last executing test programs: 1m42.001110209s ago: executing program 4 (id=1588): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) 1m41.96854259s ago: executing program 4 (id=1590): clock_gettime(0xfffffffffffffffb, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000ff0f00000600000000000000", @ANYRES32, @ANYBLOB="0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000d48bda57a6876b100"/28], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002640)=@newtfilter={0x4b4, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x484, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1265, 0x3, 0xa00}, {0xf, 0xffffffc0, 0x296, 0x7}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x54}, "cc"}}]}]}, @TCA_CGROUP_POLICE={0xfffffffffffffc91, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x9, 0x8, 0x4, 0x3, 0x7, 0x0, 0x1, 0xe, 0x1, 0xf7cf, 0x4, 0x8000, 0xfffffffc, 0x2, 0xd0, 0xff, 0x87, 0x0, 0x1, 0x1, 0x80, 0x1, 0x30000000, 0x80000001, 0x8, 0x7fff, 0x3ff, 0x8, 0x0, 0x0, 0xc, 0x3ff, 0x9, 0x51c16909, 0x90, 0xb5e, 0x38, 0x7f, 0xaf9, 0x6, 0x7a, 0x2, 0x4080000, 0xd20, 0x40, 0x80000000, 0xede, 0xf4, 0x8, 0x4, 0x6, 0x7, 0x9, 0x200, 0x1, 0x4a9b, 0x1, 0x5, 0x9, 0x2, 0x2, 0x401, 0x3, 0x390, 0x9469, 0x5, 0x7, 0x85a, 0x6, 0x81, 0x4, 0x100, 0x9, 0x67, 0x383e3eab, 0x8, 0x4, 0x2b, 0xc, 0x6ae, 0x6, 0x200, 0x80, 0xfffffffe, 0x8, 0x6, 0xd, 0xfffffffb, 0x9, 0x7f, 0xe4, 0x7, 0x5, 0x9, 0x7f, 0x8, 0x10001, 0xaf2, 0x10000000, 0x3, 0x0, 0x19, 0x800, 0x80000000, 0x7, 0x7, 0x5, 0x2266df27, 0x5, 0x9, 0xbf9, 0x9, 0x200, 0xffffffc0, 0x7f, 0xc0e, 0xa, 0x6, 0x2, 0x9, 0x2, 0x100, 0xfffffff7, 0x2, 0xf4, 0xc1, 0x1, 0x7, 0x108, 0x3, 0xe, 0x0, 0x40, 0xfff, 0xffffffff, 0x800, 0x401, 0x5, 0x7, 0xf, 0x8000, 0x7, 0x9, 0x67c, 0xa6, 0x0, 0x1, 0x4, 0x7, 0x5335, 0x9, 0x6, 0xfffffff8, 0x2, 0x3, 0xa, 0x10000, 0x1, 0xac8, 0x1, 0x5, 0xfffffffb, 0x9, 0x3, 0xfffc0000, 0x800, 0xa00, 0xe323, 0x7, 0x9c, 0x6, 0xfffff000, 0x7, 0x5, 0x3, 0x6, 0x2, 0xfffffffc, 0x8000, 0xa, 0x7, 0x10, 0x3, 0x1, 0x2, 0x6, 0x8, 0x0, 0x200, 0x80000001, 0x10001, 0x101, 0x435d, 0x1, 0x2, 0x3, 0x10000, 0x7, 0x80, 0x3, 0x10, 0x7, 0xd, 0x5, 0x5, 0x0, 0x4, 0x2, 0xc4b9, 0xd4, 0x800, 0x0, 0x7, 0x7ff, 0x9, 0x1753, 0xffff, 0xd5, 0x8, 0x1, 0x0, 0x2, 0xf, 0x8, 0x400, 0x8, 0x3, 0x0, 0x726, 0x1, 0xe10, 0x9, 0x8, 0x4, 0x0, 0x1, 0x5, 0x8f, 0x7e1, 0x200, 0x1, 0x3ff, 0x8, 0x7, 0x6, 0x4, 0x1ff, 0x3, 0x4c5d, 0x10, 0x9, 0x4, 0x0, 0x8ed, 0xbc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x8, 0x9, 0x3ff, 0x6, {0xa, 0x2, 0x8001, 0x8, 0x6, 0x858e}, {0x1, 0x0, 0xffff, 0x3, 0x2}, 0xfffffffc, 0x6}}]}]}}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1m41.675652325s ago: executing program 4 (id=1592): syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x6de4, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x10404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x805, 0x0) 1m41.436742908s ago: executing program 4 (id=1598): r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000000000000000d356207022cc3e3c5f6c520606cfbd775c8310b82b285fb40b97ddaec261775c00034f65e79da608441117afdf2ba67b3bce90c3a6d1ac9a23b9b95f29a785c712c465b4b1169700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa1b96aadc3618c52}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) getpeername(r3, &(0x7f0000000640)=@caif, &(0x7f0000000540)=0x80) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x5b1, &(0x7f0000000a00)="$eJzs3U9vVFUbAPDnzExLS4GWN2+iyMImJECitrRgNMZEiLhz4R8S44LE2hZCGKChNRHECAl+A/0AJu5MjHFJjCHqxq07E7cmhkgMdONuzJ3eKQPMtNN2yoXO75dces49cznnzswz594z594JoGeNZv+UIvZExFyKGG4qq0ReOLr0uLt3rkwv3rkynaJWe/efFClf13h8yv8O5RsPRMRvP6X4X/nheucvXT47Va3OXszz4wvn5sbnL11+4cy5qdOzp2fPT068NPHikcOTRw51ZT93RsQvY8cr10+9vve76a93f/bDNzdSHI0deXnzfnTLaIwuPyfNsuf15W5XVpByvj/NL3GqFNgg1qTx+vVFxFMxHOW49+INx+dvF9o4YFPVUkStQ9knQ6ePBZ4ESUxDj2ocB2Tnv42l2CMS4FG5fWxpAOBuWhrbW1yO/8rS2GAM1McGti+maB7WSRHRjZG5rI65/Wk4W2KTxuGA1q5ei4inW/X/qR6bI/VR/Cz+S/fFfyki3sr/ZuvfWWf9ow/kxT88OqvF//4V4v+Dpvj/cJ31i38AAAAAAADonpvHIuL5Vt//lZbn/0SL+T9DEXG0C/Wv/v1f6VYXqgFauH0s4tWIaMz9W2yK/9xIOc/trM8H6kunzlRnD0XErog4GH3bsvxE+yoGYu+vfe0Km+f/ZUtWf2MuYN6OW5Vt928zM7UwtaGdBupuX4t4ptIq/tNy/59a9P9Z3z/XYR2146/93K5s9fgHNkvtq4gDLfv/e3euSCvfn2O8fjww3jgqeNgnJ298365+8Q/Fyfr/7SvH/0hqvl/P/Nrr+PTvPzYQ/62P//vTifotZ/rzdR9PLSxcnIjoT28+vH5y7W2GragRD414yeL/4L7W5/8rHf8PRsTVDus88eMb19uV6f+hOIPXImbW1P+vPbHvvS//bVd/Z/3/kXqffjBfY/wPVtZpgBbdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4EpUiYkek0thyulQaG4sYioj/x/ZS9cL8wnOnLnx0fiYrq//+f6nxS7/DS/nU+P3/kab85AP5wxGxOyK+KA/W82PTF6ozRe88AAAAAAAAAAAAAAAAAAAAPCaG2lz/n/mrXHTrgE1XKboBQGHEP/Su94tuAFAY/T/0LvEPvUv8Q+8S/9C7xD/0LvEPvatc+/Zk0W0AAAAAAAC6ZvezN39PEXH1lcH6kunPy/oKbRmw2Y4W3QCgMG7xA73L1D/oXaud4xsDgK0vrVI+sO4tAQAAAAAAAAAAAIBuObDH9f/Qq0pFNwAoTPvr/90ZALY61/9D73KOD7j+HwAAAAAAAAAAAAAef/OXLp+dqlZnL643sW1jm0tIdJr4c9fSe3Zj/0954+/5dScidSHiHlGi6E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg4b8AAAD//3Uy8Os=") r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r4, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$802154_dgram(r3, &(0x7f00000006c0)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000040)=0xdc7d) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x150, 0x210, 0xfeffffff, 0xa8, 0xa8, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr, @empty, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @broadcast, @loopback}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) read(r7, &(0x7f0000000500)=""/28, 0x1c) getpriority(0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c80c) 1m41.145267813s ago: executing program 4 (id=1604): syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100000086dd6000000800283afffe80000000000000000000000000000eff0200000000000000000000000000018700907800000000fe800000000000000000000000bb0e020000000000000000000000000001"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x1, &(0x7f0000000280)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x9, &(0x7f0000000640)=@raw=[@map_fd={0x18, 0x3}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x8, 0xa, 0x3, 0xffffffffffffffad, 0xfffffffffffffff0}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x7}], &(0x7f0000000280)='GPL\x00', 0xc1d, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r5 = socket$inet(0x2, 0x4000000805, 0x0) listen(r5, 0x5) sendmmsg(r1, &(0x7f0000003c40)=[{{&(0x7f0000000540)=@ll={0x11, 0x8, r2, 0x1, 0x9, 0x6, @broadcast}, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)="457d1c69cbb5b83396bcfe4abe4a9760567163645c368e4a68532477854ba76424b1fba81852f08a6b892a2d23d60f96fa6b7874bd8e3591340121cc9a212e05e8ac", 0x42}, {&(0x7f0000000200)="1c3733a2d7a8216ad74e0a8409441d55399401eb0a240f5e35d9b5b0cde92b88a51550404bfddb2e0faecf90d3", 0x2d}, {&(0x7f0000000300)="17820a8530cc553c2ef4fe306d05a167", 0x10}], 0x3, &(0x7f0000001240)=[{0x1010, 0x107, 0x7, "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"}, {0xc0, 0x1a, 0x0, "36f63c0d96c802a647e173528d69ca1f78668fc9529c8632c4e7c7f64087b823802726c0e2ae9dbff90ab522c6226fd48b61175a35374d6b4b7dea475a3fe34666a3e141cbf84320b3c4425d25fd6c3ef7e3f8bba33ffdf67e0aa061bc1b17a0235f43720cd42fcd4fb87e2f548eac2000ba55ad46c1f7932f5a8a468aa68a39749d42907cd89fb4ed1fa0377c8cf6b014d8badd9424dc566c3ca0722b13b3e2008e41900a336c8cfca1"}, {0x20, 0x112, 0x4, "7fc386354c77ffd51f545e34b16851f4"}], 0x10f0}}, {{&(0x7f0000000e00)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000840)="208fd54294f5c760ac9942a33fd5aca025c524", 0x13}, {&(0x7f0000000e80)="4b609c15f8c6600682928fe6bacd777d1f26a2da3f4464b9952ac3d97e2403a5e8391fe8ffb26ca6a7e6cd321c6c61014f590cd32ac46d27c83f6c89a7918f09f221facdf111fae71b8d3f74538761922d0e7985f79a33730544359c2940", 0x5e}, {&(0x7f0000000f00)="9e09bd6441522aa1d32c15cb6eac77714b6e95a75f4e3077855225c69e457e468b933a03c0725c3f2e974e2c115b23f3bc166a04bd72cdfa990f97f8af9de5c0c59ffac9726bcf527080290723223570daca4d893a1a12267f8a9ccd6b154346995e75707a4c15f96fafdef265036df8", 0x70}], 0x3, &(0x7f0000002340)=[{0xd8, 0x18, 0x4, "2477ec75be15238078592337effa9d2d2623f25f07f24c168f81043712e8395fb54ca3fe9f5365d9062c61e36a6e4a639ce2cc55786aaca399bc51942926817f51f7657b18c3b22dde1f2027a0b69765ccbff07849129c5482b6ca5c8f241bbb46d139ba57a4b7c0b0aa3c1a891bbe6e3cd40c83f62f99a31710d36fd24bac446a6a4152cc642be77831e3f097262e61cb91309d7fb251a0705f3941af1d6083cf589e4534d4645d3e88fbae5a5d7294fdbe5789cd86797ca7a0dd0370a9e703d970dcda"}, {0x108, 0x10d, 0x1, "36b162b34b2c23690519a13f103c8669a0db3d7169f19670fd3865fcc4c9b3031c9a4dd04e1cf69fe9f932c883fa03c6f911c0b0285139b084a0dff50914cff3439bd8fd32c909e3f279ecb4f9966302ae802eb564826a3a5fd91230fbe2c740f93911401bb47e63da9a267d2c3602becc7e150433c0b5bfa90c584e00f3c3dcbd2a01efec46f9c469d0d74910866b8b48aa00dfe07f4e8ba7921be262649e3364f068e6f6ffde7128150c11475113507cc5f1ce63f33dc4a717c23eb2aeaf17b065da942d1ad1f168d1cfb250ccef4992d408b25f62b9eb1453f0ca6b0d6c748a874b0ec428edc5636d4f5f83c89f6b575ab08bfecbdd"}, {0x70, 0xeb9b55e75808de6c, 0xff, "091da678041bc08c40efb3c087074a605236df60f792157d8becaea5e4e5b8d153c3c38eb734b57c7ef08fffcc747579da7c689c4907fb0cecefdeedfec138c70c59c0c04ae84e6961a49403de425e13ee497d5bd12c0527eac7"}, {0xe8, 0x115, 0x9, "50a21fab8f7053418d0f3280f0faa6e4674793d9f64ba5db0adf64d6c10ca5a1b07f7535a16741aea1e1a1ee64ab5c1d45e129fb80008109b96fcef33fe7729aa136141f1a744cd892193c0ce59652434b2e426df4b2c05db319a7bd24dc5de96741d314d2dcd43096025d400f46de831e46f1f0d9f18387ae5e94f92ba875563f9609bb27fa32882fd15984c81ccda58614188c7a0de45dda932ebc0ef5fa76f8ff1c7e26ecaea65048c44a7073dc2f0239be24df4ae6b66816f283d35e13493386dcc42e5dc24468872af108f8631b91f4057a9e"}], 0x338}}, {{&(0x7f0000000fc0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f0000001040)=[{&(0x7f0000002680)="acc9f34f97e6c51237e8339b4f86b99f1364c759fb14f3c1c63975a1c4d646a767fa0304b1c0785a31109ed5724e0db69ee474437470dbdadf809de69a8fdd990f16d4f9129fedcb908d27fabc2a418f747f", 0x52}], 0x1, &(0x7f0000002740)=[{0x80, 0x102, 0xc3, "1fc52e967897b75084a78ef6bb932560dd8d5d6022cb6292af4bb9a28dbb3dce2cd5045e0c2addf26541644401d2eb0ff0cf93798b70c851e58d49279d235147d19bd14dccb496ee19f6bec689e15388433e55b498b8fe37fce28a0acf2e59c62cee5a7540ce2fde6137b710"}, {0xb8, 0x10e, 0xff, "9a6d33da53d19315a0e7ea6992cb1df59e560a27ca8ca62ee441b7e9eab557481de6ed959cca89ed04d2bb4a66fa25504d72e30a93a234098228b3ba9837c35c2f889a947581f8146ab28120f030946435c77e73749360f7805622425443244a5266486174724ba2bb4ad27b6d419fdfe7237b4c866cf5303c49445a73fc8656f5e32650297df11002f84f353b00a37d5cec13d553fd7a93e16b9dc0b0b5a49de7d7ebd924"}, {0x1010, 0x10c, 0x5, "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"}, {0xd8, 0x118, 0x9, "1d1c24301911c0f37c432f61d64cd889365a4be88128e365a5694ad9fcae6162e50d4f74fe3ae6a2586786d5c0df0a6759d47d6cb63b2ae1abd36d3e5c41b8f8a7c00c8e84da53178f5a9efd5ecdf43aa8ddfb19ce2f94544e26d9cf4658bebd9bad0f28d028fa61ad2e54b8c2592affa57d89bbf3c210199fb61f8b73fe8818366d5f14aec9cb22508c662354848dfe46777a2866ac2e76553dc6e03e509cb23afd8b4bff99b49880924aff1e5963afabb4926d0e504c5e6bbcc6ed95aa2cd93c202c9ab723"}, {0x20, 0x1, 0x71, "d9d1835f5b8033d7248eb38d6d"}, {0x48, 0x10d, 0x4, "92da081f9caa305e6a30be4257ee5129a3897def8b550b0d575b4d95e4daae1aa7cda77a562ab9eb4c2bdddbda9d63659f3069ad45ff43"}, {0x18, 0x1, 0x6, "f2b0"}, {0x88, 0x1, 0xe87c, "92edf2e93ee21a472bc39e418f46f4823eed1b024bc582b505befdec033f48445dec15ed56230a781cbb70833d0580153280b366db969bae3a428f2d924e0687165287735b658f1a5c0c8ddfc81af3b75e24aca861171c52022e674023cc4bc042777638c913210337aa6c441b27f7eaf71c6ac3"}, {0xc8, 0x10c, 0x4, "56c4522960071d4f1a7d71ec344c1fd6339435b0eb285621752020d87749fd078e784bc496d20500870308f7dbd553c0a8fa6133f6cc28ca504ea96910df750bab2712d564de00f0d695aff04c71ed3c231d44946df42c019651da7de87467333a742dfb8f2725625cad78c00c8d758915037943236a2e72cf75d28312c1d101e7f6190b97e258030af8db154b416e4e1cb7c781ee8250d2d94988271c25955a4090e73ffee11f67eab2cf177ff168466eaa1aaac59e24b1"}, {0xf8, 0x104, 0xf56, "154ce8e50fac75283185fad5dc48f55defcc30e3fcd197376f8b9b8832149fdca54f2124aad6dc817ed07e6a491f106bb0e0a70f3bd1673ec0924101c73150db275fd549cc0fabda1fa5af0c0f86ac5460ad9ad8d67033fd4eecd5f5be073338035fc38089ceeaa39a998a6eb1ccd05295197c7bb06ab425522a91878838b2d0a80726569c4d431da85f0856aa456b381489b48243a4003dabdcaa0310b3efc146304c2d3009fd9494ee530f39c5c8d0bd9c7170367efb1f670da9603a922dd191dea0289bd06ce1177e0993c2fe39a74212b76e3ab71e6d399397f1a535b70d438d"}], 0x14e8}}], 0x3, 0x844) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01032cbde0f82e53d948f60500001400020077673100"/34], 0x28}, 0x1, 0xffa6, 0x0, 0x80d0}, 0x20008000) r9 = accept4(r5, &(0x7f00000003c0)=@x25, &(0x7f0000000240)=0x80, 0x80800) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r7) sendmsg$TIPC_NL_BEARER_ADD(r9, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="a001000027ad7eea315abbc4b893280c1aadac4ffba7c9fbb2", @ANYRES16=r10, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x24000082}, 0xc880) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000005c0)=@generic={0x0, r11}, 0x18) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r11, 0x0) io_uring_enter(r11, 0x693a, 0xa438, 0x8, &(0x7f00000001c0)={[0x10]}, 0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x800f00, &(0x7f00000000c0)={[{@usrjquota}, {@norecovery}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x464, &(0x7f0000000880)="$eJzs28tvG8UfAPDvbl6/X18JpTxaCgQqRMQjadICPXABgcShCCQ4lGNI0qpq2qAmSLSqaECoXJBQJTgjjkj8Bdy4IOCE1CvcUaUKemnhFLTr3dR27dRpHTutPx9pkxnPrGfGs+Od3VkH0LNGsz9JxLaI+D0ihivR2gyjlX/Xr56b+efquZkkVlbe+SvJ8127em6mzFrut7WIjKUR6WdJUUitxTNnT0zPz8+dLuITSyc/mFg8c/b54yenj80dmzs1dejQwQOTL7049UJb2pm169qejxf27n7jvYtvzhy5+P4v32f13VakV7ejXUazhv+9kqtPe6rdhXXZ9qpw0t/ybpeGN6Q2tKovIrLuGsjH/3D0xY3OG47XP+1q5YANlZ2bhlZjp+qTl1eAe1gS3a4B0B3liT67/i23Dk4/uu7KK5ULoKzd14utktIfaZFnoO76tp1GI+LI8r/fZFts0H0IAIBqX8x8fTieazT/S+PBqnw7ijWUkYi4LyJ2RsT9EbErIh6IyPM+FBEPr7P8+qWhm+c/6eXbaliLsvnfy8XaVu38r5z9xUhfEduet38gOXp8fm5/8ZmMxcBQFp9co4wfX7v0ZbO06vlftmXll3PBoh6X+4dq95mdXprOJ6VtcOWTiD39jdqfrK4EJBGxOyL2rO+td5SB4898t7dZplu3fw2trzM1tfJtxNOV/l+OuvaXkrXXJyf+F/Nz+yfKo+Jmv/524e1m5d9R+9sg6/8ttcd/fZaRpHq9dnH9ZVz44/Om1zS3e/wPJu/m/TJYvPbR9NLS6cmIweRwHq95ferGvmW8zJ+1f2xf4/G/s9gnK+eRiMgO4kcj4rGIeLyo+xMR8WRE7Fuj/T+/2jxtM/T/bMPvv9Xjv67/1x/oO/HTD83Kb63/D+ahseKV/PvvFlqt4J18dgAAAHC3SPNn4JN0fDWcpuPjlWf4d8WWdH5hcenZowsfnpqtPCs/EgNpeadruOp+6GSyXLxjJT5V3Csu0w8U942/6vt/Hh+fWZif7XLboddtbTL+M3/2dbt2wIZrtI42NdiFigAdVz/+09ro+bc6WRmgo9rwHA1wl7rF+E87VQ+g85z/oXc1Gv/n6+LWAuDe5PwPvcv4h95l/EPvMv6hJ93J7/o3eyAi8h8lbJb63HZgaDN2U6Sboho9GYjY+LK6/c0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8FAAD//99q64A=") clock_settime(0x3, 0x0) 1m40.919287637s ago: executing program 4 (id=1609): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000006c0)={0x2, 0x0, 0x5, 0xff81, 0x0, 0x7c, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="7f0004000000c1d221b9df1d5aca49a69f484af68df7abb13828648522bfe1e2a9d2a6300d7c76a02337870000", @ANYRES16=r2, @ANYBLOB="170e0000000000000000010000600500070000000000080009000000000014001f000000000000000000000000000000000008000a0000000000060002000100000014002000fefc00000000000000000000000000aa"], 0x5c}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) read$usbfs(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c000180"], 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)) r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1m40.918620617s ago: executing program 32 (id=1609): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000006c0)={0x2, 0x0, 0x5, 0xff81, 0x0, 0x7c, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="7f0004000000c1d221b9df1d5aca49a69f484af68df7abb13828648522bfe1e2a9d2a6300d7c76a02337870000", @ANYRES16=r2, @ANYBLOB="170e0000000000000000010000600500070000000000080009000000000014001f000000000000000000000000000000000008000a0000000000060002000100000014002000fefc00000000000000000000000000aa"], 0x5c}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) read$usbfs(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c000180"], 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)) r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 3.200627899s ago: executing program 2 (id=3812): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141242, 0x0) socket$rds(0x15, 0x5, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x81, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000240)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.026394722s ago: executing program 1 (id=3807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 2.927028184s ago: executing program 1 (id=3810): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r5, &(0x7f0000000480)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec90806", 0xe}], 0x1) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r6 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000000240)=""/262, 0x106, 0x20, 0x0, 0x0) 2.739156216s ago: executing program 2 (id=3815): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000140409050000000078b2fdd616a3f005d334065b00"/35, @ANYRES32=r5], 0x18}}, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mlockall(0x3) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) brk(0x400000ffc020) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r10}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) socket$tipc(0x1e, 0x5, 0x0) 2.694525157s