RAX: ffffffffffffffda RBX: 00007f2b600d6080 RCX: 00007f2b5feaeb69 [ 102.436762][ T6681] RDX: 0000000000000004 RSI: 0000200000000400 RDI: 000000000000000d [ 102.436801][ T6681] RBP: 00007f2b5e4ee090 R08: 00000000000000cb R09: 0000000000000000 [ 102.436816][ T6681] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 102.436832][ T6681] R13: 0000000000000000 R14: 00007f2b600d6080 R15: 00007ffda2a61228 [ 102.436858][ T6681] [ 103.173193][ T6722] loop5: detected capacity change from 0 to 128 [ 103.207246][ T6722] netlink: 'syz.5.961': attribute type 11 has an invalid length. [ 103.266879][ T6725] IPv6: addrconf: prefix option has invalid lifetime [ 103.517294][ T6742] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 103.746919][ T6752] netlink: 'syz.4.974': attribute type 10 has an invalid length. [ 103.847533][ T6765] netlink: 'syz.0.976': attribute type 11 has an invalid length. [ 104.321780][ T6782] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 104.339455][ T6782] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 104.424659][ T6786] netlink: 'syz.4.987': attribute type 10 has an invalid length. [ 105.178117][ T6804] __nla_validate_parse: 20 callbacks suppressed [ 105.178134][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.994'. [ 105.360188][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.995'. [ 105.369084][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.995'. [ 105.672293][ T6815] netlink: 5 bytes leftover after parsing attributes in process `syz.0.998'. [ 105.682389][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 105.682401][ T29] audit: type=1326 audit(1754285696.886:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6810 comm="syz.5.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 105.726549][ T6815] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 105.739352][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.995'. [ 105.773984][ T6815] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 105.815827][ T29] audit: type=1326 audit(1754285696.956:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.0.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc4a0eb69 code=0x7ffc0000 [ 105.839302][ T29] audit: type=1326 audit(1754285696.956:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.0.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc4a0eb69 code=0x7ffc0000 [ 105.862773][ T29] audit: type=1326 audit(1754285696.956:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.0.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedc4a0eb69 code=0x7ffc0000 [ 105.886194][ T29] audit: type=1326 audit(1754285696.956:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.0.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc4a0eb69 code=0x7ffc0000 [ 105.909517][ T29] audit: type=1326 audit(1754285696.956:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.0.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc4a0eb69 code=0x7ffc0000 [ 105.932913][ T29] audit: type=1326 audit(1754285696.956:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.0.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fedc4a0eb69 code=0x7ffc0000 [ 105.956387][ T29] audit: type=1326 audit(1754285696.956:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.0.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc4a0eb69 code=0x7ffc0000 [ 105.979703][ T29] audit: type=1326 audit(1754285696.956:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.0.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fedc4a0eb69 code=0x7ffc0000 [ 106.002932][ T29] audit: type=1326 audit(1754285696.956:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.0.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc4a0eb69 code=0x7ffc0000 [ 106.280189][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.995'. [ 106.289070][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.995'. [ 106.324249][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.995'. [ 106.359583][ T6835] netlink: 'syz.0.1005': attribute type 10 has an invalid length. [ 106.437706][ T6839] 9pnet_fd: Insufficient options for proto=fd [ 106.515805][ T6853] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1012'. [ 106.770884][ T6871] netlink: 'syz.5.1021': attribute type 10 has an invalid length. [ 106.800431][ T6873] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1022'. [ 106.976394][ T6883] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 106.999865][ T6883] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 107.443609][ T6907] netlink: 'syz.4.1033': attribute type 11 has an invalid length. [ 108.120527][ T6918] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 108.393234][ T6937] netlink: 'syz.4.1045': attribute type 11 has an invalid length. [ 108.700017][ T6972] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 109.257428][ T6996] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 109.266716][ T6996] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 109.299817][ T6998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=6998 comm=syz.5.1066 [ 109.535181][ T7012] 9pnet_fd: Insufficient options for proto=fd [ 110.473112][ T7051] FAULT_INJECTION: forcing a failure. [ 110.473112][ T7051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.486449][ T7051] CPU: 0 UID: 0 PID: 7051 Comm: syz.4.1083 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 110.486526][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.486540][ T7051] Call Trace: [ 110.486545][ T7051] [ 110.486552][ T7051] __dump_stack+0x1d/0x30 [ 110.486624][ T7051] dump_stack_lvl+0xe8/0x140 [ 110.486649][ T7051] dump_stack+0x15/0x1b [ 110.486664][ T7051] should_fail_ex+0x265/0x280 [ 110.486740][ T7051] should_fail+0xb/0x20 [ 110.486812][ T7051] should_fail_usercopy+0x1a/0x20 [ 110.486831][ T7051] _copy_to_user+0x20/0xa0 [ 110.486863][ T7051] copy_siginfo_to_user+0x22/0xb0 [ 110.486890][ T7051] x64_setup_rt_frame+0x2b5/0x580 [ 110.486916][ T7051] arch_do_signal_or_restart+0x27c/0x480 [ 110.486950][ T7051] exit_to_user_mode_loop+0x7a/0x100 [ 110.487035][ T7051] do_syscall_64+0x1d6/0x200 [ 110.487147][ T7051] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 110.487176][ T7051] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 110.487199][ T7051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.487268][ T7051] RIP: 0033:0x7f9e3f15eb67 [ 110.487287][ T7051] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 110.487309][ T7051] RSP: 002b:00007f9e3d7c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 110.487412][ T7051] RAX: 0000000000000013 RBX: 00007f9e3f385fa0 RCX: 00007f9e3f15eb69 [ 110.487425][ T7051] RDX: 0000000000000001 RSI: 0000200000001340 RDI: 0000000000000003 [ 110.487445][ T7051] RBP: 00007f9e3d7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.487495][ T7051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.487511][ T7051] R13: 0000000000000000 R14: 00007f9e3f385fa0 R15: 00007ffee6bfcc18 [ 110.487536][ T7051] [ 110.695943][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 110.695962][ T29] audit: type=1326 audit(1754285701.896:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7057 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c07deeb69 code=0x7ffc0000 [ 110.725781][ T29] audit: type=1326 audit(1754285701.896:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7057 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c07deeb69 code=0x7ffc0000 [ 110.759927][ T29] audit: type=1326 audit(1754285701.946:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7057 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6c07deeb69 code=0x7ffc0000 [ 110.783555][ T29] audit: type=1326 audit(1754285701.946:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7057 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c07deeb69 code=0x7ffc0000 [ 110.807018][ T29] audit: type=1326 audit(1754285701.946:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7057 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c07ded4d0 code=0x7ffc0000 [ 110.809154][ T7058] netlink: 'syz.3.1087': attribute type 11 has an invalid length. [ 110.830619][ T29] audit: type=1326 audit(1754285701.946:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7057 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6c07df0397 code=0x7ffc0000 [ 110.830666][ T29] audit: type=1326 audit(1754285701.946:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7057 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c07deeb69 code=0x7ffc0000 [ 110.838549][ T7058] __nla_validate_parse: 23 callbacks suppressed [ 110.838565][ T7058] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1087'. [ 110.900780][ T29] audit: type=1326 audit(1754285701.946:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7057 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6c07df0397 code=0x7ffc0000 [ 110.924208][ T29] audit: type=1326 audit(1754285701.946:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7057 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6c07ded7ca code=0x7ffc0000 [ 110.947490][ T29] audit: type=1326 audit(1754285701.946:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7057 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c07deeb69 code=0x7ffc0000 [ 110.976997][ T7060] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.1088'. [ 111.073035][ T7072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1092'. [ 111.118012][ T7072] netlink: 'syz.1.1092': attribute type 10 has an invalid