ago: executing program 1 (id=3816): socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='rpc_socket_nospace\x00', r3, 0x0, 0x200000000000000}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='net_dev_xmit\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) write(r1, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x200, 0x7, 0xa, 0x760, 0x13, "d291ae4428fb7f68474aaaa24de9bb065fa6ee"}) 2.124065866s ago: executing program 0 (id=3824): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x948}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40011) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') syz_io_uring_setup(0xb5e, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0xffc, 0x5cc}, 0x0, 0x0) lseek(r3, 0x2000, 0x0) 2.073674157s ago: executing program 0 (id=3826): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x80003, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r3, 0x0, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_connect$uac1(0x5, 0x71, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x6, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xc7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x1, 0x2, {0x7, 0x25, 0x1, 0x1, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x0, 0x40, {0x7, 0x25, 0x1, 0x80, 0x8, 0x6}}}}}}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.913290359s ago: executing program 3 (id=3831): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000005b1b956d855cfcf804850000000e00000095000000000000008b084f27b083778923b71383c0f1cfd739aa143d53b75b030000000008000000fbc0bff0d7e98c84db7700ddd599f9f819b0aed4d6c9f85375c498c48b84ac6dc62003000000cc469136c0b7385315b7a857f97c480965302f137acf088c35a24f95f671591c188ca4c639554c95ba89912c036f1a9a42bbf6f6d5c6bfd9d01eaa030f4a5e2151ef69c01992ab1f9819013cf5194d18f3baccfe238e9fda865212818ed43f7ab45f585acd2595954dce043be1020cf12023ae40193cf6741995c248f0b2b78c7edcb254bf305e437e59654ca173fa2331da93c9f25735d6a178364b35a933864637618f7daead63e222cec76199ce5fdf4d2495b4f8de59a993b066cf42b2f246ce7b6136080f2f91ba55e9fa1e0c8f964d7940508587b1344b7979207e6e74c2a5a32f2e8899f0cce96d650c9d46ca0225a4f8a37d632aef9fa9808bf8f3ecf24d29f78f48a5600f217792302b02f56cf0e5a07d19407376eeb4991bb24db6d8104b07d7cec8"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd99) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@delchain={0x68, 0x65, 0x2, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0xf}, {0x1e, 0xa}, {0x0, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_RATE={0x6, 0x5, {0x9, 0x10}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xf, 0xd}}, @TCA_ROUTE4_ACT={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x48040}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x45d, &(0x7f0000000a00)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) fspick(r1, &(0x7f0000000380)='./bus\x00', 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x9, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x35}, @local}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = mq_open(&(0x7f00000004c0)='#\x00', 0x800, 0x1, &(0x7f0000000500)={0x4, 0x10000000000, 0x3, 0x10}) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) mq_timedreceive(r4, &(0x7f0000000540)=""/215, 0xd7, 0x916, &(0x7f00000006c0)={r5, r6+60000000}) socket(0x10, 0x80003, 0x0) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r8 = open(&(0x7f0000000040)='./file0\x00', 0x6000, 0x7) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r8, 0x20, &(0x7f00000003c0)={&(0x7f0000000200)=""/55, 0x37, 0x0, &(0x7f00000002c0)=""/224, 0xe0}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r10, 0x0, r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r11 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r11, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) socket(0xa, 0x1, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) 1.8759768s ago: executing program 3 (id=3832): syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES64], 0x8, 0x2f6, &(0x7f0000001cc0)="$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") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='veno\x00', 0x5) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c83214f830f93b30b874e75cab53f1ed7871f21c0d654a47fab0637868517d7e8d9915e99b4dc2dcafdcb2ef2a012ec95418a544c32181fb969e01318e00a12fd1b2a0eb57bcf7de086e320f2d4be4e1453010be849e4d7db", 0xc5}], 0x1}}], 0x2, 0x44014) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f00000004c0)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x400) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0xd2, 0x37, 0x1, 0x0, 0x8, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x2}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x2000a, 0xb, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) 1.803882831s ago: executing program 1 (id=3833): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="aee0052e238522948652b94a97a435f8d1d8adb2ab1de5337175681c5ffa6cdb5e4735e70acf4cd752f1fbf99fd6697b367b9a5566db0e59966a1ac3ce752fb80e5a0099782d1d05c8"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000001280), 0x6) 1.745741962s ago: executing program 1 (id=3834): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0xb, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x80, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x81, 0x0, 0x400000, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffb3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c, 0x0, 0xfff, 0x0, 0x9, 0x0, 0x0, 0x2, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0x7}, {}, 0x0, 0xa19f}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r1, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x200, 0x7, 0xa, 0x760, 0x13, "d291ae4428fb7f68474aaaa24de9bb065fa6ee"}) 1.727305313s ago: executing program 2 (id=3835): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000010000"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x12}}, {@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1.537239115s ago: executing program 0 (id=3836): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 1.510717726s ago: executing program 0 (id=3837): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="4741846b53", 0x5}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000005000000020000000700000044"], 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@inlinecrypt}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 1.388615198s ago: executing program 2 (id=3838): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES16], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x4000006}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2b, 0x1, 0x1) r0 = socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x58, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xbd4, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000003080)=0x0) io_submit(r5, 0x1, &(0x7f0000000940)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x7, 0x0, r4, 0x0}]) 1.336684508s ago: executing program 0 (id=3839): r0 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) listen(r1, 0x7ff) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000001c0)={'nat\x00', 0x0, [0xfff, 0x80000001, 0x5, 0x1, 0x4], '\x00', 0xd0}, &(0x7f0000000080)=0x54) socket$vsock_stream(0x28, 0x1, 0x0) 1.123704172s ago: executing program 2 (id=3840): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x5}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0d1}, 0x40014) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x17, 0x0, 0x8400, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r7, 0x0, 0x20000000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) 980.571404ms ago: executing program 3 (id=3843): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141242, 0x0) socket$rds(0x15, 0x5, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x81, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000240)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 728.957688ms ago: executing program 5 (id=3846): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r5 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000240)=""/262, 0x106, 0x20, 0x0, 0x0) 605.02544ms ago: executing program 5 (id=3847): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x5) 465.774302ms ago: executing program 5 (id=3848): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000010000"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x12}}, {@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 434.699843ms ago: executing program 3 (id=3849): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="4741846b53", 0x5}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000005000000020000000700000044"], 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffc}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@inlinecrypt}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 326.384175ms ago: executing program 3 (id=3850): socket$inet6(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000530464"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x240088c0) 273.605225ms ago: executing program 0 (id=3851): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8, 0x30}, &(0x7f0000000040)=0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xf, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = epoll_create(0xeed) epoll_wait(r5, &(0x7f0000001180)=[{}], 0x1, 0x7) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r0, @ANYRESOCT=r4, @ANYRESOCT=r3, @ANYRESHEX=r5, @ANYRES32=r1, @ANYRES32=r6, @ANYRESOCT=r3], 0x0, 0x8, 0x0, 0x0, 0x21600, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffea4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mctp_key_release\x00', r7, 0x0, 0x5d}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0x11, &(0x7f00000000c0)=0xfffffffe, 0x4) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x5, 0x7, 0x1, 0x6, 0x2, 0x9, 0x4}, 0x1c) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=@newtaction={0x14, 0x30, 0x7, 0x70bd29}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xa8, &(0x7f0000000340)={[{@errors_continue}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@debug}, {@quota}]}, 0x3, 0x43b, &(0x7f0000000640)="$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") syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffffffffff4d}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x10000}, 0x18) r10 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r10, 0x0) 227.436416ms ago: executing program 2 (id=3852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000008c0)={0xfc, 0x0, 0x7, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xf}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3ff}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4424}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x66}]}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf7f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xd2a3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10000000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xcfe}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x101}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_create1(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0), 0x48000, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x746, &(0x7f0000000640)={0x0, 0x3855, 0x8, 0x1, 0x40000333}, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f000000956304cbae951f933ff0b4f91acdcaa1c3e2344d4cc6e98ce8412e1e901abb4b4db965e30f7306add4e78b4047d038232dfa37bcce7be6fae12a8a01e76b7189d144605bdebf33b768dac9c6243e3bea0742e8d6c5441f2489bdfa7181eb3747e97fad7d0b2fd2b14ae924ea77eea4cb8462dfd71a560dcd9678b1653de5bae5d39188dad387a8167d05144704945f49"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r7 = inotify_init1(0x800) gettid() inotify_add_watch(r7, 0x0, 0xa4000960) 136.999907ms ago: executing program 3 (id=3853): syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES64], 0x8, 0x2f6, &(0x7f0000001cc0)="$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") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='veno\x00', 0x5) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c83214f830f93b30b874e75cab53f1ed7871f21c0d654a47fab0637868517d7e8d9915e99b4dc2dcafdcb2ef2a012ec95418a544c32181fb969e01318e00a12fd1b2a0eb57bcf7de086e320f2d4be4e1453010be849e4d7db", 0xc5}], 0x1}}], 0x2, 0x44014) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f00000004c0)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x400) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0xd2, 0x37, 0x1, 0x0, 0x8, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x2}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x2000a, 0xb, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) 136.502197ms ago: executing program 5 (id=3854): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) write$selinux_access(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a3a73302075c7224b25caf3f405c26e636f6e66696e65642030"], 0x3f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) (async) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0) (async) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) (async) write$selinux_access(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a3a73302075c7224b25caf3f405c26e636f6e66696e65642030"], 0x3f) (async) 99.255228ms ago: executing program 1 (id=3855): socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='rpc_socket_nospace\x00', r3, 0x0, 0x200000000000000}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='net_dev_xmit\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) write(r1, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x200, 0x7, 0xa, 0x760, 0x13, "d291ae4428fb7f68474aaaa24de9bb065fa6ee"}) 1.82751ms ago: executing program 5 (id=3856): perf_event_open(0x0, 0x0, 0x200, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffd}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) close(0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) r4 = socket$kcm(0x2, 0x3, 0x2) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) 0s ago: executing program 5 (id=3857): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES16], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x4000006}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2b, 0x1, 0x1) r0 = socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x58, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xbd4, 0xffffffffffffffff, 0x4}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000003080)=0x0) io_submit(r6, 0x1, &(0x7f0000000940)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x7, 0x0, r5, 0x0}]) kernel console output (not intermixed with test programs): 2568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.854882][T12568] R13: 0000000000000000 R14: 00007fe99f495fa0 R15: 00007ffe38b8f238 [ 168.854901][T12568] [ 169.141730][T12467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.156493][T12576] lo speed is unknown, defaulting to 1000 [ 169.237839][T12467] veth0_vlan: entered promiscuous mode [ 169.249514][T12467] veth1_vlan: entered promiscuous mode [ 169.267004][ T4215] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 169.279026][T12467] veth0_macvtap: entered promiscuous mode [ 169.286396][T12467] veth1_macvtap: entered promiscuous mode [ 169.297812][T12467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.312402][T12467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.322768][T12597] loop2: detected capacity change from 0 to 512 [ 169.330059][T12467] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.338883][T12467] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.347626][T12467] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.348847][T12597] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 169.356351][T12467] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.380000][T12597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.394049][T12597] ext4 filesystem being mounted at /609/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.419789][T12597] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.3257: iget: bad i_size value: 2533274857506816 [ 169.462498][T12605] geneve2: entered promiscuous mode [ 169.467793][T12605] geneve2: entered allmulticast mode [ 169.482168][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.518342][T12605] __nla_validate_parse: 2 callbacks suppressed [ 169.518355][T12605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3258'. [ 169.552064][T12605] netlink: 'syz.3.3258': attribute type 10 has an invalid length. [ 169.564701][T12605] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 169.623356][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 169.623371][ T29] audit: type=1400 audit(1753292393.348:10539): avc: denied { write } for pid=12617 comm="syz.3.3260" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 169.637916][T12618] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3260'. [ 169.654086][ T29] audit: type=1400 audit(1753292393.348:10540): avc: denied { open } for pid=12617 comm="syz.3.3260" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 169.686529][ T29] audit: type=1400 audit(1753292393.348:10541): avc: denied { map } for pid=12617 comm="syz.3.3260" path="socket:[44187]" dev="sockfs" ino=44187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 169.710075][ T29] audit: type=1400 audit(1753292393.348:10542): avc: denied { allowed } for pid=12617 comm="syz.3.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 169.729730][ T29] audit: type=1400 audit(1753292393.358:10543): avc: denied { create } for pid=12617 comm="syz.3.3260" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 169.751239][ T29] audit: type=1400 audit(1753292393.358:10544): avc: denied { map } for pid=12617 comm="syz.3.3260" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 169.765531][T12611] lo speed is unknown, defaulting to 1000 [ 169.775765][ T29] audit: type=1400 audit(1753292393.358:10545): avc: denied { read write } for pid=12617 comm="syz.3.3260" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 169.808907][ T29] audit: type=1400 audit(1753292393.418:10546): avc: denied { map_read map_write } for pid=12617 comm="syz.3.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 169.829024][ T29] audit: type=1400 audit(1753292393.418:10547): avc: denied { create } for pid=12617 comm="syz.3.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 169.849439][ T29] audit: type=1400 audit(1753292393.418:10548): avc: denied { write } for pid=12617 comm="syz.3.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 169.883215][T12611] chnl_net:caif_netlink_parms(): no params data found [ 169.921684][T12611] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.921803][T12611] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.921892][T12611] bridge_slave_0: entered allmulticast mode [ 169.922309][T12611] bridge_slave_0: entered promiscuous mode [ 169.923375][T12611] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.955415][T12611] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.962737][T12611] bridge_slave_1: entered allmulticast mode [ 169.963209][T12611] bridge_slave_1: entered promiscuous mode [ 169.989346][T12611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.990688][T12611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.019733][T12638] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 170.020598][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3264'. [ 170.027649][T12611] team0: Port device team_slave_0 added [ 170.035616][T12638] netlink: 'syz.5.3264': attribute type 30 has an invalid length. [ 170.051513][T12611] team0: Port device team_slave_1 added [ 170.054119][T12638] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.065710][T12638] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.073915][T12638] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.082263][T12638] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.093637][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3264'. [ 170.093662][T12638] netlink: 'syz.5.3264': attribute type 30 has an invalid length. [ 170.134659][T12611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.134688][T12611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.134742][T12611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.143743][T12611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.143757][T12611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.143814][T12611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.201468][T12611] hsr_slave_0: entered promiscuous mode [ 170.202771][T12611] hsr_slave_1: entered promiscuous mode [ 170.250888][T12611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.250901][T12611] Cannot create hsr debugfs directory [ 170.337808][T12611] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.337837][T12611] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.378339][T12611] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.378368][T12611] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.425421][ T23] hid-generic 0009:FFFFFC65:0002.0005: item fetching failed at offset 7/28 [ 170.434854][ T23] hid-generic 0009:FFFFFC65:0002.0005: probe with driver hid-generic failed with error -22 [ 170.447835][T12611] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.447905][T12611] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.503573][T12675] loop5: detected capacity change from 0 to 128 [ 170.527778][T12611] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.527812][T12611] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.580653][T12611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 170.582741][T12611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 170.609011][T12611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 170.639698][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3277'. [ 170.641248][ T4209] bridge_slave_1: left allmulticast mode [ 170.654249][ T4209] bridge_slave_1: left promiscuous mode [ 170.654443][ T4209] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.659091][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3277'. [ 170.682983][ T4209] bridge_slave_0: left allmulticast mode [ 170.688728][ T4209] bridge_slave_0: left promiscuous mode [ 170.688800][ T4209] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.755920][ T4209] bridge0 (unregistering): left allmulticast mode [ 171.068177][ T4209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.079220][ T4209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.089009][ T4209] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 171.098302][ T4209] bond0 (unregistering): Released all slaves [ 171.106084][T12611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 171.155977][ T4209] tipc: Left network mode [ 171.171113][T12611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.199076][ T4209] hsr_slave_0: left promiscuous mode [ 171.205509][ T4209] hsr_slave_1: left promiscuous mode [ 171.214952][ T4209] team0: left allmulticast mode [ 171.221732][ T4209] team_slave_0: left allmulticast mode [ 171.227267][ T4209] team_slave_1: left allmulticast mode [ 171.232990][ T4209] team0: left promiscuous mode [ 171.239998][ T4209] team_slave_0: left promiscuous mode [ 171.241148][T12695] loop3: detected capacity change from 0 to 512 [ 171.245445][ T4209] team_slave_1: left promiscuous mode [ 171.257987][T12695] EXT4-fs: Ignoring removed i_version option [ 171.257996][ T4209] veth1_vlan: left promiscuous mode [ 171.258058][ T4209] veth0_vlan: left promiscuous mode [ 171.268350][T12695] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 171.297844][T12695] EXT4-fs (loop3): 1 truncate cleaned up [ 171.304024][T12695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.385847][ T4209] team0 (unregistering): Port device team_slave_1 removed [ 171.396611][ T4209] team0 (unregistering): Port device team_slave_0 removed [ 171.435884][ T3371] lo speed is unknown, defaulting to 1000 [ 171.441689][ T3371] infiniband syz0: ib_query_port failed (-19) [ 171.443497][T12611] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.455434][T12701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3283'. [ 171.460796][T12467] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.485411][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.492488][ T4214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.502516][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.509600][ T4214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.589054][T12719] geneve2: entered promiscuous mode [ 171.589077][T12719] geneve2: entered allmulticast mode [ 171.613394][T12611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.679800][T12611] veth0_vlan: entered promiscuous mode [ 171.682026][T12611] veth1_vlan: entered promiscuous mode [ 171.706077][T12611] veth0_macvtap: entered promiscuous mode [ 171.714327][T12611] veth1_macvtap: entered promiscuous mode [ 171.720170][T12611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.723423][T12719] netlink: 'syz.0.3289': attribute type 10 has an invalid length. [ 171.732234][T12611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.735705][T12722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.746046][T12611] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.750953][T12722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.759516][T12611] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.776030][T12611] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.776059][T12611] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.811309][ T4209] IPVS: stop unused estimator thread 0... [ 171.860540][T12730] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3287'. [ 171.899388][T12740] loop2: detected capacity change from 0 to 512 [ 171.900677][T12738] loop0: detected capacity change from 0 to 512 [ 171.901047][T12738] EXT4-fs: Ignoring removed i_version option [ 171.901457][T12736] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 171.901462][T12738] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 171.901567][T12740] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.902543][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3291'. [ 171.911628][T12738] EXT4-fs (loop0): 1 truncate cleaned up [ 171.914438][T12736] netlink: 'syz.1.3291': attribute type 30 has an invalid length. [ 171.921355][T12738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.931060][T12736] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.988345][T12736] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.988477][T12736] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.988505][T12736] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.990471][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3291'. [ 172.008562][T12740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.013698][T12736] netlink: 'syz.1.3291': attribute type 30 has an invalid length. [ 172.026788][T12740] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.073010][T11025] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.078009][T12740] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.3290: iget: bad i_size value: 2533274857506816 [ 172.162869][T12748] loop0: detected capacity change from 0 to 512 [ 172.171251][T12748] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 172.182983][T12748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.183255][T12748] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.222609][T12611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.260261][T12748] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.3294: iget: bad i_size value: 2533274857506816 [ 172.313001][T12761] FAULT_INJECTION: forcing a failure. [ 172.313001][T12761] name failslab, interval 1, probability 0, space 0, times 0 [ 172.313024][T12761] CPU: 1 UID: 0 PID: 12761 Comm: syz.2.3295 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 172.313128][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.313138][T12761] Call Trace: [ 172.313143][T12761] [ 172.313219][T12761] __dump_stack+0x1d/0x30 [ 172.313240][T12761] dump_stack_lvl+0xe8/0x140 [ 172.313258][T12761] dump_stack+0x15/0x1b [ 172.313274][T12761] should_fail_ex+0x265/0x280 [ 172.313313][T12761] should_failslab+0x8c/0xb0 [ 172.313367][T12761] kmem_cache_alloc_node_noprof+0x57/0x320 [ 172.313431][T12761] ? __alloc_skb+0x101/0x320 [ 172.313458][T12761] __alloc_skb+0x101/0x320 [ 172.313483][T12761] netlink_ack+0xfd/0x500 [ 172.313596][T12761] netlink_rcv_skb+0x192/0x220 [ 172.313624][T12761] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 172.313650][T12761] rtnetlink_rcv+0x1c/0x30 [ 172.313669][T12761] netlink_unicast+0x5a8/0x680 [ 172.313722][T12761] netlink_sendmsg+0x58b/0x6b0 [ 172.313742][T12761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.313840][T12761] __sock_sendmsg+0x145/0x180 [ 172.313869][T12761] ____sys_sendmsg+0x31e/0x4e0 [ 172.313900][T12761] ___sys_sendmsg+0x17b/0x1d0 [ 172.313972][T12761] __x64_sys_sendmsg+0xd4/0x160 [ 172.314004][T12761] x64_sys_call+0x2999/0x2fb0 [ 172.314056][T12761] do_syscall_64+0xd2/0x200 [ 172.314072][T12761] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 172.314165][T12761] ? clear_bhb_loop+0x40/0x90 [ 172.314186][T12761] ? clear_bhb_loop+0x40/0x90 [ 172.314206][T12761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.314226][T12761] RIP: 0033:0x7f6cda6ae9a9 [ 172.314241][T12761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.314335][T12761] RSP: 002b:00007f6cd8d0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.314354][T12761] RAX: ffffffffffffffda RBX: 00007f6cda8d5fa0 RCX: 00007f6cda6ae9a9 [ 172.314367][T12761] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 172.314379][T12761] RBP: 00007f6cd8d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 172.314391][T12761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.314403][T12761] R13: 0000000000000000 R14: 00007f6cda8d5fa0 R15: 00007ffdd9eadc98 [ 172.314420][T12761] [ 172.358511][T11025] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.581673][T12772] FAULT_INJECTION: forcing a failure. [ 172.581673][T12772] name failslab, interval 1, probability 0, space 0, times 0 [ 172.594318][T12772] CPU: 1 UID: 0 PID: 12772 Comm: syz.0.3300 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 172.594345][T12772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.594357][T12772] Call Trace: [ 172.594364][T12772] [ 172.594383][T12772] __dump_stack+0x1d/0x30 [ 172.594405][T12772] dump_stack_lvl+0xe8/0x140 [ 172.594422][T12772] dump_stack+0x15/0x1b [ 172.594487][T12772] should_fail_ex+0x265/0x280 [ 172.594516][T12772] should_failslab+0x8c/0xb0 [ 172.594561][T12772] kmem_cache_alloc_noprof+0x50/0x310 [ 172.594582][T12772] ? audit_log_start+0x365/0x6c0 [ 172.594609][T12772] audit_log_start+0x365/0x6c0 [ 172.594716][T12772] audit_seccomp+0x48/0x100 [ 172.594777][T12772] ? __seccomp_filter+0x68c/0x10d0 [ 172.594799][T12772] __seccomp_filter+0x69d/0x10d0 [ 172.594823][T12772] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 172.594856][T12772] ? vfs_write+0x75e/0x8e0 [ 172.594944][T12772] __secure_computing+0x82/0x150 [ 172.594962][T12772] syscall_trace_enter+0xcf/0x1e0 [ 172.594985][T12772] do_syscall_64+0xac/0x200 [ 172.595052][T12772] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 172.595078][T12772] ? clear_bhb_loop+0x40/0x90 [ 172.595100][T12772] ? clear_bhb_loop+0x40/0x90 [ 172.595120][T12772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.595177][T12772] RIP: 0033:0x7fe99f26e9a9 [ 172.595191][T12772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.595208][T12772] RSP: 002b:00007fe99d8d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 172.595228][T12772] RAX: ffffffffffffffda RBX: 00007fe99f495fa0 RCX: 00007fe99f26e9a9 [ 172.595319][T12772] RDX: 0000200000000000 RSI: 0000000000000002 RDI: 0000000000000016 [ 172.595333][T12772] RBP: 00007fe99d8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 172.595346][T12772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.595359][T12772] R13: 0000000000000000 R14: 00007fe99f495fa0 R15: 00007ffe38b8f238 [ 172.595378][T12772] [ 172.818328][T12776] loop2: detected capacity change from 0 to 512 [ 172.825162][T12776] EXT4-fs: Ignoring removed i_version option [ 172.850381][T12776] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 172.877886][T12782] geneve2: entered promiscuous mode [ 172.879080][T12784] 9pnet_fd: Insufficient options for proto=fd [ 172.883188][T12782] geneve2: entered allmulticast mode [ 172.918946][T12776] EXT4-fs (loop2): 1 truncate cleaned up [ 172.925121][T12776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.938737][T12793] 9pnet_fd: Insufficient options for proto=fd [ 172.978196][T12794] netlink: 'syz.0.3306': attribute type 10 has an invalid length. [ 173.002228][T12611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.018261][T12798] netlink: 'syz.3.3308': attribute type 10 has an invalid length. [ 173.083440][T12805] loop1: detected capacity change from 0 to 512 [ 173.084199][T12808] loop3: detected capacity change from 0 to 512 [ 173.095129][T12803] xt_CT: No such helper "snmp_trap" [ 173.101366][T12808] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 173.111906][T12803] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.122653][T12805] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 173.138014][T12808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.138067][T12808] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.139701][T12805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.158101][T12808] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.3316: iget: bad i_size value: 2533274857506816 [ 173.161152][T12805] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.197977][T12803] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.225844][T12801] tipc: Started in network mode [ 173.230842][T12801] tipc: Node identity 8a7be76e7e7d, cluster identity 4711 [ 173.237675][T12805] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.3315: iget: bad i_size value: 2533274857506816 [ 173.238112][T12801] tipc: Enabled bearer , priority 0 [ 173.277985][T12803] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.308408][T12801] tipc: Disabling bearer [ 173.319238][T12021] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.330230][T12467] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.340633][T12803] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.372237][T12823] netlink: 