length. [ 111.127330][ T7072] ipvlan0: entered allmulticast mode [ 111.132759][ T7072] veth0_vlan: entered allmulticast mode [ 111.139411][ T7072] team0: Device ipvlan0 failed to register rx_handler [ 111.483207][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1096'. [ 111.553031][ T7088] netlink: 'syz.5.1097': attribute type 10 has an invalid length. [ 112.183922][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'. [ 112.235641][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1098'. [ 112.597697][ T7089] pim6reg1: entered promiscuous mode [ 112.603075][ T7089] pim6reg1: entered allmulticast mode [ 112.656184][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1102'. [ 112.674224][ T7113] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 112.760261][ T7127] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1109'. [ 113.297628][ T7150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1118'. [ 113.771936][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'. [ 113.791588][ T7169] netlink: 'syz.4.1124': attribute type 11 has an invalid length. [ 113.920401][ T7178] netlink: 'syz.0.1129': attribute type 11 has an invalid length. [ 114.080890][ T7188] random: crng reseeded on system resumption [ 114.602355][ T7225] netlink: 'syz.1.1150': attribute type 10 has an invalid length. [ 114.784818][ T7243] netlink: 'syz.0.1158': attribute type 10 has an invalid length. [ 115.006874][ T7251] 9pnet_fd: Insufficient options for proto=fd [ 115.817447][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 115.817516][ T29] audit: type=1400 audit(1754285707.016:4153): avc: denied { map } for pid=7285 comm="syz.5.1174" path="socket:[17395]" dev="sockfs" ino=17395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.896091][ T7289] __nla_validate_parse: 12 callbacks suppressed [ 115.896112][ T7289] netlink: 197276 bytes leftover after parsing attributes in process `syz.5.1175'. [ 115.991360][ T7292] 9pnet_fd: Insufficient options for proto=fd [ 116.303054][ T29] audit: type=1326 audit(1754285707.496:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6c07de5b27 code=0x7ffc0000 [ 116.326717][ T29] audit: type=1326 audit(1754285707.496:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c07d8ad69 code=0x7ffc0000 [ 116.350369][ T29] audit: type=1326 audit(1754285707.496:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6c07de5b27 code=0x7ffc0000 [ 116.373891][ T29] audit: type=1326 audit(1754285707.496:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c07d8ad69 code=0x7ffc0000 [ 116.397380][ T29] audit: type=1326 audit(1754285707.496:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c07deeb69 code=0x7ffc0000 [ 116.516937][ T7302] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.1180'. [ 116.766181][ T29] audit: type=1326 audit(1754285707.626:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6c07deeb69 code=0x7ffc0000 [ 116.789700][ T29] audit: type=1326 audit(1754285707.636:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7300 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6c07e21425 code=0x7ffc0000 [ 116.813851][ T29] audit: type=1326 audit(1754285707.636:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6c07de5b27 code=0x7ffc0000 [ 116.837266][ T29] audit: type=1326 audit(1754285707.636:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c07d8ad69 code=0x7ffc0000 [ 117.241294][ T7340] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1195'. [ 117.275124][ T7342] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 117.825697][ T7351] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1199'. [ 117.964292][ T7351] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 117.972595][ T7351] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 118.426654][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1206'. [ 118.460524][ T7382] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.1212'. [ 118.485765][ T7383] netlink: 'syz.0.1209': attribute type 11 has an invalid length. [ 118.493656][ T7383] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1209'. [ 118.583801][ T7399] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 118.693019][ T7407] 9pnet_fd: Insufficient options for proto=fd [ 118.856556][ T7416] 9pnet_fd: Insufficient options for proto=fd [ 119.156101][ T7439] 9pnet_fd: Insufficient options for proto=fd [ 119.232743][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1237'. [ 119.378567][ T7464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1240'. [ 119.407437][ T7470] sg_write: data in/out 2162651/120 bytes for SCSI command 0x0-- guessing data in; [ 119.407437][ T7470] program syz.5.1243 not setting count and/or reply_len properly [ 119.483634][ T7480] loop9: detected capacity change from 0 to 7 [ 119.491285][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.501096][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.509041][ T3294] loop9: unable to read partition table [ 119.515590][ T7480] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.523505][ T7480] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.531479][ T7480] loop9: unable to read partition table [ 119.538532][ T7480] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 119.538532][ T7480] ) failed (rc=-5) [ 119.552286][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.560292][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.569310][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.577493][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.594561][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.630815][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1255'. [ 119.640599][ T7497] hsr_slave_0: left promiscuous mode [ 119.648198][ T7497] hsr_slave_1: left promiscuous mode [ 119.686029][ T7500] block device autoloading is deprecated and will be removed. [ 120.378341][ T7519] loop3: detected capacity change from 0 to 512 [ 120.386448][ T7519] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.411625][ T7519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.424678][ T7519] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.458356][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.471017][ T7524] FAULT_INJECTION: forcing a failure. [ 120.471017][ T7524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.484306][ T7524] CPU: 0 UID: 0 PID: 7524 Comm: syz.0.1266 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 120.484340][ T7524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.484355][ T7524] Call Trace: [ 120.484362][ T7524] [ 120.484369][ T7524] __dump_stack+0x1d/0x30 [ 120.484401][ T7524] dump_stack_lvl+0xe8/0x140 [ 120.484488][ T7524] dump_stack+0x15/0x1b [ 120.484509][ T7524] should_fail_ex+0x265/0x280 [ 120.484556][ T7524] should_fail+0xb/0x20 [ 120.484599][ T7524] should_fail_usercopy+0x1a/0x20 [ 120.484684][ T7524] _copy_from_user+0x1c/0xb0 [ 120.484751][ T7524] ___sys_sendmsg+0xc1/0x1d0 [ 120.484817][ T7524] __x64_sys_sendmsg+0xd4/0x160 [ 120.484981][ T7524] x64_sys_call+0x191e/0x2ff0 [ 120.485009][ T7524] do_syscall_64+0xd2/0x200 [ 120.485038][ T7524] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 120.485066][ T7524] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 120.485087][ T7524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.485150][ T7524] RIP: 0033:0x7fedc4a0eb69 [ 120.485169][ T7524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.485191][ T7524] RSP: 002b:00007fedc306f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.485211][ T7524] RAX: ffffffffffffffda RBX: 00007fedc4c35fa0 RCX: 00007fedc4a0eb69 [ 120.485226][ T7524] RDX: 0000000010000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 120.485242][ T7524] RBP: 00007fedc306f090 R08: 0000000000000000 R09: 0000000000000000 [ 120.485258][ T7524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.485311][ T7524] R13: 0000000000000000 R14: 00007fedc4c35fa0 R15: 00007ffe6a566d78 [ 120.485336][ T7524] [ 120.719910][ T7530] hsr_slave_0: left promiscuous mode [ 120.725804][ T7530] hsr_slave_1: left promiscuous mode [ 120.743002][ T7528] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 120.774308][ T7531] program syz.4.1267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.814811][ T7536] FAULT_INJECTION: forcing a failure. [ 120.814811][ T7536] name failslab, interval 1, probability 0, space 0, times 0 [ 120.827701][ T7536] CPU: 0 UID: 0 PID: 7536 Comm: syz.1.1271 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 120.827732][ T7536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.827744][ T7536] Call Trace: [ 120.827831][ T7536] [ 120.827855][ T7536] __dump_stack+0x1d/0x30 [ 120.827894][ T7536] dump_stack_lvl+0xe8/0x140 [ 120.827915][ T7536] dump_stack+0x15/0x1b [ 120.827936][ T7536] should_fail_ex+0x265/0x280 [ 120.828006][ T7536] should_failslab+0x8c/0xb0 [ 120.828032][ T7536] __kmalloc_noprof+0xa5/0x3e0 [ 120.828102][ T7536] ? cond_policydb_dup+0xa3/0x4e0 [ 120.828155][ T7536] cond_policydb_dup+0xa3/0x4e0 [ 120.828183][ T7536] security_set_bools+0xa0/0x340 [ 120.828207][ T7536] sel_commit_bools_write+0x1ea/0x270 [ 120.828238][ T7536] vfs_writev+0x403/0x8b0 [ 120.828274][ T7536] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 120.828353][ T7536] ? mutex_lock+0xd/0x30 [ 120.828387][ T7536] do_writev+0xe7/0x210 [ 120.828415][ T7536] __x64_sys_writev+0x45/0x50 [ 120.828538][ T7536] x64_sys_call+0x1e9a/0x2ff0 [ 120.828566][ T7536] do_syscall_64+0xd2/0x200 [ 120.828607][ T7536] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 120.828676][ T7536] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 120.828699][ T7536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.828721][ T7536] RIP: 0033:0x7f2b5feaeb69 [ 120.828737][ T7536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.828788][ T7536] RSP: 002b:00007f2b5e50f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 120.828810][ T7536] RAX: ffffffffffffffda RBX: 00007f2b600d5fa0 RCX: 00007f2b5feaeb69 [ 120.828879][ T7536] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000006 [ 120.828891][ T7536] RBP: 00007f2b5e50f090 R08: 0000000000000000 R09: 0000000000000000 [ 120.828902][ T7536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.828914][ T7536] R13: 0000000000000000 R14: 00007f2b600d5fa0 R15: 00007ffda2a61228 [ 120.828934][ T7536] [ 121.093084][ T7549] loop3: detected capacity change from 0 to 512 [ 121.105621][ T7549] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.178758][ T7549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.191448][ T7549] ext4 filesystem being mounted at /248/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.225732][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.413533][ T7559] FAULT_INJECTION: forcing a failure. [ 121.413533][ T7559] name failslab, interval 1, probability 0, space 0, times 0 [ 121.426460][ T7559] CPU: 0 UID: 0 PID: 7559 Comm: syz.0.1279 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 121.426493][ T7559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.426506][ T7559] Call Trace: [ 121.426511][ T7559] [ 121.426518][ T7559] __dump_stack+0x1d/0x30 [ 121.426570][ T7559] dump_stack_lvl+0xe8/0x140 [ 121.426709][ T7559] dump_stack+0x15/0x1b [ 121.426737][ T7559] should_fail_ex+0x265/0x280 [ 121.426781][ T7559] should_failslab+0x8c/0xb0 [ 121.426812][ T7559] kmem_cache_alloc_noprof+0x50/0x310 [ 121.426840][ T7559] ? getname_kernel+0x3c/0x1f0 [ 121.426930][ T7559] getname_kernel+0x3c/0x1f0 [ 121.427008][ T7559] kern_path+0x23/0x130 [ 121.427038][ T7559] autofs_dev_ioctl_openmount+0x9d/0x290 [ 121.427124][ T7559] ? __pfx_autofs_dev_ioctl_openmount+0x10/0x10 [ 121.427212][ T7559] autofs_dev_ioctl+0x351/0x6a0 [ 121.427243][ T7559] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 121.427279][ T7559] __se_sys_ioctl+0xcb/0x140 [ 121.427321][ T7559] __x64_sys_ioctl+0x43/0x50 [ 121.427352][ T7559] x64_sys_call+0x1816/0x2ff0 [ 121.427379][ T7559] do_syscall_64+0xd2/0x200 [ 121.427464][ T7559] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 121.427487][ T7559] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 121.427560][ T7559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.427589][ T7559] RIP: 0033:0x7fedc4a0eb69 [ 121.427607][ T7559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.427625][ T7559] RSP: 002b:00007fedc306f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.427643][ T7559] RAX: ffffffffffffffda RBX: 00007fedc4c35fa0 RCX: 00007fedc4a0eb69 [ 121.427656][ T7559] RDX: 0000200000000240 RSI: 00000000c0189374 RDI: 0000000000000005 [ 121.427672][ T7559] RBP: 00007fedc306f090 R08: 0000000000000000 R09: 0000000000000000 [ 121.427758][ T7559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.427771][ T7559] R13: 0000000000000000 R14: 00007fedc4c35fa0 R15: 00007ffe6a566d78 [ 121.427794][ T7559] [ 121.720913][ T7565] __nla_validate_parse: 1 callbacks suppressed [ 121.720928][ T7565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1281'. [ 121.736476][ T7565] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1281'. [ 121.748744][ T7565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1281'. [ 121.758088][ T7565] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1281'. [ 121.767344][ T7565] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1281'. [ 121.795962][ T7569] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 121.868111][ T7575] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1286'. [ 121.873569][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 121.873589][ T29] audit: type=1326 audit(1754285713.066:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7578 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3f15eb69 code=0x7ffc0000 [ 121.912205][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 121.940529][ T29] audit: type=1326 audit(1754285713.106:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7576 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c07deeb69 code=0x7ffc0000 [ 121.964075][ T29] audit: type=1326 audit(1754285713.106:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7576 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c07deeb69 code=0x7ffc0000 [ 121.967758][ T7580] loop3: detected capacity change from 0 to 512 [ 121.987886][ T29] audit: type=1326 audit(1754285713.106:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7576 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c07deeb69 code=0x7ffc0000 [ 122.017622][ T29] audit: type=1326 audit(1754285713.106:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7576 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c07deeb69 code=0x7ffc0000 [ 122.041174][ T29] audit: type=1326 audit(1754285713.106:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7576 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c07deeb69 code=0x7ffc0000 [ 122.062815][ T7580] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.064824][ T29] audit: type=1326 audit(1754285713.106:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7576 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c07deeb69 code=0x7ffc0000 [ 122.073894][ T7580] EXT4-fs (loop3): blocks per group (64) and clusters per group (32768) inconsistent [ 122.097272][ T29] audit: type=1326 audit(1754285713.106:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7576 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c07deeb69 code=0x7ffc0000 [ 122.097319][ T29] audit: type=1326 audit(1754285713.106:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7576 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c07deeb69 code=0x7ffc0000 [ 122.097352][ T29] audit: type=1326 audit(1754285713.106:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7576 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c07deeb69 code=0x7ffc0000 [ 122.198239][ T7579] netlink: 'syz.4.1287': attribute type 11 has an invalid length. [ 122.206292][ T7579] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1287'. [ 122.282758][ T7590] netlink: 'syz.1.1289': attribute type 1 has an invalid length. [ 122.308848][ T7590] 8021q: adding VLAN 0 to HW filter on device bond8 [ 122.330261][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1291'. [ 122.371991][ T7590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.385372][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1291'. [ 122.436048][ T7590] bond8: (slave batadv0): making interface the new active one [ 122.475087][ T7590] bond8: (slave batadv0): Enslaving as an active interface with an up link [ 122.577504][ T7603] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 122.820163][ T7641] 9pnet_fd: Insufficient options for proto=fd [ 123.146442][ T7662] hsr_slave_0: left promiscuous mode [ 123.152427][ T7662] hsr_slave_1: left promiscuous mode [ 123.256005][ T7665] loop3: detected capacity change from 0 to 512 [ 123.262738][ T7665] EXT4-fs: Ignoring removed nobh option [ 123.270622][ T7665] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1319: bg 0: block 393: padding at end of block bitmap is not set [ 123.287442][ T7665] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 123.296747][ T7665] EXT4-fs (loop3): 2 truncates cleaned up [ 123.303144][ T7665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.378261][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.605546][ T7675] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 123.786158][ T7697] netlink: 'syz.0.1329': attribute type 11 has an invalid length. [ 123.815941][ T7700] FAULT_INJECTION: forcing a failure. [ 123.815941][ T7700] name failslab, interval 1, probability 0, space 0, times 0 [ 123.828695][ T7700] CPU: 1 UID: 0 PID: 7700 Comm: syz.0.1330 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 123.828757][ T7700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.828768][ T7700] Call Trace: [ 123.828774][ T7700] [ 123.828781][ T7700] __dump_stack+0x1d/0x30 [ 123.828801][ T7700] dump_stack_lvl+0xe8/0x140 [ 123.828818][ T7700] dump_stack+0x15/0x1b [ 123.828832][ T7700] should_fail_ex+0x265/0x280 [ 123.828943][ T7700] should_failslab+0x8c/0xb0 [ 123.828967][ T7700] kmem_cache_alloc_noprof+0x50/0x310 [ 123.828994][ T7700] ? sctp_get_port_local+0x438/0xae0 [ 123.829092][ T7700] sctp_get_port_local+0x438/0xae0 [ 123.829123][ T7700] sctp_do_bind+0x398/0x4b0 [ 123.829177][ T7700] sctp_connect_new_asoc+0x153/0x3a0 [ 123.829213][ T7700] sctp_sendmsg+0xf10/0x18d0 [ 123.829240][ T7700] ? selinux_socket_sendmsg+0xb1/0x1b0 [ 123.829268][ T7700] ? __pfx_sctp_sendmsg+0x10/0x10 [ 123.829291][ T7700] inet_sendmsg+0xc5/0xd0 [ 123.829343][ T7700] __sock_sendmsg+0x102/0x180 [ 123.829379][ T7700] ____sys_sendmsg+0x345/0x4e0 [ 123.829421][ T7700] ___sys_sendmsg+0x17b/0x1d0 [ 123.829547][ T7700] __sys_sendmmsg+0x178/0x300 [ 123.829665][ T7700] __x64_sys_sendmmsg+0x57/0x70 [ 123.829697][ T7700] x64_sys_call+0x1c4a/0x2ff0 [ 123.829716][ T7700] do_syscall_64+0xd2/0x200 [ 123.829737][ T7700] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 