'syz.3.3318': attribute type 4 has an invalid length. [ 173.391608][T12803] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.403486][T12803] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.414888][T12803] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.429330][T12803] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.442428][T12831] FAULT_INJECTION: forcing a failure. [ 173.442428][T12831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.455681][T12831] CPU: 1 UID: 0 PID: 12831 Comm: syz.1.3322 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 173.455706][T12831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.455722][T12831] Call Trace: [ 173.455779][T12831] [ 173.455786][T12831] __dump_stack+0x1d/0x30 [ 173.455805][T12831] dump_stack_lvl+0xe8/0x140 [ 173.455872][T12831] dump_stack+0x15/0x1b [ 173.455888][T12831] should_fail_ex+0x265/0x280 [ 173.455995][T12831] should_fail+0xb/0x20 [ 173.456019][T12831] should_fail_usercopy+0x1a/0x20 [ 173.456102][T12831] strncpy_from_user+0x25/0x230 [ 173.456123][T12831] ? kmem_cache_alloc_noprof+0x186/0x310 [ 173.456148][T12831] ? getname_flags+0x80/0x3b0 [ 173.456242][T12831] getname_flags+0xae/0x3b0 [ 173.456334][T12831] user_path_at+0x28/0x130 [ 173.456358][T12831] __se_sys_mount+0x25b/0x2e0 [ 173.456386][T12831] ? fput+0x8f/0xc0 [ 173.456405][T12831] __x64_sys_mount+0x67/0x80 [ 173.456534][T12831] x64_sys_call+0xd36/0x2fb0 [ 173.456560][T12831] do_syscall_64+0xd2/0x200 [ 173.456583][T12831] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 173.456612][T12831] ? clear_bhb_loop+0x40/0x90 [ 173.456636][T12831] ? clear_bhb_loop+0x40/0x90 [ 173.456705][T12831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.456722][T12831] RIP: 0033:0x7fcec666e9a9 [ 173.456751][T12831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.456796][T12831] RSP: 002b:00007fcec4cd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 173.456815][T12831] RAX: ffffffffffffffda RBX: 00007fcec6895fa0 RCX: 00007fcec666e9a9 [ 173.456825][T12831] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 173.456837][T12831] RBP: 00007fcec4cd7090 R08: 0000200000000400 R09: 0000000000000000 [ 173.456849][T12831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.456872][T12831] R13: 0000000000000000 R14: 00007fcec6895fa0 R15: 00007ffd05406b88 [ 173.456890][T12831] [ 173.682355][T12836] 9pnet_fd: Insufficient options for proto=fd [ 174.104145][T12868] loop0: detected capacity change from 0 to 32768 [ 174.196528][T12868] loop0: p1 p3 < > [ 174.488369][T12874] xt_CT: No such helper "snmp_trap" [ 174.499549][T12874] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.537678][T12874] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.607760][T12874] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.626275][ T29] kauditd_printk_skb: 515 callbacks suppressed [ 174.626373][ T29] audit: type=1400 audit(1753292398.359:11062): avc: denied { create } for pid=12882 comm="syz.3.3341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 174.627862][T12883] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 174.632550][ T29] audit: type=1400 audit(1753292398.359:11063): avc: denied { write } for pid=12882 comm="syz.3.3341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 174.681963][ T29] audit: type=1400 audit(1753292398.409:11064): avc: denied { connect } for pid=12884 comm="syz.1.3343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 174.683985][T12883] __nla_validate_parse: 1 callbacks suppressed [ 174.683998][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3341'. [ 174.701890][ T29] audit: type=1400 audit(1753292398.409:11065): avc: denied { name_connect } for pid=12884 comm="syz.1.3343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 174.737411][T12883] netlink: 'syz.3.3341': attribute type 30 has an invalid length. [ 174.737689][ T29] audit: type=1400 audit(1753292398.469:11066): avc: denied { shutdown } for pid=12884 comm="syz.1.3343" lport=45619 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 174.773686][ T29] audit: type=1326 audit(1753292398.479:11067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12882 comm="syz.3.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe73ee9a9 code=0x7ffc0000 [ 174.773718][ T29] audit: type=1326 audit(1753292398.479:11068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12882 comm="syz.3.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4fe73ee9a9 code=0x7ffc0000 [ 174.773799][ T29] audit: type=1326 audit(1753292398.479:11069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12882 comm="syz.3.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe73ee9a9 code=0x7ffc0000 [ 174.773821][ T29] audit: type=1326 audit(1753292398.479:11070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12882 comm="syz.3.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f4fe73ee9a9 code=0x7ffc0000 [ 174.773844][ T29] audit: type=1326 audit(1753292398.479:11071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12882 comm="syz.3.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe73ee9a9 code=0x7ffc0000 [ 174.776551][T12883] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.776653][T12883] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.776683][T12883] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.776712][T12883] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.778190][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3341'. [ 174.778217][T12883] netlink: 'syz.3.3341': attribute type 30 has an invalid length. [ 174.779188][T12874] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.955094][T12900] loop5: detected capacity change from 0 to 512 [ 174.955792][T12900] EXT4-fs: Ignoring removed i_version option [ 174.991135][T12902] xt_CT: No such helper "snmp_trap" [ 174.999829][T12900] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 175.022422][T12902] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.033047][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 175.037779][T12900] EXT4-fs (loop5): 1 truncate cleaned up [ 175.051558][T12900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.126489][T12906] xt_CT: No such helper "snmp_trap" [ 175.138273][ T8046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.138234][T12906] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.157615][T12906] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.179446][T12910] 9pnet_fd: Insufficient options for proto=fd [ 175.180451][T12885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3343'. [ 175.229966][T12906] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.240458][T12906] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.308468][T12906] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.318847][T12906] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.334178][T12922] 9pnet_fd: Insufficient options for proto=fd [ 175.348398][T12922] netlink: 'syz.5.3356': attribute type 10 has an invalid length. [ 175.428014][T12928] 9pnet_fd: Insufficient options for proto=fd [ 175.428349][T12906] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.444419][T12906] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.463157][T12928] netlink: 'syz.1.3358': attribute type 10 has an invalid length. [ 175.497796][T12906] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.506354][T12906] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.518087][T12906] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.526462][T12906] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.538127][T12906] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.546369][T12906] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.557541][T12906] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.565947][T12906] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.590084][T12939] 9pnet_fd: Insufficient options for proto=fd [ 175.695797][T12953] 9pnet_fd: Insufficient options for proto=fd [ 175.718527][T12953] netlink: 'syz.3.3370': attribute type 10 has an invalid length. [ 175.802793][T12957] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3371'. [ 175.841851][T12957] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 176.319613][T12902] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.368753][T12902] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.438923][T12902] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.503106][T12902] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.514888][T12902] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.528409][T12902] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.542381][T12902] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.614304][T12974] loop2: detected capacity change from 0 to 512 [ 176.623672][T12974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.632485][T12974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.166077][T12992] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 177.173236][T12992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3384'. [ 177.182129][T12992] netlink: 'syz.5.3384': attribute type 30 has an invalid length. [ 177.190445][T12992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3384'. [ 177.199491][T12992] netlink: 'syz.5.3384': attribute type 30 has an invalid length. [ 177.253575][T12998] xt_CT: No such helper "snmp_trap" [ 177.260987][T12998] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.306862][T12998] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.336650][T12998] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.396710][T12998] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.810818][T12874] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.813520][T12874] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.831695][T12874] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.834316][T12874] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.173638][T13023] FAULT_INJECTION: forcing a failure. [ 178.173638][T13023] name failslab, interval 1, probability 0, space 0, times 0 [ 178.173742][T13023] CPU: 0 UID: 0 PID: 13023 Comm: syz.5.3397 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 178.173769][T13023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.173781][T13023] Call Trace: [ 178.173787][T13023] [ 178.173795][T13023] __dump_stack+0x1d/0x30 [ 178.173815][T13023] dump_stack_lvl+0xe8/0x140 [ 178.173831][T13023] dump_stack+0x15/0x1b [ 178.173964][T13023] should_fail_ex+0x265/0x280 [ 178.173988][T13023] should_failslab+0x8c/0xb0 [ 178.174008][T13023] __kmalloc_noprof+0xa5/0x3e0 [ 178.174033][T13023] ? context_struct_to_string+0x24d/0x3a0 [ 178.174131][T13023] context_struct_to_string+0x24d/0x3a0 [ 178.174156][T13023] security_sid_to_context_core+0x215/0x2e0 [ 178.174178][T13023] security_sid_to_context+0x27/0x40 [ 178.174200][T13023] avc_audit_post_callback+0x10f/0x520 [ 178.174247][T13023] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 178.174272][T13023] common_lsm_audit+0x1bb/0x230 [ 178.174291][T13023] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 178.174318][T13023] slow_avc_audit+0x104/0x140 [ 178.174364][T13023] avc_has_perm+0x128/0x150 [ 178.174389][T13023] selinux_socket_create+0xff/0x180 [ 178.174420][T13023] security_socket_create+0x50/0x90 [ 178.174448][T13023] __sock_create+0xe0/0x5b0 [ 178.174471][T13023] ? fput+0x8f/0xc0 [ 178.174573][T13023] __sys_socket+0xb0/0x180 [ 178.174626][T13023] __x64_sys_socket+0x3f/0x50 [ 178.174649][T13023] x64_sys_call+0x285a/0x2fb0 [ 178.174670][T13023] do_syscall_64+0xd2/0x200 [ 178.174688][T13023] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 178.174756][T13023] ? clear_bhb_loop+0x40/0x90 [ 178.174776][T13023] ? clear_bhb_loop+0x40/0x90 [ 178.174796][T13023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.174875][T13023] RIP: 0033:0x7fd0c838e9a9 [ 178.174889][T13023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.174906][T13023] RSP: 002b:00007fd0c69ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 178.174924][T13023] RAX: ffffffffffffffda RBX: 00007fd0c85b5fa0 RCX: 00007fd0c838e9a9 [ 178.174937][T13023] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 178.174949][T13023] RBP: 00007fd0c69ef090 R08: 0000000000000000 R09: 0000000000000000 [ 178.174992][T13023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.175004][T13023] R13: 0000000000000000 R14: 00007fd0c85b5fa0 R15: 00007fff82000398 [ 178.175022][T13023] [ 178.285581][T13025] geneve1: entered promiscuous mode [ 178.285778][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3398'. [ 178.743174][T13044] xt_CT: No such helper "snmp_trap" [ 178.750602][T13044] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.760411][T13044] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.826079][T13044] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.835938][T13044] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.886247][T13044] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.896116][T13044] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.936738][T13044] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.946514][T13044] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.000279][T13044] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.008514][T13044] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.019275][T13044] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.027544][T13044] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.038141][T13044] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.046391][T13044] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.058140][T13044] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.066489][T13044] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.123762][T13053] loop5: detected capacity change from 0 to 1024 [ 179.138386][T13053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.155927][T13053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.291864][T13077] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.300104][T13077] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.308413][T13077] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.316628][T13077] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.325184][T13077] geneve3: entered promiscuous mode [ 179.330427][T13077] geneve3: entered allmulticast mode [ 179.336710][T13077] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.345177][T13077] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.353538][T13077] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.361913][T13077] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.378325][T13078] netlink: 'syz.5.3416': attribute type 10 has an invalid length. [ 179.400290][T13080] loop1: detected capacity change from 0 to 128 [ 179.447931][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3417'. [ 179.457256][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3417'. [ 179.514774][T13091] netlink: 16402 bytes leftover after parsing attributes in process `+}[@'. [ 179.740699][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 179.740714][ T29] audit: type=1107 audit(1753292403.470:11326): pid=13100 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 179.772084][T13104] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3427'. [ 179.797328][ T29] audit: type=1400 audit(1753292403.530:11327): avc: denied { read write } for pid=13105 comm="syz.3.3429" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 179.833756][T13108] loop1: detected capacity change from 0 to 128 [ 179.838818][ T29] audit: type=1400 audit(1753292403.530:11328): avc: denied { open } for pid=13105 comm="syz.3.3429" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 179.863749][ T29] audit: type=1400 audit(1753292403.560:11329): avc: denied { create } for pid=13107 comm="syz.1.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 179.883426][ T29] audit: type=1400 audit(1753292403.560:11330): avc: denied { write } for pid=13107 comm="syz.1.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 179.904587][T13108] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.919535][T13108] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 179.922139][T13111] geneve2: entered promiscuous mode [ 179.953859][ T29] audit: type=1400 audit(1753292403.680:11331): avc: denied { setattr } for pid=13107 comm="syz.1.3428" path="/74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 179.956558][T13111] geneve2: entered allmulticast mode [ 180.018750][T13112] netlink: 'syz.3.3430': attribute type 10 has an invalid length. [ 180.026792][ T29] audit: type=1400 audit(1753292403.750:11332): avc: denied { ioctl } for pid=13107 comm="syz.1.3428" path="/74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 180.081851][ T4211] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 180.094283][T12021] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.162052][T13120] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 180.169624][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3433'. [ 180.178570][T13120] netlink: 'syz.3.3433': attribute type 30 has an invalid length. [ 180.186569][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3433'. [ 180.195476][T13120] netlink: 'syz.3.3433': attribute type 30 has an invalid length. [ 180.206581][ T29] audit: type=1326 audit(1753292403.940:11333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13119 comm="syz.3.