123.829821][ T7700] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 123.829839][ T7700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.829866][ T7700] RIP: 0033:0x7fedc4a0eb69 [ 123.829885][ T7700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.829911][ T7700] RSP: 002b:00007fedc306f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 123.829967][ T7700] RAX: ffffffffffffffda RBX: 00007fedc4c35fa0 RCX: 00007fedc4a0eb69 [ 123.829978][ T7700] RDX: 0000000000000002 RSI: 0000200000000580 RDI: 0000000000000006 [ 123.829989][ T7700] RBP: 00007fedc306f090 R08: 0000000000000000 R09: 0000000000000000 [ 123.830027][ T7700] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 123.830037][ T7700] R13: 0000000000000000 R14: 00007fedc4c35fa0 R15: 00007ffe6a566d78 [ 123.830056][ T7700] [ 124.082737][ T7702] netlink: 'syz.1.1331': attribute type 10 has an invalid length. [ 124.091175][ T7702] team0: Device hsr_slave_0 failed to register rx_handler [ 124.340290][ T7731] bond8: (slave batadv0): Releasing active interface [ 124.347487][ T7727] loop3: detected capacity change from 0 to 8192 [ 124.421043][ T7735] netlink: 'syz.5.1344': attribute type 1 has an invalid length. [ 124.448946][ T7735] bond1: entered promiscuous mode [ 124.454418][ T7735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.689862][ T7748] random: crng reseeded on system resumption [ 124.742028][ T7735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=7735 comm=syz.5.1344 [ 124.853854][ T7761] 9pnet_fd: Insufficient options for proto=fd [ 125.043508][ T7776] netlink: 'syz.5.1361': attribute type 10 has an invalid length. [ 125.064751][ T7776] team0: Device hsr_slave_0 failed to register rx_handler [ 125.298818][ T7789] 9pnet_fd: Insufficient options for proto=fd [ 125.437632][ T7794] random: crng reseeded on system resumption [ 125.637247][ T7804] loop3: detected capacity change from 0 to 1024 [ 125.651345][ T7804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.679480][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.747934][ T7810] smc: net device bond0 applied user defined pnetid SYZ1 [ 125.757002][ T7810] smc: net device bond0 erased user defined pnetid SYZ1 [ 125.927295][ T7823] netlink: 'syz.0.1378': attribute type 10 has an invalid length. [ 125.940754][ T7823] team0: Port device hsr_slave_0 added [ 126.049458][ T7829] netlink: 'syz.4.1380': attribute type 11 has an invalid length. [ 126.337975][ T7860] FAULT_INJECTION: forcing a failure. [ 126.337975][ T7860] name failslab, interval 1, probability 0, space 0, times 0 [ 126.350752][ T7860] CPU: 0 UID: 0 PID: 7860 Comm: syz.1.1391 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 126.350798][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.350814][ T7860] Call Trace: [ 126.350822][ T7860] [ 126.350831][ T7860] __dump_stack+0x1d/0x30 [ 126.350855][ T7860] dump_stack_lvl+0xe8/0x140 [ 126.350884][ T7860] dump_stack+0x15/0x1b [ 126.350917][ T7860] should_fail_ex+0x265/0x280 [ 126.350952][ T7860] ? __pfx_ip6_dst_gc+0x10/0x10 [ 126.350978][ T7860] should_failslab+0x8c/0xb0 [ 126.351042][ T7860] kmem_cache_alloc_noprof+0x50/0x310 [ 126.351073][ T7860] ? dst_alloc+0xbd/0x100 [ 126.351109][ T7860] ? __pfx_ip6_dst_gc+0x10/0x10 [ 126.351135][ T7860] dst_alloc+0xbd/0x100 [ 126.351180][ T7860] ip6_create_rt_rcu+0x109/0x2b0 [ 126.351335][ T7860] ip6_pol_route_lookup+0xcf6/0xf30 [ 126.351374][ T7860] ? __rcu_read_unlock+0x4f/0x70 [ 126.351476][ T7860] fib6_rule_lookup+0x3c6/0x470 [ 126.351517][ T7860] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 126.351598][ T7860] ? cred_has_capability+0x210/0x280 [ 126.351681][ T7860] rt6_lookup+0xbe/0x120 [ 126.351718][ T7860] ipv6_sock_ac_join+0x376/0x540 [ 126.351751][ T7860] do_ipv6_setsockopt+0x1938/0x2160 [ 126.351866][ T7860] ? kstrtoull+0x111/0x140 [ 126.351913][ T7860] ? avc_has_perm_noaudit+0x1b1/0x200 [ 126.351944][ T7860] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 126.351993][ T7860] ipv6_setsockopt+0x59/0x130 [ 126.352033][ T7860] udpv6_setsockopt+0x99/0xb0 [ 126.352117][ T7860] sock_common_setsockopt+0x66/0x80 [ 126.352142][ T7860] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 126.352176][ T7860] __sys_setsockopt+0x184/0x200 [ 126.352247][ T7860] __x64_sys_setsockopt+0x64/0x80 [ 126.352287][ T7860] x64_sys_call+0x20ec/0x2ff0 [ 126.352315][ T7860] do_syscall_64+0xd2/0x200 [ 126.352343][ T7860] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 126.352393][ T7860] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 126.352475][ T7860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.352543][ T7860] RIP: 0033:0x7f2b5feaeb69 [ 126.352563][ T7860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.352587][ T7860] RSP: 002b:00007f2b5e50f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 126.352611][ T7860] RAX: ffffffffffffffda RBX: 00007f2b600d5fa0 RCX: 00007f2b5feaeb69 [ 126.352627][ T7860] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000006 [ 126.352641][ T7860] RBP: 00007f2b5e50f090 R08: 0000000000000014 R09: 0000000000000000 [ 126.352728][ T7860] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.352744][ T7860] R13: 0000000000000000 R14: 00007f2b600d5fa0 R15: 00007ffda2a61228 [ 126.352809][ T7860] [ 126.428675][ T7864] netlink: 'syz.1.1393': attribute type 11 has an invalid length. [ 126.765283][ T7873] __nla_validate_parse: 26 callbacks suppressed [ 126.765304][ T7873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1395'. [ 126.951815][ T29] kauditd_printk_skb: 705 callbacks suppressed [ 126.951833][ T29] audit: type=1326 audit(1754285718.146:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.5.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 127.074178][ T29] audit: type=1326 audit(1754285718.146:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.5.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 127.097738][ T29] audit: type=1326 audit(1754285718.146:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.5.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 127.121312][ T29] audit: type=1326 audit(1754285718.146:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.5.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 127.145035][ T29] audit: type=1326 audit(1754285718.146:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.5.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 127.151975][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1400'. [ 127.168627][ T29] audit: type=1326 audit(1754285718.146:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.5.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 127.201166][ T29] audit: type=1326 audit(1754285718.146:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.5.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 127.201203][ T29] audit: type=1326 audit(1754285718.146:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.5.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 127.201278][ T29] audit: type=1326 audit(1754285718.196:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.0.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc4a0eb69 code=0x7ffc0000 [ 127.201314][ T29] audit: type=1326 audit(1754285718.196:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.0.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc4a0eb69 code=0x7ffc0000 [ 127.452894][ T7897] netlink: 'syz.4.1405': attribute type 11 has an invalid length. [ 127.460981][ T7897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1405'. [ 127.639923][ T7899] random: crng reseeded on system resumption [ 127.655548][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1406'. [ 127.784465][ T7910] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 127.893880][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1415'. [ 127.910698][ T7918] netlink: 'syz.4.1416': attribute type 11 has an invalid length. [ 127.918749][ T7918] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1416'. [ 128.034900][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'. [ 128.216994][ T7948] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 128.231738][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1425'. [ 128.409022][ T7958] netlink: 'syz.5.1430': attribute type 11 has an invalid length. [ 128.416968][ T7958] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1430'. [ 128.629823][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1434'. [ 128.694307][ T7976] 9pnet_fd: Insufficient options for proto=fd [ 128.876421][ T7990] netlink: 'syz.4.1441': attribute type 11 has an invalid length. [ 129.168800][ T8004] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 129.981595][ T8043] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 130.122249][ T8047] loop3: detected capacity change from 0 to 164 [ 130.196671][ T8055] 9pnet_fd: Insufficient options for proto=fd [ 130.329451][ T8066] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 130.353629][ T8047] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 131.123680][ T8077] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.168886][ T8077] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.217108][ T8077] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.270297][ T8099] loop3: detected capacity change from 0 to 512 [ 131.279781][ T8099] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 131.296534][ T8099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.309287][ T8099] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.326269][ T8077] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.347753][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.390724][ T5321] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.402500][ T5321] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.413432][ T5321] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.425309][ T5321] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.495930][ T8112] team0: Port device hsr_slave_0 removed [ 131.835879][ T8129] __nla_validate_parse: 10 callbacks suppressed [ 131.835897][ T8129] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1497'. [ 132.056202][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 132.056220][ T29] audit: type=1326 audit(1754285723.246:5693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8131 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 132.097979][ T29] audit: type=1326 audit(1754285723.286:5694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8131 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 132.121480][ T29] audit: type=1326 audit(1754285723.286:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8131 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 132.144963][ T29] audit: type=1326 audit(1754285723.286:5696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8131 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 132.269968][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1502'. [ 132.279079][ T8141] hsr_slave_0: left promiscuous mode [ 132.285082][ T8141] hsr_slave_1: left promiscuous mode [ 132.298525][ T8144] netlink: 'syz.1.1503': attribute type 1 has an invalid length. [ 132.315941][ T8144] bond9: entered promiscuous mode [ 132.343091][ T8144] 8021q: adding VLAN 0 to HW filter on device bond9 [ 132.426195][ T8147] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1504'. [ 132.515441][ T29] audit: type=1326 audit(1754285723.616:5697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8146 comm="syz.5.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 132.538908][ T29] audit: type=1326 audit(1754285723.616:5698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8146 comm="syz.5.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 132.562415][ T29] audit: type=1326 audit(1754285723.616:5699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8146 comm="syz.5.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 132.585860][ T29] audit: type=1326 audit(1754285723.616:5700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8146 comm="syz.5.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 132.609294][ T29] audit: type=1326 audit(1754285723.616:5701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8146 comm="syz.5.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 132.632812][ T29] audit: type=1326 audit(1754285723.616:5702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8146 comm="syz.5.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 132.874262][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1510'. [ 132.937856][ T8179] FAULT_INJECTION: forcing a failure. [ 132.937856][ T8179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.951224][ T8179] CPU: 0 UID: 0 PID: 8179 Comm: syz.5.1514 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 132.951269][ T8179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.951314][ T8179] Call Trace: [ 132.951322][ T8179] [ 132.951332][ T8179] __dump_stack+0x1d/0x30 [ 132.951402][ T8179] dump_stack_lvl+0xe8/0x140 [ 132.951428][ T8179] dump_stack+0x15/0x1b [ 132.951490][ T8179] should_fail_ex+0x265/0x280 [ 132.951603][ T8179] should_fail+0xb/0x20 [ 132.951640][ T8179] should_fail_usercopy+0x1a/0x20 [ 132.951719][ T8179] _copy_from_user+0x1c/0xb0 [ 132.951752][ T8179] do_handle_open+0x404/0x6b0 [ 132.951790][ T8179] __x64_sys_open_by_handle_at+0x44/0x50 [ 132.951845][ T8179] x64_sys_call+0x279b/0x2ff0 [ 132.951951][ T8179] do_syscall_64+0xd2/0x200 [ 132.951981][ T8179] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 132.952011][ T8179] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 132.952101][ T8179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.952130][ T8179] RIP: 0033:0x7f3002c6eb69 [ 132.952146][ T8179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.952246][ T8179] RSP: 002b:00007f30012d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 132.952265][ T8179] RAX: ffffffffffffffda RBX: 00007f3002e95fa0 RCX: 00007f3002c6eb69 [ 132.952277][ T8179] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 132.952289][ T8179] RBP: 00007f30012d7090 R08: 0000000000000000 R09: 0000000000000000 [ 132.952304][ T8179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.952319][ T8179] R13: 0000000000000000 R14: 00007f3002e95fa0 R15: 00007fffc56b7988 [ 132.952345][ T8179] [ 133.148674][ T8185] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1517'. [ 133.173456][ T8188] loop3: detected capacity change from 0 to 164 [ 133.190030][ T8188] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 133.205454][ T8188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1518'. [ 133.259298][ T8194] FAULT_INJECTION: forcing a failure. [ 133.259298][ T8194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.272385][ T8194] CPU: 0 UID: 0 PID: 8194 Comm: syz.3.1520 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 133.272412][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.272559][ T8194] Call Trace: [ 133.272565][ T8194] [ 133.272572][ T8194] __dump_stack+0x1d/0x30 [ 133.272591][ T8194] dump_stack_lvl+0xe8/0x140 [ 133.272608][ T8194] dump_stack+0x15/0x1b [ 133.272622][ T8194] should_fail_ex+0x265/0x280 [ 133.272660][ T8194] should_fail+0xb/0x20 [ 133.272686][ T8194] should_fail_usercopy+0x1a/0x20 [ 133.272703][ T8194] _copy_from_iter+0xcf/0xe40 [ 133.272722][ T8194] ? __build_skb_around+0x1a0/0x200 [ 133.272839][ T8194] ? __alloc_skb+0x223/0x320 [ 133.272867][ T8194] netlink_sendmsg+0x471/0x6b0 [ 133.272917][ T8194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.272946][ T8194] __sock_sendmsg+0x145/0x180 [ 133.272987][ T8194] ____sys_sendmsg+0x31e/0x4e0 [ 133.273020][ T8194] ___sys_sendmsg+0x17b/0x1d0 [ 133.273082][ T8194] __x64_sys_sendmsg+0xd4/0x160 [ 133.273117][ T8194] x64_sys_call+0x191e/0x2ff0 [ 133.273138][ T8194] do_syscall_64+0xd2/0x200 [ 133.273174][ T8194] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 133.273196][ T8194] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 133.273215][ T8194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.273234][ T8194] RIP: 0033:0x7f6c07deeb69 [ 133.273331][ T8194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.273355][ T8194] RSP: 002b:00007f6c0644f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.273378][ T8194] RAX: ffffffffffffffda RBX: 00007f6c08015fa0 RCX: 00007f6c07deeb69 [ 133.273389][ T8194] RDX: 0000000000000840 RSI: 00002000000002c0 RDI: 0000000000000007 [ 133.273400][ T8194] RBP: 00007f6c0644f090 R08: 0000000000000000 R09: 0000000000000000 [ 133.273411][ T8194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.273421][ T8194] R13: 0000000000000000 R14: 00007f6c08015fa0 R15: 00007ffcd6ecb268 [ 133.273451][ T8194] [ 133.535474][ T8190] netlink: zone id is out of range [ 133.540823][ T8190] netlink: zone id is out of range [ 133.546043][ T8190] netlink: zone id is out of range [ 133.551201][ T8190] netlink: zone id is out of range [ 133.558693][ T8190] netlink: zone id is out of range [ 133.575562][ T8190] netlink: zone id is out of range [ 133.592985][ T8190] netlink: zone id is out of range [ 133.605866][ T8204] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1522'. [ 133.639125][ T8190] netlink: zone id is out of range [ 133.648756][ T8190] netlink: zone id is out of range [ 133.653965][ T8190] netlink: zone id is out of range [ 133.833940][ T8235] loop3: detected capacity change from 0 to 1024 [ 133.900800][ T8235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.947849][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1539'. [ 133.964283][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.966194][ T8251] veth1_macvtap: left promiscuous mode [ 134.111229][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1546'. [ 134.221824][ T8279] loop3: detected capacity change from 0 to 256 [ 134.359942][ T8292] netlink: 'syz.5.1550': attribute type 11 has an invalid length. [ 134.368043][ T8292] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1550'. [ 134.542611][ T8311] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 134.697334][ T8324] FAULT_INJECTION: forcing a failure. [ 134.697334][ T8324] name failslab, interval 1, probability 0, space 0, times 0 [ 134.710227][ T8324] CPU: 0 UID: 0 PID: 8324 Comm: syz.5.1565 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 134.710280][ T8324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.710296][ T8324] Call Trace: [ 134.710303][ T8324] [ 134.710313][ T8324] __dump_stack+0x1d/0x30 [ 134.710372][ T8324] dump_stack_lvl+0xe8/0x140 [ 134.710391][ T8324] dump_stack+0x15/0x1b [ 134.710406][ T8324] should_fail_ex+0x265/0x280 [ 134.710571][ T8324] should_failslab+0x8c/0xb0 [ 134.710603][ T8324] kmem_cache_alloc_node_noprof+0x57/0x320 [ 134.710642][ T8324] ? __alloc_skb+0x101/0x320 [ 134.710731][ T8324] __alloc_skb+0x101/0x320 [ 134.710763][ T8324] alloc_skb_with_frags+0x7d/0x470 [ 134.710805][ T8324] ? ref_tracker_alloc+0x1f2/0x2f0 [ 134.710921][ T8324] sock_alloc_send_pskb+0x43a/0x4f0 [ 134.710958][ T8324] ? __rcu_read_unlock+0x4f/0x70 [ 134.710981][ T8324] ? perf_callchain_user+0xae0/0xb50 [ 134.711021][ T8324] ? __rcu_read_unlock+0x4f/0x70 [ 134.711082][ T8324] packet_sendmsg+0x222b/0x31f0 [ 134.711127][ T8324] ? avc_has_perm+0xf7/0x180 [ 134.711159][ T8324] ? selinux_socket_sendmsg+0x175/0x1b0 [ 134.711313][ T8324] ? __pfx_packet_sendmsg+0x10/0x10 [ 134.711344][ T8324] __sock_sendmsg+0x145/0x180 [ 134.711368][ T8324] __sys_sendto+0x268/0x330 [ 134.711450][ T8324] __x64_sys_sendto+0x76/0x90 [ 134.711488][ T8324] x64_sys_call+0x2d05/0x2ff0 [ 134.711508][ T8324] do_syscall_64+0xd2/0x200 [ 134.711532][ T8324] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.711567][ T8324] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 134.711587][ T8324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.711608][ T8324] RIP: 0033:0x7f3002c6eb69 [ 134.711622][ T8324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.711669][ T8324] RSP: 002b:00007f30012d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 134.711692][ T8324] RAX: ffffffffffffffda RBX: 00007f3002e95fa0 RCX: 00007f3002c6eb69 [ 134.711708][ T8324] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 000000000000000a [ 134.711723][ T8324] RBP: 00007f30012d7090 R08: 00002000000000c0 R09: 0000000000000014 [ 134.711740][ T8324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.711752][ T8324] R13: 0000000000000000 R14: 00007f3002e95fa0 R15: 00007fffc56b7988 [ 134.711771][ T8324] [ 135.131334][ T8335] loop3: detected capacity change from 0 to 128 [ 135.154069][ T8333] netlink: 'syz.3.1568': attribute type 11 has an invalid length. [ 135.215995][ T8342] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 135.384888][ T8356] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 136.140318][ T8375] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 137.011935][ T8444] random: crng reseeded on system resumption [ 137.057368][ T8444] __nla_validate_parse: 12 callbacks suppressed [ 137.057386][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'. [ 137.086894][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1617'. [ 137.150602][ T29] kauditd_printk_skb: 454 callbacks suppressed [ 137.150618][ T29] audit: type=1326 audit(1754285728.332:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.5.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 137.180645][ T29] audit: type=1326 audit(1754285728.332:6158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.5.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 137.208232][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1620'. [ 137.217823][ T29] audit: type=1326 audit(1754285728.402:6159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.5.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 137.241395][ T29] audit: type=1326 audit(1754285728.402:6160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.5.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 137.373053][ T29] audit: type=1326 audit(1754285728.402:6161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.5.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 137.396681][ T29] audit: type=1326 audit(1754285728.402:6162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.5.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 137.420851][ T29] audit: type=1326 audit(1754285728.402:6163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.5.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 137.444348][ T29] audit: type=1326 audit(1754285728.402:6164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.5.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 137.467811][ T29] audit: type=1326 audit(1754285728.452:6165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.5.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 137.491243][ T29] audit: type=1326 audit(1754285728.461:6166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.5.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 137.571938][ T8480] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 137.780572][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1628'. [ 137.808974][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1629'. [ 137.841423][ T8489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1629'. [ 137.954276][ T8499] FAULT_INJECTION: forcing a failure. [ 137.954276][ T8499] name failslab, interval 1, probability 0, space 0, times 0 [ 137.967437][ T8499] CPU: 1 UID: 0 PID: 8499 Comm: syz.4.1616 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 137.967467][ T8499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 137.967483][ T8499] Call Trace: [ 137.967491][ T8499] [ 137.967501][ T8499] __dump_stack+0x1d/0x30 [ 137.967546][ T8499] dump_stack_lvl+0xe8/0x140 [ 137.967565][ T8499] dump_stack+0x15/0x1b [ 137.967581][ T8499] should_fail_ex+0x265/0x280 [ 137.967623][ T8499] should_failslab+0x8c/0xb0 [ 137.967656][ T8499] kmem_cache_alloc_node_noprof+0x57/0x320 [ 137.967728][ T8499] ? __alloc_skb+0x101/0x320 [ 137.967784][ T8499] __alloc_skb+0x101/0x320 [ 137.967823][ T8499] netlink_alloc_large_skb+0xba/0xf0 [ 137.967856][ T8499] netlink_sendmsg+0x3cf/0x6b0 [ 137.967890][ T8499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.967951][ T8499] __sock_sendmsg+0x145/0x180 [ 137.967983][ T8499] ____sys_sendmsg+0x31e/0x4e0 [ 137.968021][ T8499] ___sys_sendmsg+0x17b/0x1d0 [ 137.968156][ T8499] __x64_sys_sendmsg+0xd4/0x160 [ 137.968256][ T8499] x64_sys_call+0x191e/0x2ff0 [ 137.968280][ T8499] do_syscall_64+0xd2/0x200 [ 137.968308][ T8499] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 137.968391][ T8499] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 137.968411][ T8499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.968432][ T8499] RIP: 0033:0x7f9e3f15eb69 [ 137.968449][ T8499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.968473][ T8499] RSP: 002b:00007f9e3d7c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.968498][ T8499] RAX: ffffffffffffffda RBX: 00007f9e3f385fa0 RCX: 00007f9e3f15eb69 [ 137.968629][ T8499] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 137.968645][ T8499] RBP: 00007f9e3d7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 137.968661][ T8499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.968748][ T8499] R13: 0000000000000000 R14: 00007f9e3f385fa0 R15: 00007ffee6bfcc18 [ 137.968770][ T8499] [ 138.299264][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1632'. [ 138.442630][ T8510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1635'. [ 138.645836][ T8529] netlink: 'syz.3.1641': attribute type 46 has an invalid length. [ 138.734848][ T8535] FAULT_INJECTION: forcing a failure. [ 138.734848][ T8535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.748305][ T8535] CPU: 1 UID: 0 PID: 8535 Comm: syz.4.1642 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 138.748383][ T8535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.748395][ T8535] Call Trace: [ 138.748400][ T8535] [ 138.748407][ T8535] __dump_stack+0x1d/0x30 [ 138.748428][ T8535] dump_stack_lvl+0xe8/0x140 [ 138.748446][ T8535] dump_stack+0x15/0x1b [ 138.748466][ T8535] should_fail_ex+0x265/0x280 [ 138.748519][ T8535] should_fail+0xb/0x20 [ 138.748553][ T8535] should_fail_usercopy+0x1a/0x20 [ 138.748578][ T8535] _copy_from_iter+0xcf/0xe40 [ 138.748633][ T8535] ? __build_skb_around+0x1a0/0x200 [ 138.748678][ T8535] ? __alloc_skb+0x223/0x320 [ 138.748771][ T8535] netlink_sendmsg+0x471/0x6b0 [ 138.748812][ T8535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.748894][ T8535] __sock_sendmsg+0x145/0x180 [ 138.749005][ T8535] ____sys_sendmsg+0x31e/0x4e0 [ 138.749049][ T8535] ___sys_sendmsg+0x17b/0x1d0 [ 138.749159][ T8535] __x64_sys_sendmsg+0xd4/0x160 [ 138.749229][ T8535] x64_sys_call+0x191e/0x2ff0 [ 138.749250][ T8535] do_syscall_64+0xd2/0x200 [ 138.749273][ T8535] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 138.749304][ T8535] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 138.749367][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.749389][ T8535] RIP: 0033:0x7f9e3f15eb69 [ 138.749407][ T8535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.749431][ T8535] RSP: 002b:00007f9e3d7c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.749454][ T8535] RAX: ffffffffffffffda RBX: 00007f9e3f385fa0 RCX: 00007f9e3f15eb69 [ 138.749520][ T8535] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 138.749535][ T8535] RBP: 00007f9e3d7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 138.749551][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.749636][ T8535] R13: 0000000000000000 R14: 00007f9e3f385fa0 R15: 00007ffee6bfcc18 [ 138.749658][ T8535] [ 139.001431][ T8529] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 139.009240][ T8529] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1641'. [ 139.114925][ T8550] loop3: detected capacity change from 0 to 164 [ 139.127559][ T8550] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 139.900011][ T8560] netlink: 'syz.0.1654': attribute type 1 has an invalid length. [ 139.908474][ T8562] FAULT_INJECTION: forcing a failure. [ 139.908474][ T8562] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 139.921744][ T8562] CPU: 0 UID: 0 PID: 8562 Comm: syz.4.1655 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 139.921779][ T8562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.921791][ T8562] Call Trace: [ 139.921797][ T8562] [ 139.921804][ T8562] __dump_stack+0x1d/0x30 [ 139.921823][ T8562] dump_stack_lvl+0xe8/0x140 [ 139.921871][ T8562] dump_stack+0x15/0x1b [ 139.921885][ T8562] should_fail_ex+0x265/0x280 [ 139.921915][ T8562] should_fail_alloc_page+0xf2/0x100 [ 139.922022][ T8562] __alloc_frozen_pages_noprof+0xff/0x360 [ 139.922057][ T8562] alloc_pages_mpol+0xb3/0x250 [ 139.922088][ T8562] vma_alloc_folio_noprof+0x1aa/0x300 [ 139.922130][ T8562] handle_mm_fault+0xec2/0x2c20 [ 139.922150][ T8562] ? __rcu_read_unlock+0x4f/0x70 [ 139.922181][ T8562] do_user_addr_fault+0x3fe/0x1090 [ 139.922290][ T8562] exc_page_fault+0x62/0xa0 [ 139.922313][ T8562] asm_exc_page_fault+0x26/0x30 [ 139.922331][ T8562] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 139.922455][ T8562] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 139.922536][ T8562] RSP: 0018:ffffc90010377cb8 EFLAGS: 00050206 [ 139.922564][ T8562] RAX: 1cc74c4959a7bf51 RBX: 000000000000000e RCX: 000000000000000e [ 139.922575][ T8562] RDX: 0000000000000000 RSI: ffffc90010377d10 RDI: 0000200000033a80 [ 139.922598][ T8562] RBP: ffffc90010377d90 R08: 000000000000067d R09: 0000000000000000 [ 139.922609][ T8562] R10: 0001c90010377d10 R11: 0001c90010377d1d R12: 0000200000033a8e [ 139.922620][ T8562] R13: 00007ffffffff000 R14: 0000200000033a80 R15: ffffc90010377d10 [ 139.922639][ T8562] _copy_to_user+0x7c/0xa0 [ 139.922663][ T8562] rng_dev_read+0x3ef/0x740 [ 139.922706][ T8562] ? __pfx_rng_dev_read+0x10/0x10 [ 139.922732][ T8562] vfs_readv+0x3fb/0x690 [ 139.922768][ T8562] __x64_sys_preadv+0xfd/0x1c0 [ 139.922816][ T8562] x64_sys_call+0x282a/0x2ff0 [ 139.922835][ T8562] do_syscall_64+0xd2/0x200 [ 139.922892][ T8562] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 139.922918][ T8562] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 139.923003][ T8562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.923021][ T8562] RIP: 0033:0x7f9e3f15eb69 [ 139.923035][ T8562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.923060][ T8562] RSP: 002b:00007f9e3d7c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 139.923084][ T8562] RAX: ffffffffffffffda RBX: 00007f9e3f385fa0 RCX: 00007f9e3f15eb69 [ 139.923178][ T8562] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 139.923220][ T8562] RBP: 00007f9e3d7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.923230][ T8562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.923240][ T8562] R13: 0000000000000000 R14: 00007f9e3f385fa0 R15: 00007ffee6bfcc18 [ 139.923277][ T8562] [ 140.253323][ T8560] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.332205][ T8569] loop3: detected capacity change from 0 to 128 [ 140.393328][ T8581] netlink: 'syz.5.1663': attribute type 4 has an invalid length. [ 140.401221][ T8581] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1663'. [ 140.428310][ T8584] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=6603 sclass=netlink_tcpdiag_socket pid=8584 comm=syz.0.1665 [ 140.589797][ T8606] tipc: Enabling of bearer rejected, failed to enable media [ 140.790855][ T8608] FAULT_INJECTION: forcing a failure. [ 140.790855][ T8608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.804133][ T8608] CPU: 0 UID: 0 PID: 8608 Comm: +}[@ Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 140.804166][ T8608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.804182][ T8608] Call Trace: [ 140.804190][ T8608] [ 140.804201][ T8608] __dump_stack+0x1d/0x30 [ 140.804225][ T8608] dump_stack_lvl+0xe8/0x140 [ 140.804314][ T8608] dump_stack+0x15/0x1b [ 140.804334][ T8608] should_fail_ex+0x265/0x280 [ 140.804366][ T8608] should_fail+0xb/0x20 [ 140.804403][ T8608] should_fail_usercopy+0x1a/0x20 [ 140.804476][ T8608] _copy_to_iter+0xcf/0xe30 [ 140.804503][ T8608] ? update_load_avg+0x1da/0x820 [ 140.804611][ T8608] ? xfd_validate_state+0x45/0xf0 [ 140.804762][ T8608] ? save_fpregs_to_fpstate+0x100/0x160 [ 140.804804][ T8608] copy_page_to_iter+0x18f/0x2d0 [ 140.804828][ T8608] sk_msg_recvmsg+0x1e4/0x900 [ 140.804925][ T8608] ? __list_del_entry_valid_or_report+0x65/0x130 [ 140.804962][ T8608] unix_bpf_recvmsg+0x272/0x730 [ 140.804989][ T8608] ? __pfx_woken_wake_function+0x10/0x10 [ 140.805080][ T8608] unix_dgram_recvmsg+0x6a/0x90 [ 140.805098][ T8608] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 140.805116][ T8608] sock_recvmsg+0x136/0x170 [ 140.805139][ T8608] ____sys_recvmsg+0xf5/0x280 [ 140.805181][ T8608] ___sys_recvmsg+0x11f/0x370 [ 140.805262][ T8608] __x64_sys_recvmsg+0xd1/0x160 [ 140.805335][ T8608] x64_sys_call+0x2b42/0x2ff0 [ 140.805354][ T8608] do_syscall_64+0xd2/0x200 [ 140.805375][ T8608] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 140.805462][ T8608] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 140.805481][ T8608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.805500][ T8608] RIP: 0033:0x7fedc4a0eb69 [ 140.805514][ T8608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.805530][ T8608] RSP: 002b:00007fedc306f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 140.805621][ T8608] RAX: ffffffffffffffda RBX: 00007fedc4c35fa0 RCX: 00007fedc4a0eb69 [ 140.805632][ T8608] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005 [ 140.805643][ T8608] RBP: 00007fedc306f090 R08: 0000000000000000 R09: 0000000000000000 [ 140.805654][ T8608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.805664][ T8608] R13: 0000000000000000 R14: 00007fedc4c35fa0 R15: 00007ffe6a566d78 [ 140.805683][ T8608] [ 141.220072][ T8633] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 141.237530][ T8634] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 141.586144][ T8666] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 141.814387][ T8678] random: crng reseeded on system resumption [ 142.789909][ T8719] random: crng reseeded on system resumption [ 142.876154][ T8720] __nla_validate_parse: 6 callbacks suppressed [ 142.876175][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'. [ 143.345742][ T8722] FAULT_INJECTION: forcing a failure. [ 143.345742][ T8722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.359059][ T8722] CPU: 1 UID: 0 PID: 8722 Comm: syz.5.1716 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 143.359171][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.359183][ T8722] Call Trace: [ 143.359188][ T8722] [ 143.359196][ T8722] __dump_stack+0x1d/0x30 [ 143.359284][ T8722] dump_stack_lvl+0xe8/0x140 [ 143.359306][ T8722] dump_stack+0x15/0x1b [ 143.359327][ T8722] should_fail_ex+0x265/0x280 [ 143.359433][ T8722] should_fail+0xb/0x20 [ 143.359522][ T8722] should_fail_usercopy+0x1a/0x20 [ 143.359541][ T8722] copy_fpstate_to_sigframe+0x628/0x7d0 [ 143.359620][ T8722] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 143.359717][ T8722] ? x86_task_fpu+0x36/0x60 [ 143.359798][ T8722] get_sigframe+0x34d/0x490 [ 143.359871][ T8722] ? get_signal+0xdc8/0xf70 [ 143.359945][ T8722] x64_setup_rt_frame+0xa8/0x580 [ 143.359972][ T8722] arch_do_signal_or_restart+0x27c/0x480 [ 143.360088][ T8722] exit_to_user_mode_loop+0x7a/0x100 [ 143.360161][ T8722] do_syscall_64+0x1d6/0x200 [ 143.360195][ T8722] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 143.360244][ T8722] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 143.360279][ T8722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.360317][ T8722] RIP: 0033:0x7f3002c6eb69 [ 143.360332][ T8722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.360377][ T8722] RSP: 002b:00007f30012d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 143.360403][ T8722] RAX: fffffffffffffff5 RBX: 00007f3002e95fa0 RCX: 00007f3002c6eb69 [ 143.360416][ T8722] RDX: 0000000040010002 RSI: 00002000000001c0 RDI: 0000000000000007 [ 143.360428][ T8722] RBP: 00007f30012d7090 R08: 0000000000000000 R09: 0000000000000000 [ 143.360440][ T8722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.360497][ T8722] R13: 0000000000000000 R14: 00007f3002e95fa0 R15: 00007fffc56b7988 [ 143.360526][ T8722] [ 144.232321][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 144.232338][ T29] audit: type=1326 audit(1754285735.371:6339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8747 comm="syz.3.1724" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c07deeb69 code=0x0 [ 144.559978][ T8770] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 144.689202][ T29] audit: type=1326 audit(1754285735.818:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.5.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 144.756419][ T29] audit: type=1326 audit(1754285735.847:6341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.5.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 144.780298][ T29] audit: type=1326 audit(1754285735.847:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.5.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 144.803898][ T29] audit: type=1326 audit(1754285735.847:6343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.5.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 144.827531][ T29] audit: type=1326 audit(1754285735.847:6344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.5.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 144.851030][ T29] audit: type=1326 audit(1754285735.847:6345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.5.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 144.874519][ T29] audit: type=1326 audit(1754285735.847:6346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.5.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 144.897986][ T29] audit: type=1326 audit(1754285735.847:6347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.5.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 144.921668][ T29] audit: type=1326 audit(1754285735.847:6348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.5.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x7ffc0000 [ 147.114886][ T8851] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 147.229727][ T8860] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 147.241214][ T8861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1759'. [ 147.374648][ T8872] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1763'. [ 147.450745][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1764'. [ 147.725396][ T8894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1769'. [ 148.837791][ T8917] netlink: 'syz.4.1780': attribute type 4 has an invalid length. [ 148.845633][ T8917] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1780'. [ 148.874271][ T8919] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 148.952994][ T8926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1784'. [ 149.274411][ T8946] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1790'. [ 149.292399][ T8947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1791'. [ 149.513055][ T8949] netlink: 'syz.0.1789': attribute type 10 has an invalid length. [ 149.525407][ T8949] team0: Port device dummy0 added [ 149.535180][ T8949] netlink: 'syz.0.1789': attribute type 10 has an invalid length. [ 149.545691][ T8949] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 149.557230][ T8949] team0: Failed to send options change via netlink (err -105) [ 149.566676][ T8949] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 149.575665][ T8949] team0: Port device dummy0 removed [ 149.589264][ T29] kauditd_printk_skb: 528 callbacks suppressed [ 149.589280][ T29] audit: type=1400 audit(1754285740.685:6877): avc: denied { ioctl } for pid=8942 comm="syz.0.1789" path="socket:[24508]" dev="sockfs" ino=24508 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 149.655521][ T4774] hid_parser_main: 43 callbacks suppressed [ 149.655538][ T4774] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 149.676726][ T4774] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 149.966236][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1792'. [ 150.059681][ T8960] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 150.082327][ T29] audit: type=1400 audit(1754285741.172:6878): avc: denied { setopt } for pid=8957 comm="syz.1.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.310036][ T8974] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1798'. [ 150.332668][ T8971] netlink: 'syz.5.1797': attribute type 10 has an invalid length. [ 150.360656][ T29] audit: type=1326 audit(1754285741.460:6879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.5.1797" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3002c6eb69 code=0x0 [ 150.949887][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'. [ 151.318392][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1804'. [ 151.665008][ T9005] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1807'. [ 151.707804][ T29] audit: type=1326 audit(1754285742.792:6880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 151.730810][ T29] audit: type=1326 audit(1754285742.792:6881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 151.753723][ T29] audit: type=1326 audit(1754285742.792:6882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 151.776720][ T29] audit: type=1326 audit(1754285742.792:6883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 151.799657][ T29] audit: type=1326 audit(1754285742.792:6884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 151.822635][ T29] audit: type=1326 audit(1754285742.792:6885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 151.853675][ T9007] lo speed is unknown, defaulting to 1000 [ 151.882943][ T9007] lo speed is unknown, defaulting to 1000 [ 151.926788][ T9007] lo speed is unknown, defaulting to 1000 [ 151.958121][ T9007] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 151.997105][ T9007] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 152.065857][ T9007] lo speed is unknown, defaulting to 1000 [ 152.073619][ T9007] lo speed is unknown, defaulting to 1000 [ 152.123526][ T9007] lo speed is unknown, defaulting to 1000 [ 152.174906][ T9007] lo speed is unknown, defaulting to 1000 [ 152.196774][ T9012] lo speed is unknown, defaulting to 1000 [ 152.208869][ T29] audit: type=1326 audit(1754285742.931:6886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5feaeb69 code=0x7ffc0000 [ 152.233640][ T9007] lo speed is unknown, defaulting to 1000 [ 152.261390][ T9007] lo speed is unknown, defaulting to 1000 [ 152.346105][ T9015] tipc: Enabled bearer , priority 0 [ 152.391141][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1811'. [ 152.414455][ T9014] tipc: Resetting bearer [ 152.447400][ T9014] tipc: Disabling bearer [ 153.024878][ T9048] lo speed is unknown, defaulting to 1000 [ 153.111423][ T9052] FAULT_INJECTION: forcing a failure. [ 153.111423][ T9052] name failslab, interval 1, probability 0, space 0, times 0 [ 153.124247][ T9052] CPU: 0 UID: 0 PID: 9052 Comm: syz.4.1825 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 153.124286][ T9052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.124303][ T9052] Call Trace: [ 153.124312][ T9052] [ 153.124323][ T9052] __dump_stack+0x1d/0x30 [ 153.124346][ T9052] dump_stack_lvl+0xe8/0x140 [ 153.124368][ T9052] dump_stack+0x15/0x1b [ 153.124445][ T9052] should_fail_ex+0x265/0x280 [ 153.124554][ T9052] should_failslab+0x8c/0xb0 [ 153.124578][ T9052] kmem_cache_alloc_noprof+0x50/0x310 [ 153.124679][ T9052] ? getname_flags+0x80/0x3b0 [ 153.124716][ T9052] getname_flags+0x80/0x3b0 [ 153.124745][ T9052] user_path_at+0x28/0x130 [ 153.124776][ T9052] do_utimes+0xd9/0x210 [ 153.124804][ T9052] __x64_sys_utimes+0xc6/0x180 [ 153.124868][ T9052] ? syscall_trace_enter+0x102/0x1e0 [ 153.124900][ T9052] x64_sys_call+0x1e3d/0x2ff0 [ 153.124928][ T9052] do_syscall_64+0xd2/0x200 [ 153.124958][ T9052] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 153.125010][ T9052] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 153.125065][ T9052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.125117][ T9052] RIP: 0033:0x7f9e3f15eb69 [ 153.125132][ T9052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.125149][ T9052] RSP: 002b:00007f9e3d7c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 153.125241][ T9052] RAX: ffffffffffffffda RBX: 00007f9e3f385fa0 RCX: 00007f9e3f15eb69 [ 153.125253][ T9052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 153.125267][ T9052] RBP: 00007f9e3d7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 153.125338][ T9052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.125353][ T9052] R13: 0000000000000000 R14: 00007f9e3f385fa0 R15: 00007ffee6bfcc18 [ 153.125380][ T9052] [ 154.262540][ T9067] __nla_validate_parse: 3 callbacks suppressed [ 154.262557][ T9067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1830'. [ 154.338819][ T9070] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1831'. [ 154.348025][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1830'. [ 154.419230][ T9076] lo speed is unknown, defaulting to 1000 [ 154.440830][ T9082] ================================================================== [ 154.448965][ T9082] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 154.456542][ T9082] [ 154.458878][ T9082] write to 0xffff8881065ba360 of 8 bytes by task 9080 on cpu 1: [ 154.466529][ T9082] mas_wr_store_entry+0x1581/0x2b50 [ 154.471844][ T9082] mas_store_prealloc+0x74d/0x9e0 [ 154.476922][ T9082] commit_merge+0x6a5/0x730 [ 154.481452][ T9082] vma_expand+0x220/0x320 [ 154.485805][ T9082] vma_merge_new_range+0x296/0x310 [ 154.486679][ T9081] tipc: Enabling of bearer rejected, failed to enable media [ 154.490937][ T9082] mmap_region+0xa59/0x1630 [ 154.503449][ T9082] do_mmap+0x9b3/0xbe0 [ 154.507563][ T9082] vm_mmap_pgoff+0x17a/0x2e0 [ 154.512189][ T9082] ksys_mmap_pgoff+0xc2/0x310 [ 154.516906][ T9082] x64_sys_call+0x14a3/0x2ff0 [ 154.521604][ T9082] do_syscall_64+0xd2/0x200 [ 154.526127][ T9082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.532049][ T9082] [ 154.534382][ T9082] read to 0xffff8881065ba360 of 8 bytes by task 9082 on cpu 0: [ 154.541937][ T9082] mas_state_walk+0x2f5/0x650 [ 154.546642][ T9082] mas_walk+0x60/0x150 [ 154.550735][ T9082] lock_vma_under_rcu+0xa2/0x2f0 [ 154.555712][ T9082] do_user_addr_fault+0x233/0x1090 [ 154.560860][ T9082] exc_page_fault+0x62/0xa0 [ 154.565389][ T9082] asm_exc_page_fault+0x26/0x30 [ 154.570268][ T9082] [ 154.572605][ T9082] value changed: 0x00007f3001274fff -> 0x00007f3001253fff [ 154.579720][ T9082] [ 154.582058][ T9082] Reported by Kernel Concurrency Sanitizer on: [ 154.588222][ T9082] CPU: 0 UID: 0 PID: 9082 Comm: syz.5.1835 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 154.600309][ T9082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.610374][ T9082] ================================================================== [ 154.685173][ T9086] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9086 comm=syz.4.1834 [ 155.210595][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 155.210614][ T29] audit: type=1400 audit(1754285746.281:6947): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1