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe73ee9a9 code=0x7ffc0000 [ 180.230184][ T29] audit: type=1326 audit(1753292403.940:11334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13119 comm="syz.3.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe73ee9a9 code=0x7ffc0000 [ 180.253977][ T29] audit: type=1326 audit(1753292403.940:11335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13119 comm="syz.3.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4fe73ee9a9 code=0x7ffc0000 [ 180.506689][T13134] FAULT_INJECTION: forcing a failure. [ 180.506689][T13134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.506716][T13134] CPU: 1 UID: 0 PID: 13134 Comm: syz.3.3439 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 180.506797][T13134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.506810][T13134] Call Trace: [ 180.506815][T13134] [ 180.506821][T13134] __dump_stack+0x1d/0x30 [ 180.506839][T13134] dump_stack_lvl+0xe8/0x140 [ 180.506863][T13134] dump_stack+0x15/0x1b [ 180.506881][T13134] should_fail_ex+0x265/0x280 [ 180.506905][T13134] should_fail+0xb/0x20 [ 180.506926][T13134] should_fail_usercopy+0x1a/0x20 [ 180.506995][T13134] _copy_from_user+0x1c/0xb0 [ 180.507013][T13134] ___sys_sendmsg+0xc1/0x1d0 [ 180.507053][T13134] __x64_sys_sendmsg+0xd4/0x160 [ 180.507088][T13134] x64_sys_call+0x2999/0x2fb0 [ 180.507160][T13134] do_syscall_64+0xd2/0x200 [ 180.507264][T13134] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 180.507291][T13134] ? clear_bhb_loop+0x40/0x90 [ 180.507312][T13134] ? clear_bhb_loop+0x40/0x90 [ 180.507389][T13134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.507407][T13134] RIP: 0033:0x7f4fe73ee9a9 [ 180.507420][T13134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.507494][T13134] RSP: 002b:00007f4fe5a57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.507554][T13134] RAX: ffffffffffffffda RBX: 00007f4fe7615fa0 RCX: 00007f4fe73ee9a9 [ 180.507564][T13134] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 180.507575][T13134] RBP: 00007f4fe5a57090 R08: 0000000000000000 R09: 0000000000000000 [ 180.507587][T13134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.507599][T13134] R13: 0000000000000000 R14: 00007f4fe7615fa0 R15: 00007ffeb7dc96f8 [ 180.507616][T13134] [ 180.592167][T12998] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.718903][T12998] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.719839][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3441'. [ 180.721852][T12998] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.725290][T12998] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.787721][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3441'. [ 180.825336][T13152] 9pnet_fd: Insufficient options for proto=fd [ 180.832293][T13152] netlink: 'syz.2.3446': attribute type 10 has an invalid length. [ 181.729662][T13178] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 181.737186][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3456'. [ 181.746171][T13178] netlink: 'syz.0.3456': attribute type 30 has an invalid length. [ 181.756813][T13178] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.765066][T13178] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.773440][T13178] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.781680][T13178] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.791920][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3456'. [ 181.800910][T13178] netlink: 'syz.0.3456': attribute type 30 has an invalid length. [ 181.957134][T13183] tipc: Enabling of bearer rejected, failed to enable media [ 181.957447][T13187] loop0: detected capacity change from 0 to 128 [ 181.984391][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3460'. [ 181.993613][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3460'. [ 182.083406][T13192] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.091903][T13192] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.100208][T13192] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.108450][T13192] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.110133][T13195] FAULT_INJECTION: forcing a failure. [ 182.110133][T13195] name failslab, interval 1, probability 0, space 0, times 0 [ 182.117736][T13192] geneve3: entered promiscuous mode [ 182.129527][T13195] CPU: 1 UID: 0 PID: 13195 Comm: syz.0.3464 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 182.129555][T13195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.129569][T13195] Call Trace: [ 182.129576][T13195] [ 182.129589][T13195] __dump_stack+0x1d/0x30 [ 182.129616][T13195] dump_stack_lvl+0xe8/0x140 [ 182.129650][T13195] dump_stack+0x15/0x1b [ 182.129666][T13195] should_fail_ex+0x265/0x280 [ 182.129693][T13195] ? __se_sys_memfd_create+0x1cc/0x590 [ 182.129742][T13195] should_failslab+0x8c/0xb0 [ 182.129762][T13195] __kmalloc_cache_noprof+0x4c/0x320 [ 182.129830][T13195] ? fput+0x8f/0xc0 [ 182.129851][T13195] __se_sys_memfd_create+0x1cc/0x590 [ 182.129912][T13195] __x64_sys_memfd_create+0x31/0x40 [ 182.129993][T13195] x64_sys_call+0x122f/0x2fb0 [ 182.130013][T13195] do_syscall_64+0xd2/0x200 [ 182.130032][T13195] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 182.130153][T13195] ? clear_bhb_loop+0x40/0x90 [ 182.130173][T13195] ? clear_bhb_loop+0x40/0x90 [ 182.130193][T13195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.130221][T13195] RIP: 0033:0x7fe99f26e9a9 [ 182.130240][T13195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.130272][T13195] RSP: 002b:00007fe99d8d6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 182.130294][T13195] RAX: ffffffffffffffda RBX: 00000000000005fb RCX: 00007fe99f26e9a9 [ 182.130307][T13195] RDX: 00007fe99d8d6ef0 RSI: 0000000000000000 RDI: 00007fe99f2f16fc [ 182.130324][T13195] RBP: 00002000000004c0 R08: 00007fe99d8d6bb7 R09: 00007fe99d8d6e40 [ 182.130336][T13195] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 182.130349][T13195] R13: 00007fe99d8d6ef0 R14: 00007fe99d8d6eb0 R15: 0000200000000cc0 [ 182.130367][T13195] [ 182.239016][T13200] netlink: 'syz.5.3462': attribute type 10 has an invalid length. [ 182.239788][T13192] geneve3: entered allmulticast mode [ 182.329083][T13192] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.337625][T13192] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.345995][T13192] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.354313][T13192] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.461619][T13211] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 182.477277][T13211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3470'. [ 182.486194][T13211] netlink: 'syz.0.3470': attribute type 30 has an invalid length. [ 182.494539][T13211] netlink: 'syz.0.3470': attribute type 30 has an invalid length. [ 182.577281][T13217] tipc: Enabling of bearer rejected, failed to enable media [ 182.619241][T13223] FAULT_INJECTION: forcing a failure. [ 182.619241][T13223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.632459][T13223] CPU: 1 UID: 0 PID: 13223 Comm: syz.0.3475 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 182.632540][T13223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.632610][T13223] Call Trace: [ 182.632615][T13223] [ 182.632670][T13223] __dump_stack+0x1d/0x30 [ 182.632688][T13223] dump_stack_lvl+0xe8/0x140 [ 182.632758][T13223] dump_stack+0x15/0x1b [ 182.632852][T13223] should_fail_ex+0x265/0x280 [ 182.632876][T13223] should_fail+0xb/0x20 [ 182.632969][T13223] should_fail_usercopy+0x1a/0x20 [ 182.632994][T13223] _copy_from_user+0x1c/0xb0 [ 182.633057][T13223] __sys_bpf+0x178/0x790 [ 182.633083][T13223] __x64_sys_bpf+0x41/0x50 [ 182.633140][T13223] x64_sys_call+0x2478/0x2fb0 [ 182.633157][T13223] do_syscall_64+0xd2/0x200 [ 182.633172][T13223] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 182.633192][T13223] ? clear_bhb_loop+0x40/0x90 [ 182.633267][T13223] ? clear_bhb_loop+0x40/0x90 [ 182.633284][T13223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.633300][T13223] RIP: 0033:0x7fe99f26e9a9 [ 182.633313][T13223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.633327][T13223] RSP: 002b:00007fe99d8d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.633342][T13223] RAX: ffffffffffffffda RBX: 00007fe99f495fa0 RCX: 00007fe99f26e9a9 [ 182.633402][T13223] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 182.633412][T13223] RBP: 00007fe99d8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 182.633422][T13223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.633431][T13223] R13: 0000000000000000 R14: 00007fe99f495fa0 R15: 00007ffe38b8f238 [ 182.633484][T13223] [ 182.816932][T13229] loop0: detected capacity change from 0 to 512 [ 182.823606][T13229] EXT4-fs: Ignoring removed i_version option [ 182.830024][T13229] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 182.842081][T13229] EXT4-fs (loop0): 1 truncate cleaned up [ 182.848629][T13229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.873781][T13233] vlan0: entered promiscuous mode [ 182.878967][T13233] bridge0: entered promiscuous mode [ 182.938562][T13238] geneve2: entered promiscuous mode [ 182.943798][T13238] geneve2: entered allmulticast mode [ 182.947171][T11025] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.053267][T13250] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 183.300868][T13271] FAULT_INJECTION: forcing a failure. [ 183.300868][T13271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.300963][T13271] CPU: 0 UID: 0 PID: 13271 Comm: syz.3.3495 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 183.300993][T13271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.301004][T13271] Call Trace: [ 183.301009][T13271] [ 183.301016][T13271] __dump_stack+0x1d/0x30 [ 183.301038][T13271] dump_stack_lvl+0xe8/0x140 [ 183.301058][T13271] dump_stack+0x15/0x1b [ 183.301155][T13271] should_fail_ex+0x265/0x280 [ 183.301185][T13271] should_fail+0xb/0x20 [ 183.301241][T13271] should_fail_usercopy+0x1a/0x20 [ 183.301299][T13271] _copy_to_user+0x20/0xa0 [ 183.301320][T13271] simple_read_from_buffer+0xb5/0x130 [ 183.301406][T13271] proc_fail_nth_read+0x100/0x140 [ 183.301433][T13271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 183.301487][T13271] vfs_read+0x19d/0x6f0 [ 183.301513][T13271] ? __rcu_read_unlock+0x4f/0x70 [ 183.301530][T13271] ? __rcu_read_unlock+0x4f/0x70 [ 183.301574][T13271] ? __fget_files+0x184/0x1c0 [ 183.301596][T13271] ksys_read+0xda/0x1a0 [ 183.301619][T13271] __x64_sys_read+0x40/0x50 [ 183.301712][T13271] x64_sys_call+0x2d77/0x2fb0 [ 183.301731][T13271] do_syscall_64+0xd2/0x200 [ 183.301749][T13271] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 183.301774][T13271] ? clear_bhb_loop+0x40/0x90 [ 183.301827][T13271] ? clear_bhb_loop+0x40/0x90 [ 183.301847][T13271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.301867][T13271] RIP: 0033:0x7f4fe73ed3bc [ 183.301881][T13271] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 183.301898][T13271] RSP: 002b:00007f4fe5a57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 183.301997][T13271] RAX: ffffffffffffffda RBX: 00007f4fe7615fa0 RCX: 00007f4fe73ed3bc [ 183.302010][T13271] RDX: 000000000000000f RSI: 00007f4fe5a570a0 RDI: 0000000000000006 [ 183.302022][T13271] RBP: 00007f4fe5a57090 R08: 0000000000000000 R09: 0000000000000000 [ 183.302034][T13271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.302046][T13271] R13: 0000000000000000 R14: 00007f4fe7615fa0 R15: 00007ffeb7dc96f8 [ 183.302064][T13271] [ 183.558041][T13280] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 183.628033][T13282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.694267][T13291] loop3: detected capacity change from 0 to 512 [ 183.700935][T13291] EXT4-fs: Ignoring removed i_version option [ 183.701116][T13291] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 183.702313][T13291] EXT4-fs (loop3): 1 truncate cleaned up [ 183.723710][T13291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.832791][T13306] lo speed is unknown, defaulting to 1000 [ 183.840106][T13306] lo speed is unknown, defaulting to 1000 [ 183.840290][T13306] lo speed is unknown, defaulting to 1000 [ 183.841191][T13306] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 183.849152][T13306] lo speed is unknown, defaulting to 1000 [ 183.849397][T13306] lo speed is unknown, defaulting to 1000 [ 183.849696][T13306] lo speed is unknown, defaulting to 1000 [ 183.851271][T13306] lo speed is unknown, defaulting to 1000 [ 183.851518][T13306] lo speed is unknown, defaulting to 1000 [ 183.851843][T13306] lo speed is unknown, defaulting to 1000 [ 183.860061][T13306] loop3: detected capacity change from 0 to 512 [ 183.860904][T13306] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 183.886754][T13306] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 183.886776][T13306] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 183.886884][T13306] System zones: 0-1, 15-15, 18-18, 34-34 [ 183.886977][T13306] EXT4-fs (loop3): orphan cleanup on readonly fs [ 183.887079][T13306] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 183.887158][T13306] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 183.893278][T13306] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3509: bg 0: block 40: padding at end of block bitmap is not set [ 183.899205][T13306] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 183.899392][T13306] EXT4-fs (loop3): 1 truncate cleaned up [ 183.900634][T13306] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 183.900773][T13306] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 183.900813][T13306] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 184.033576][T13322] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 184.141239][T13334] loop0: detected capacity change from 0 to 512 [ 184.152199][T13334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.161072][T13334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.215285][T13339] tipc: Enabling of bearer rejected, failed to enable media [ 184.231013][T13343] gretap0: refused to change device tx_queue_len [ 184.237415][T13343] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 184.252993][T10574] lo speed is unknown, defaulting to 1000 [ 184.258756][T10574] syz0: Port: 1 Link DOWN [ 184.306174][T13344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=13344 comm=syz.3.3524 [ 184.319076][T13344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=149 sclass=netlink_route_socket pid=13344 comm=syz.3.3524 [ 184.332291][T13344] gretap0: refused to change device tx_queue_len [ 184.338698][T13344] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 184.390683][T13370] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 184.398832][T13370] validate_nla: 10 callbacks suppressed [ 184.398856][T13370] netlink: 'syz.1.3532': attribute type 30 has an invalid length. [ 184.412984][T13370] netlink: 'syz.1.3532': attribute type 30 has an invalid length. [ 184.734352][T13411] loop1: detected capacity change from 0 to 256 [ 184.742316][T13411] FAT-fs (loop1): bogus sectors per cluster 0 [ 184.748429][T13411] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 184.757650][T13411] FAT-fs (loop1): Can't find a valid FAT filesystem [ 184.929824][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 184.929838][ T29] audit: type=1107 audit(1753292408.661:11679): pid=13425 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 185.036187][T13437] loop3: detected capacity change from 0 to 512 [ 185.036506][T13437] EXT4-fs: Ignoring removed i_version option [ 185.036911][T13437] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 185.037013][ T29] audit: type=1400 audit(1753292408.771:11680): avc: denied { ioctl } for pid=13438 comm="syz.5.3562" path="socket:[48389]" dev="sockfs" ino=48389 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 185.038256][ T29] audit: type=1400 audit(1753292408.771:11681): avc: denied { create } for pid=13438 comm="syz.5.3562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 185.054019][T13437] EXT4-fs (loop3): 1 truncate cleaned up [ 185.064339][ T29] audit: type=1400 audit(1753292408.791:11682): avc: denied { create } for pid=13438 comm="syz.5.3562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 185.244527][T13458] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 185.244914][T13458] __nla_validate_parse: 19 callbacks suppressed [ 185.244925][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'. [ 185.244948][T13458] netlink: 'syz.1.3571': attribute type 30 has an invalid length. [ 185.245069][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'. [ 185.245083][T13458] netlink: 'syz.1.3571': attribute type 30 has an invalid length. [ 185.247342][ T29] audit: type=1107 audit(1753292408.971:11683): pid=13456 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 185.305759][ T29] audit: type=1326 audit(1753292408.981:11684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.1.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec666e9a9 code=0x7ffc0000 [ 185.314896][T13463] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.329735][ T29] audit: type=1326 audit(1753292408.981:11685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.1.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcec666e9a9 code=0x7ffc0000 [ 185.337676][T13463] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.361215][ T29] audit: type=1326 audit(1753292408.981:11686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.1.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec666e9a9 code=0x7ffc0000 [ 185.369390][T13463] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.392890][ T29] audit: type=1326 audit(1753292408.981:11687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.1.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fcec666e9a9 code=0x7ffc0000 [ 185.401051][T13463] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.424571][ T29] audit: type=1326 audit(1753292408.981:11688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.1.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec666e9a9 code=0x7ffc0000 [ 185.457329][T13463] geneve3: entered promiscuous mode [ 185.457418][T13463] geneve3: entered allmulticast mode [ 185.473946][T13463] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.474009][T13463] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.474040][T13463] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.474069][T13463] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.475963][T13465] netlink: 'syz.5.3574': attribute type 10 has an invalid length. [ 185.509747][T13467] geneve2: entered promiscuous mode [ 185.527706][T13467] geneve2: entered allmulticast mode [ 185.551561][T13471] loop1: detected capacity change from 0 to 512 [ 185.552058][T13471] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.555473][T13472] netlink: 'syz.3.3573': attribute type 10 has an invalid length. [ 185.560530][T13471] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 185.600469][T13471] netlink: 'syz.1.3576': attribute type 2 has an invalid length. [ 185.732190][T13485] FAULT_INJECTION: forcing a failure. [ 185.732190][T13485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.745414][T13485] CPU: 0 UID: 0 PID: 13485 Comm: syz.1.3582 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 185.745439][T13485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.745452][T13485] Call Trace: [ 185.745459][T13485] [ 185.745467][T13485] __dump_stack+0x1d/0x30 [ 185.745489][T13485] dump_stack_lvl+0xe8/0x140 [ 185.745508][T13485] dump_stack+0x15/0x1b [ 185.745524][T13485] should_fail_ex+0x265/0x280 [ 185.745707][T13485] should_fail+0xb/0x20 [ 185.745806][T13485] should_fail_usercopy+0x1a/0x20 [ 185.745931][T13485] _copy_from_user+0x1c/0xb0 [ 185.745952][T13485] __sys_bpf+0x178/0x790 [ 185.745985][T13485] __x64_sys_bpf+0x41/0x50 [ 185.746009][T13485] x64_sys_call+0x2478/0x2fb0 [ 185.746030][T13485] do_syscall_64+0xd2/0x200 [ 185.746069][T13485] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 185.746161][T13485] ? clear_bhb_loop+0x40/0x90 [ 185.746182][T13485] ? clear_bhb_loop+0x40/0x90 [ 185.746204][T13485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.746225][T13485] RIP: 0033:0x7fcec666e9a9 [ 185.746241][T13485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.746339][T13485] RSP: 002b:00007fcec4cd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.746390][T13485] RAX: ffffffffffffffda RBX: 00007fcec6895fa0 RCX: 00007fcec666e9a9 [ 185.746404][T13485] RDX: 0000000000000010 RSI: 00002000000007c0 RDI: 000000000000000f [ 185.746429][T13485] RBP: 00007fcec4cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 185.746443][T13485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.746456][T13485] R13: 0000000000000000 R14: 00007fcec6895fa0 R15: 00007ffd05406b88 [ 185.746476][T13485] [ 185.928505][ T4209] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 185.946852][T13495] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 185.957647][T13495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3587'. [ 185.966761][T13495] netlink: 'syz.1.3587': attribute type 30 has an invalid length. [ 186.017427][T13500] loop2: detected capacity change from 0 to 512 [ 186.027604][T13503] netlink: 'syz.0.3583': attribute type 10 has an invalid length. [ 186.035786][T13495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3587'. [ 186.044933][T13495] netlink: 'syz.1.3587': attribute type 30 has an invalid length. [ 186.054088][T13500] EXT4-fs: inline encryption not supported [ 186.070283][T13500] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.075954][T13505] geneve2: entered promiscuous mode [ 186.081972][T13505] geneve2: entered allmulticast mode [ 186.147531][T13500] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 186.147896][T13500] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.3588: attempt to clear invalid blocks 2 len 1 [ 186.148231][T13500] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 186.148288][T13500] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3588: invalid indirect mapped block 1819239214 (level 0) [ 186.148563][T13500] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3588: invalid indirect mapped block 1819239214 (level 1) [ 186.150435][T13500] EXT4-fs (loop2): 1 truncate cleaned up [ 186.150769][T13500] EXT4-fs mount: 7 callbacks suppressed [ 186.150779][T13500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.156373][T13500] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.3588: corrupted in-inode xattr: e_value out of bounds [ 186.156745][T13500] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.3588: corrupted in-inode xattr: e_value out of bounds [ 186.173631][T12611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.296878][T13524] loop2: detected capacity change from 0 to 128 [ 186.335973][T13524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3598'. [ 186.336101][T13524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3598'. [ 186.337168][T13527] SELinux: Context system_u:object_r:nvram_device_t:s0 is not valid (left unmapped). [ 186.534757][T13538] loop2: detected capacity change from 0 to 512 [ 186.541407][T13538] EXT4-fs: Ignoring removed i_version option [ 186.548465][T13538] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 186.559447][T13538] EXT4-fs (loop2): 1 truncate cleaned up [ 186.559820][T13538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.668774][T12611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.766424][T13556] xt_CT: No such helper "snmp_trap" [ 186.774562][T13556] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.788726][T13558] loop2: detected capacity change from 0 to 512 [ 186.792210][T13558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.804195][T13558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.824975][T13556] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.874800][T13556] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.914672][T13556] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.969157][T13556] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.972073][T13556] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.989394][T13556] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.000839][T13556] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.039744][T13567] loop0: detected capacity change from 0 to 512 [ 187.039986][T13567] EXT4-fs: Ignoring removed i_version option [ 187.040414][T13567] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 187.064560][T13567] EXT4-fs (loop0): 1 truncate cleaned up [ 187.064965][T13567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.186301][T11025] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.215637][T13572] xt_CT: No such helper "snmp_trap" [ 187.226444][T13572] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.236297][T13572] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.311632][T13572] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.321564][T13572] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.392211][T13596] xt_CT: No such helper "snmp_trap" [ 187.413893][T13596] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.423875][T13596] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.437163][T13572] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.437198][T13572] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.496741][T13596] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.506552][T13596] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.540300][T13572] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.550125][T13572] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.595214][T13596] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.605094][T13596] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.614017][T13613] loop2: detected capacity change from 0 to 512 [ 187.621537][T13613] EXT4-fs: Ignoring removed i_version option [ 187.628429][T13613] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 187.646078][T13572] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.654399][T13572] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.664211][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3629'. [ 187.679536][T13613] EXT4-fs (loop2): 1 truncate cleaned up [ 187.685597][T13572] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.693878][T13572] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.702503][T13613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.705223][T13572] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.719915][T13618] loop0: detected capacity change from 0 to 512 [ 187.722674][T13572] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.738609][T13596] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.748451][T13596] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.759393][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3629'. [ 187.768588][T13618] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 187.782073][T13572] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.790376][T13572] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.806439][T13618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.824801][T13618] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.842214][T13596] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.842988][T13618] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.3633: iget: bad i_size value: 2533274857506816 [ 187.850512][T13596] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.873285][T12611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.887154][T13596] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.895553][T13596] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.906951][T13596] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.915208][T13596] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.926504][T13596] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.934794][T13596] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.970836][T13625] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3636'. [ 188.007654][T11025] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.117910][T13651] loop0: detected capacity change from 0 to 128 [ 188.149539][T13654] loop3: detected capacity change from 0 to 128 [ 188.158284][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3644'. [ 188.209364][T13656] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 188.403578][T13664] xt_CT: No such helper "snmp_trap" [ 188.410756][T13664] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.464522][T13664] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.504495][T13664] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.516944][T13669] xt_CT: No such helper "snmp_trap" [ 188.540070][T13669] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.540114][T13669] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.575424][T13664] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.605830][T13669] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.605859][T13669] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.646033][T13669] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.646079][T13669] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.670468][T13664] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.684475][T13664] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.694685][T13669] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.694760][T13669] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.707597][T13664] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.726214][T13664] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.750733][T13669] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.758640][T13672] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 188.759082][T13669] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.778455][T13669] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.778497][T13669] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.798305][T13669] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.798345][T13669] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.801641][T13669] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.823195][T13669] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.834468][T13674] FAULT_INJECTION: forcing a failure. [ 188.834468][T13674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.834495][T13674] CPU: 1 UID: 0 PID: 13674 Comm: syz.2.3653 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 188.834535][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.834558][T13674] Call Trace: [ 188.834565][T13674] [ 188.834573][T13674] __dump_stack+0x1d/0x30 [ 188.834618][T13674] dump_stack_lvl+0xe8/0x140 [ 188.834638][T13674] dump_stack+0x15/0x1b [ 188.834652][T13674] should_fail_ex+0x265/0x280 [ 188.834675][T13674] should_fail+0xb/0x20 [ 188.834702][T13674] should_fail_usercopy+0x1a/0x20 [ 188.834778][T13674] _copy_from_user+0x1c/0xb0 [ 188.834798][T13674] perf_copy_attr+0x145/0x610 [ 188.834853][T13674] __se_sys_perf_event_open+0x67/0x11c0 [ 188.834876][T13674] ? vfs_write+0x75e/0x8e0 [ 188.834905][T13674] ? __rcu_read_unlock+0x4f/0x70 [ 188.835013][T13674] __x64_sys_perf_event_open+0x67/0x80 [ 188.835039][T13674] x64_sys_call+0x27ec/0x2fb0 [ 188.835061][T13674] do_syscall_64+0xd2/0x200 [ 188.835159][T13674] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 188.835255][T13674] ? clear_bhb_loop+0x40/0x90 [ 188.835272][T13674] ? clear_bhb_loop+0x40/0x90 [ 188.835352][T13674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.835372][T13674] RIP: 0033:0x7f6cda6ae9a9 [ 188.835386][T13674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.835429][T13674] RSP: 002b:00007f6cd8d0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 188.835448][T13674] RAX: ffffffffffffffda RBX: 00007f6cda8d5fa0 RCX: 00007f6cda6ae9a9 [ 188.835461][T13674] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 188.835474][T13674] RBP: 00007f6cd8d0f090 R08: 0000000000000003 R09: 0000000000000000 [ 188.835486][T13674] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 188.835571][T13674] R13: 0000000000000000 R14: 00007f6cda8d5fa0 R15: 00007ffdd9eadc98 [ 188.835588][T13674] [ 188.983488][T13684] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 189.068974][T13688] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.107374][T13688] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.107405][T13688] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.107433][T13688] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.160883][T13695] loop3: detected capacity change from 0 to 128 [ 189.218780][T13694] tipc: Enabled bearer , priority 0 [ 189.226870][T13694] tipc: Disabling bearer [ 189.273710][T13706] xt_CT: No such helper "snmp_trap" [ 189.281033][T13706] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.290818][T13706] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.380225][T13713] loop0: detected capacity change from 0 to 128 [ 189.387453][T13706] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.397347][T13706] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.495061][T13706] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.504888][T13706] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.545589][T13715] loop0: detected capacity change from 0 to 512 [ 189.552336][T13715] EXT4-fs: Ignoring removed i_version option [ 189.559281][T13715] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 189.571566][T13706] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.581431][T13706] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.591700][T13715] EXT4-fs (loop0): 1 truncate cleaned up [ 189.602625][T13715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.649628][T13706] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.657957][T13706] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.687585][T13706] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.695897][T13706] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.707564][T13706] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.709836][T11025] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.715853][T13706] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.736072][T13706] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.744373][T13706] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.964186][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 189.964200][ T29] audit: type=1326 audit(1753292413.702:11997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13733 comm="syz.5.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c838e9a9 code=0x7ffc0000 [ 190.013419][T13736] FAULT_INJECTION: forcing a failure. [ 190.013419][T13736] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 190.026747][T13736] CPU: 0 UID: 0 PID: 13736 Comm: wÞ£ÿ Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 190.026822][T13736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.026832][T13736] Call Trace: [ 190.026839][T13736] [ 190.026846][T13736] __dump_stack+0x1d/0x30 [ 190.026940][T13736] dump_stack_lvl+0xe8/0x140 [ 190.026959][T13736] dump_stack+0x15/0x1b [ 190.027006][T13736] should_fail_ex+0x265/0x280 [ 190.027036][T13736] should_fail_alloc_page+0xf2/0x100 [ 190.027059][T13736] __alloc_frozen_pages_noprof+0xff/0x360 [ 190.027144][T13736] __alloc_pages_noprof+0x9/0x20 [ 190.027171][T13736] ___kmalloc_large_node+0x73/0x140 [ 190.027192][T13736] __kmalloc_large_node_noprof+0x16/0xa0 [ 190.027213][T13736] __kmalloc_noprof+0x2ab/0x3e0 [ 190.027244][T13736] ? iovec_from_user+0x84/0x210 [ 190.027265][T13736] iovec_from_user+0x84/0x210 [ 190.027333][T13736] ? process_vm_rw+0x137/0x950 [ 190.027353][T13736] process_vm_rw+0x15b/0x950 [ 190.027372][T13736] ? _parse_integer+0x27/0x40 [ 190.027468][T13736] ? kstrtoull+0x111/0x140 [ 190.027498][T13736] ? __fget_files+0x184/0x1c0 [ 190.027515][T13736] ? fput+0x8f/0xc0 [ 190.027537][T13736] __x64_sys_process_vm_readv+0x78/0x90 [ 190.027641][T13736] x64_sys_call+0x2978/0x2fb0 [ 190.027659][T13736] do_syscall_64+0xd2/0x200 [ 190.027676][T13736] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 190.027709][T13736] ? clear_bhb_loop+0x40/0x90 [ 190.027728][T13736] ? clear_bhb_loop+0x40/0x90 [ 190.027761][T13736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.027778][T13736] RIP: 0033:0x7f4fe73ee9a9 [ 190.027794][T13736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.027880][T13736] RSP: 002b:00007f4fe5a57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 190.027902][T13736] RAX: ffffffffffffffda RBX: 00007f4fe7615fa0 RCX: 00007f4fe73ee9a9 [ 190.027912][T13736] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 00000000000000c1 [ 190.027925][T13736] RBP: 00007f4fe5a57090 R08: 0000000000000286 R09: 0000000000000000 [ 190.027963][T13736] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001 [ 190.027973][T13736] R13: 0000000000000000 R14: 00007f4fe7615fa0 R15: 00007ffeb7dc96f8 [ 190.027988][T13736] [ 190.257710][ T29] audit: type=1326 audit(1753292413.742:11998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13733 comm="syz.5.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd0c838e9a9 code=0x7ffc0000 [ 190.257805][ T29] audit: type=1326 audit(1753292413.742:11999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13733 comm="syz.5.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c838e9a9 code=0x7ffc0000 [ 190.257824][ T29] audit: type=1326 audit(1753292413.742:12000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13733 comm="syz.5.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c838e9a9 code=0x7ffc0000 [ 190.257848][ T29] audit: type=1326 audit(1753292413.742:12001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13733 comm="syz.5.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fd0c838e9a9 code=0x7ffc0000 [ 190.257936][ T29] audit: type=1326 audit(1753292413.742:12002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13733 comm="syz.5.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c838e9a9 code=0x7ffc0000 [ 190.258037][ T29] audit: type=1326 audit(1753292413.742:12003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13733 comm="syz.5.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0c838e9a9 code=0x7ffc0000 [ 190.258184][ T29] audit: type=1326 audit(1753292413.742:12004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13733 comm="syz.5.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c838e9a9 code=0x7ffc0000 [ 190.258204][ T29] audit: type=1326 audit(1753292413.742:12005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13733 comm="syz.5.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0c838e9a9 code=0x7ffc0000 [ 190.258267][ T29] audit: type=1326 audit(1753292413.742:12006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13733 comm="syz.5.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c838e9a9 code=0x7ffc0000 [ 190.562854][T13748] geneve1: entered promiscuous mode [ 190.562871][T13748] geneve1: entered allmulticast mode [ 190.601420][T13748] validate_nla: 10 callbacks suppressed [ 190.601435][T13748] netlink: 'syz.1.3683': attribute type 10 has an invalid length. [ 190.687442][T13759] loop1: detected capacity change from 0 to 512 [ 190.704914][T13759] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 190.728098][T13759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.728153][T13759] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.732025][T13759] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.3688: iget: bad i_size value: 2533274857506816 [ 190.801025][T13765] tipc: Enabled bearer , priority 0 [ 190.811216][T13765] tipc: Disabling bearer [ 190.836033][T12021] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.951664][T13773] __nla_validate_parse: 14 callbacks suppressed [ 190.951679][T13773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3689'. [ 191.017897][T13773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3689'. [ 191.440640][T13779] loop2: detected capacity change from 0 to 128 [ 191.534045][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3693'. [ 191.543486][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3693'. [ 191.603996][T13784] geneve1: entered promiscuous mode [ 191.609261][T13784] geneve1: entered allmulticast mode [ 191.663589][ T4216] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 191.722834][T13784] netlink: 'syz.0.3696': attribute type 10 has an invalid length. [ 192.081890][T13827] geneve1: entered promiscuous mode [ 192.087204][T13827] geneve1: entered allmulticast mode [ 192.104716][T13823] loop3: detected capacity change from 0 to 512 [ 192.148665][T13827] netlink: 'syz.1.3712': attribute type 10 has an invalid length. [ 192.177047][T13832] loop3: detected capacity change from 0 to 512 [ 192.192928][T13832] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 192.204409][T13832] EXT4-fs (loop3): 1 truncate cleaned up [ 192.204757][T13832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.565254][T13848] FAULT_INJECTION: forcing a failure. [ 192.565254][T13848] name failslab, interval 1, probability 0, space 0, times 0 [ 192.577968][T13848] CPU: 0 UID: 0 PID: 13848 Comm: syz.2.3718 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 192.577995][T13848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.578007][T13848] Call Trace: [ 192.578014][T13848] [ 192.578022][T13848] __dump_stack+0x1d/0x30 [ 192.578044][T13848] dump_stack_lvl+0xe8/0x140 [ 192.578071][T13848] dump_stack+0x15/0x1b [ 192.578151][T13848] should_fail_ex+0x265/0x280 [ 192.578354][T13848] ? genl_start+0x117/0x390 [ 192.578378][T13848] should_failslab+0x8c/0xb0 [ 192.578438][T13848] __kmalloc_cache_noprof+0x4c/0x320 [ 192.578560][T13848] genl_start+0x117/0x390 [ 192.578585][T13848] __netlink_dump_start+0x331/0x520 [ 192.578618][T13848] genl_family_rcv_msg_dumpit+0x115/0x180 [ 192.578644][T13848] ? __pfx_genl_start+0x10/0x10 [ 192.578699][T13848] ? __pfx_genl_dumpit+0x10/0x10 [ 192.578742][T13848] ? __pfx_genl_done+0x10/0x10 [ 192.578769][T13848] genl_rcv_msg+0x3f0/0x460 [ 192.578802][T13848] ? __pfx_ieee802154_dump_phy+0x10/0x10 [ 192.578832][T13848] netlink_rcv_skb+0x120/0x220 [ 192.578940][T13848] ? __pfx_genl_rcv_msg+0x10/0x10 [ 192.578969][T13848] genl_rcv+0x28/0x40 [ 192.579065][T13848] netlink_unicast+0x5a8/0x680 [ 192.579094][T13848] netlink_sendmsg+0x58b/0x6b0 [ 192.579115][T13848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.579133][T13848] __sock_sendmsg+0x145/0x180 [ 192.579232][T13848] ____sys_sendmsg+0x31e/0x4e0 [ 192.579265][T13848] ___sys_sendmsg+0x17b/0x1d0 [ 192.579337][T13848] __x64_sys_sendmsg+0xd4/0x160 [ 192.579365][T13848] x64_sys_call+0x2999/0x2fb0 [ 192.579384][T13848] do_syscall_64+0xd2/0x200 [ 192.579402][T13848] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 192.579426][T13848] ? clear_bhb_loop+0x40/0x90 [ 192.579486][T13848] ? clear_bhb_loop+0x40/0x90 [ 192.579520][T13848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.579540][T13848] RIP: 0033:0x7f6cda6ae9a9 [ 192.579556][T13848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.579573][T13848] RSP: 002b:00007f6cd8d0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.579593][T13848] RAX: ffffffffffffffda RBX: 00007f6cda8d5fa0 RCX: 00007f6cda6ae9a9 [ 192.579605][T13848] RDX: 0000000020000004 RSI: 00002000000004c0 RDI: 0000000000000004 [ 192.579622][T13848] RBP: 00007f6cd8d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 192.579634][T13848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.579646][T13848] R13: 0000000000000000 R14: 00007f6cda8d5fa0 R15: 00007ffdd9eadc98 [ 192.579662][T13848] [ 192.871597][T13852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3719'. [ 193.189635][T12467] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.263618][T13871] xt_CT: No such helper "snmp_trap" [ 193.272706][T13871] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.282572][T13871] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.298983][T13875] loop0: detected capacity change from 0 to 512 [ 193.305869][T13875] EXT4-fs: Ignoring removed i_version option [ 193.313977][T13875] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 193.328039][T13875] EXT4-fs (loop0): 1 truncate cleaned up [ 193.344178][T13875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.359481][T13871] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.369397][T13871] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.477513][T13871] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.487322][T13871] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.537580][T11025] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.568123][T13871] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.578030][T13871] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.612151][T13882] tipc: Started in network mode [ 193.617183][T13882] tipc: Node identity 2a4e4a5c7fa6, cluster identity 4711 [ 193.624361][T13882] tipc: Enabled bearer , priority 0 [ 193.640137][T13897] wg1: entered promiscuous mode [ 193.645125][T13897] wg1: entered allmulticast mode [ 193.654261][T13882] tipc: Disabling bearer [ 193.660178][T13899] loop0: detected capacity change from 0 to 128 [ 193.678423][T13871] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.686707][T13871] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.695990][T13899] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.715482][T13871] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.715540][T13899] ext4 filesystem being mounted at /221/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 193.723812][T13871] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.764208][T13899] tipc: Cannot configure node identity twice [ 193.770302][T13899] tipc: Cannot configure node identity twice [ 193.779011][T13871] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.787325][T13871] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.796432][T11025] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.798922][T13871] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.813784][T13871] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.851914][T13906] tmpfs: Bad value for 'mpol' [ 193.887517][T13908] loop3: detected capacity change from 0 to 512 [ 193.894804][T13908] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 193.915930][T13908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.928556][T13908] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.949737][T13908] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.3742: iget: bad i_size value: 2533274857506816 [ 194.025394][T12467] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.264232][T13930] xt_CT: No such helper "snmp_trap" [ 194.274029][T13930] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.283889][T13930] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.323755][T13930] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.333583][T13930] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.363825][T13930] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.373601][T13930] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.434507][T13930] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.444419][T13930] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.477285][T13930] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.485741][T13930] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.497951][T13930] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.506230][T13930] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.518226][T13930] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.526522][T13930] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.539027][T13930] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.547371][T13930] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.608813][T13936] loop3: detected capacity change from 0 to 512 [ 194.665335][T13938] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 194.676355][T13938] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3752'. [ 194.774524][T13948] loop3: detected capacity change from 0 to 512 [ 194.788781][T13948] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 194.789040][T13942] tipc: Enabled bearer , priority 0 [ 194.813930][T13948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.827293][T13942] tipc: Disabling bearer [ 194.835044][T13948] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.874559][T13948] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.3757: iget: bad i_size value: 2533274857506816 [ 194.928039][T12467] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.966155][T13969] loop3: detected capacity change from 0 to 512 [ 194.972499][ T29] kauditd_printk_skb: 705 callbacks suppressed [ 194.972513][ T29] audit: type=1400 audit(1753292418.703:12712): avc: denied { accept } for pid=13966 comm="syz.0.3764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 194.979896][T13969] EXT4-fs: Ignoring removed i_version option [ 194.999615][ T29] audit: type=1400 audit(1753292418.703:12713): avc: denied { mounton } for pid=13968 comm="syz.3.3763" path="/96/file1" dev="tmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 195.005939][T13969] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 195.027136][ T29] audit: type=1400 audit(1753292418.733:12714): avc: denied { module_request } for pid=13970 comm="syz.1.3765" kmod="nfct-helper-snmp_trap" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 195.053864][T13969] EXT4-fs (loop3): 1 truncate cleaned up [ 195.060119][T13971] xt_CT: No such helper "snmp_trap" [ 195.066855][T13969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.070794][ T29] audit: type=1400 audit(1753292418.773:12715): avc: denied { read } for pid=13970 comm="syz.1.3765" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 195.084337][T13973] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.105787][ T29] audit: type=1400 audit(1753292418.773:12716): avc: denied { open } for pid=13970 comm="syz.1.3765" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 195.115470][T13973] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.139220][ T29] audit: type=1400 audit(1753292418.773:12717): avc: denied { ioctl } for pid=13970 comm="syz.1.3765" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 195.174392][ T29] audit: type=1400 audit(1753292418.773:12718): avc: denied { create } for pid=13970 comm="syz.1.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 195.195114][ T29] audit: type=1400 audit(1753292418.773:12719): avc: denied { write } for pid=13970 comm="syz.1.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 195.215721][ T29] audit: type=1400 audit(1753292418.773:12720): avc: denied { read } for pid=13970 comm="syz.1.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 195.236292][ T29] audit: type=1400 audit(1753292418.883:12721): avc: denied { mount } for pid=13968 comm="syz.3.3763" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 195.257077][T12467] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.290015][T13979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1044 sclass=netlink_route_socket pid=13979 comm=syz.3.3767 [ 195.304069][T13973] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.314022][T13973] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.374257][T13973] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.384109][T13973] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.444704][T13973] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.454593][T13973] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.691511][T13982] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 195.699127][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3768'. [ 195.708119][T13982] netlink: 'syz.2.3768': attribute type 30 has an invalid length. [ 195.716454][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3768'. [ 195.725385][T13982] netlink: 'syz.2.3768': attribute type 30 has an invalid length. [ 196.344756][T14017] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3783'. [ 196.473346][T14022] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 196.483054][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3784'. [ 196.483083][T14022] netlink: 'syz.0.3784': attribute type 30 has an invalid length. [ 196.483218][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3784'. [ 196.483236][T14022] netlink: 'syz.0.3784': attribute type 30 has an invalid length. [ 196.696749][T14030] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.696792][T14030] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.696820][T14030] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.696852][T14030] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.752505][T14030] geneve3: entered promiscuous mode [ 196.757749][T14030] geneve3: entered allmulticast mode [ 196.769533][T14034] loop2: detected capacity change from 0 to 128 [ 196.777570][T14030] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.786086][T14030] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.794464][T14030] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.802908][T14030] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.813072][T14034] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.813303][T14034] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 196.832459][T14032] netlink: 'syz.5.3786': attribute type 10 has an invalid length. [ 196.873725][T14034] tipc: Cannot configure node identity twice [ 196.873772][T14034] tipc: Cannot configure node identity twice [ 196.886752][T12611] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.898000][T14036] tipc: Enabled bearer , priority 0 [ 196.904408][T14038] 9pnet_fd: Insufficient options for proto=fd [ 196.912489][T14036] tipc: Disabling bearer [ 196.948543][T14038] netlink: 'syz.2.3789': attribute type 10 has an invalid length. [ 196.985593][T14042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1044 sclass=netlink_route_socket pid=14042 comm=syz.5.3790 [ 197.197288][T14051] tipc: Enabled bearer , priority 0 [ 197.209163][T14055] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 197.217054][T14051] tipc: Disabling bearer [ 197.233374][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3796'. [ 197.242361][T14055] netlink: 'syz.0.3796': attribute type 30 has an invalid length. [ 197.253619][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3796'. [ 197.262722][T14055] netlink: 'syz.0.3796': attribute type 30 has an invalid length. [ 197.426481][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 197.434945][T13973] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.435049][T13973] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.438089][T13973] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.438149][T13973] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.441229][T13973] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.441307][T13973] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.445414][T13973] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.445517][T13973] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.475753][T14063] loop1: detected capacity change from 0 to 128 [ 197.498995][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3799'. [ 197.499237][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3799'. [ 197.605782][T14065] geneve1: entered promiscuous mode [ 197.605799][T14065] geneve1: entered allmulticast mode [ 197.679484][T14065] netlink: 'syz.1.3800': attribute type 10 has an invalid length. [ 197.755253][T14068] loop1: detected capacity change from 0 to 512 [ 197.804999][T14068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.805084][T14068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.181469][T14070] 9pnet_fd: Insufficient options for proto=fd [ 198.226244][T14072] xt_CT: No such helper "snmp_trap" [ 198.228871][T14072] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.228957][T14072] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.262599][T14070] netlink: 'syz.3.3802': attribute type 10 has an invalid length. [ 198.274209][T14072] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.274290][T14072] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.323514][T14079] loop0: detected capacity change from 0 to 128 [ 198.333335][T14072] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.343124][T14072] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.385173][T14072] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.395064][T14072] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.419116][T14083] tipc: Started in network mode [ 198.424033][T14083] tipc: Node identity 8, cluster identity 4711 [ 198.430190][T14083] tipc: Node number set to 8 [ 198.436853][T14083] tipc: Cannot configure node identity twice [ 198.448734][T14072] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.457124][T14072] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.492426][T14072] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.500630][T14072] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.517470][T14090] geneve1: entered promiscuous mode [ 198.522819][T14090] geneve1: entered allmulticast mode [ 198.555281][T14072] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.563576][T14072] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.586900][T14072] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.595176][T14072] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.638051][T14100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3814'. [ 198.647113][T14100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3814'. [ 198.661265][T14101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3814'. [ 198.684225][T14104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1044 sclass=netlink_route_socket pid=14104 comm=syz.2.3815 [ 198.863525][T14122] loop0: detected capacity change from 0 to 164 [ 198.871160][T14122] Unable to read rock-ridge attributes [ 198.957469][T14122] x_tables: unsorted underflow at hook 4 [ 198.966082][T14122] Unable to read rock-ridge attributes [ 199.044813][T14126] tipc: Cannot configure node identity twice [ 199.044824][T14126] tipc: Cannot configure node identity twice [ 199.108578][T14128] loop0: detected capacity change from 0 to 512 [ 199.110484][T14128] EXT4-fs: Ignoring removed i_version option [ 199.142651][T14128] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 199.161647][T14128] EXT4-fs (loop0): 1 truncate cleaned up [ 199.162355][T14128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.284693][T11025] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.343035][T14136] geneve2: entered promiscuous mode [ 199.343054][T14136] geneve2: entered allmulticast mode [ 199.355973][T14138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.356210][T14138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.470954][T14146] loop3: detected capacity change from 0 to 512 [ 199.475577][T14146] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 199.488583][T14146] EXT4-fs (loop3): 1 truncate cleaned up [ 199.495294][T14146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.530497][T12467] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.583655][T14151] loop3: detected capacity change from 0 to 128 [ 199.873910][T14160] loop2: detected capacity change from 0 to 512 [ 199.880522][T14160] EXT4-fs: Ignoring removed i_version option [ 199.887902][T14160] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 199.900538][T14160] EXT4-fs (loop2): 1 truncate cleaned up [ 199.900882][T14160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.922319][T14166] loop0: detected capacity change from 0 to 512 [ 199.922550][T14166] EXT4-fs: inline encryption not supported [ 199.922671][T14166] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.944773][T14166] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 199.945096][T14166] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.3837: attempt to clear invalid blocks 2 len 1 [ 199.967117][T14166] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 199.967252][T14166] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3837: invalid indirect mapped block 1819239214 (level 0) [ 199.967364][T14166] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3837: invalid indirect mapped block 1819239214 (level 1) [ 199.967672][T14166] EXT4-fs (loop0): 1 truncate cleaned up [ 199.968115][T14166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.036383][T12611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.060700][T11025] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.063878][T14170] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 200.070186][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 200.070256][ T29] audit: type=1326 audit(1753292423.793:13024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14169 comm="syz.2.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda6ae9a9 code=0x7ffc0000 [ 200.070361][ T29] audit: type=1326 audit(1753292423.793:13025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14169 comm="syz.2.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6cda6ae9a9 code=0x7ffc0000 [ 200.070436][ T29] audit: type=1326 audit(1753292423.793:13026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14169 comm="syz.2.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda6ae9a9 code=0x7ffc0000 [ 200.070460][ T29] audit: type=1326 audit(1753292423.793:13027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14169 comm="syz.2.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6cda6ae9a9 code=0x7ffc0000 [ 200.070556][ T29] audit: type=1326 audit(1753292423.793:13028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14169 comm="syz.2.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda6ae9a9 code=0x7ffc0000 [ 200.070610][ T29] audit: type=1326 audit(1753292423.793:13029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14169 comm="syz.2.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6cda6ae9a9 code=0x7ffc0000 [ 200.070633][ T29] audit: type=1326 audit(1753292423.793:13030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14169 comm="syz.2.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda6ae9a9 code=0x7ffc0000 [ 200.071564][ T29] audit: type=1326 audit(1753292423.793:13031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14169 comm="syz.2.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f6cda6ae9a9 code=0x7ffc0000 [ 200.071591][ T29] audit: type=1326 audit(1753292423.793:13032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14169 comm="syz.2.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda6ae9a9 code=0x7ffc0000 [ 200.071671][ T29] audit: type=1326 audit(1753292423.793:13033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14169 comm="syz.2.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda6ae9a9 code=0x7ffc0000 [ 200.167440][T14172] lo speed is unknown, defaulting to 1000 [ 200.460901][T14183] xt_CT: No such helper "snmp_trap" [ 200.468634][T14183] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.468667][T14183] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.504556][T14183] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.504618][T14183] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.543229][T14183] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.543261][T14183] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.599212][T14183] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.599254][T14183] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.652785][T14177] loop2: detected capacity change from 0 to 1024 [ 200.664419][T14183] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.664510][T14183] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.666631][T14177] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 200.678278][T14183] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.678320][T14183] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.693780][T14183] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.693835][T14183] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.706982][T14183] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.707026][T14183] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.733394][T14177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.000641][T14200] loop3: detected capacity change from 0 to 512 [ 201.000901][T14200] EXT4-fs: inline encryption not supported [ 201.001003][T14200] EXT4-fs: Ignoring removed mblk_io_submit option [ 201.019986][T14200] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 201.020287][T14200] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.3849: attempt to clear invalid blocks 2 len 1 [ 201.020500][T14200] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 201.020618][T14200] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3849: invalid indirect mapped block 1819239214 (level 0) [ 201.020745][T14200] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3849: invalid indirect mapped block 1819239214 (level 1) [ 201.021019][T14200] EXT4-fs (loop3): 1 truncate cleaned up [ 201.021736][T14200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.099667][T12467] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.193322][T12611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.275306][T14208] loop3: detected capacity change from 0 to 128 [ 201.319539][T14211] veth3: entered promiscuous mode [ 201.345062][T14204] loop0: detected capacity change from 0 to 512 [ 201.353786][T14204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.365620][T14220] 9pnet_fd: Insufficient options for proto=fd [ 201.380695][T14220] validate_nla: 5 callbacks suppressed [ 201.380709][T14220] netlink: 'syz.5.3856': attribute type 10 has an invalid length. [ 201.390422][T14204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.411675][T14226] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 201.412020][T14226] __nla_validate_parse: 9 callbacks suppressed [ 201.412032][T14226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3857'. [ 201.412057][T14226] netlink: 'syz.5.3857': attribute type 30 has an invalid length. [ 201.412134][T14226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3857'. [ 201.412150][T14226] netlink: 'syz.5.3857': attribute type 30 has an invalid length. [ 201.413037][T14223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3853'. [ 201.473869][T14212] ================================================================== [ 201.481959][T14212] BUG: KCSAN: data-race in n_tty_write / tty_set_termios [ 201.488980][T14212] [ 201.491294][T14212] write to 0xffff888118f62508 of 44 bytes by task 14225 on cpu 1: [ 201.499095][T14212] tty_set_termios+0xc0/0x8c0 [ 201.503769][T14212] set_termios+0x35b/0x4e0 [ 201.508180][T14212] tty_mode_ioctl+0x379/0x5c0 [ 201.512847][T14212] n_tty_ioctl_helper+0x91/0x210 [ 201.517775][T14212] n_tty_ioctl+0x101/0x200 [ 201.522183][T14212] tty_ioctl+0x845/0xb80 [ 201.526430][T14212] __se_sys_ioctl+0xcb/0x140 [ 201.531028][T14212] __x64_sys_ioctl+0x43/0x50 [ 201.535623][T14212] x64_sys_call+0x19a8/0x2fb0 [ 201.540292][T14212] do_syscall_64+0xd2/0x200 [ 201.544784][T14212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.550671][T14212] [ 201.552983][T14212] read to 0xffff888118f62514 of 4 bytes by task 14212 on cpu 0: [ 201.560602][T14212] n_tty_write+0x9f/0xb10 [ 201.564951][T14212] file_tty_write+0x38c/0x670 [ 201.569622][T14212] tty_write+0x25/0x30 [ 201.573685][T14212] vfs_write+0x49d/0x8e0 [ 201.577923][T14212] ksys_write+0xda/0x1a0 [ 201.582174][T14212] __x64_sys_write+0x40/0x50 [ 201.586763][T14212] x64_sys_call+0x2cdd/0x2fb0 [ 201.591432][T14212] do_syscall_64+0xd2/0x200 [ 201.595921][T14212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.601814][T14212] [ 201.604134][T14212] value changed: 0x00008a3b -> 0x00000760 [ 201.609839][T14212] [ 201.612156][T14212] Reported by Kernel Concurrency Sanitizer on: [ 201.618297][T14212] CPU: 0 UID: 0 PID: 14212 Comm: syz.1.3855 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 201.629064][T14212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.639126][T14212] ================================================================== [ 202.541620][ T4214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.660440][ T4214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration