last executing test programs: 2m8.787311761s ago: executing program 32 (id=163): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) geteuid() openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1m12.363125878s ago: executing program 33 (id=1048): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r3, &(0x7f00000000c0)=""/60, 0x3c, 0x40, 0x0, 0x0) 1m12.311841058s ago: executing program 34 (id=1050): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20001, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)) r6 = socket$inet6(0xa, 0x3, 0x3c) sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002640)="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", 0xa41}], 0x1}}], 0x1, 0x85) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2, 0x5}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$sock_buf(r7, 0x1, 0x19, 0x0, &(0x7f0000003080)) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="000202"], 0x18) 1m4.538065883s ago: executing program 35 (id=971): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002200)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f0000000180)=0x10) 1m4.362866246s ago: executing program 36 (id=1120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) 59.317564624s ago: executing program 37 (id=1189): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000036669800140012800b0001006d616300656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x8000) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x3) 58.971269109s ago: executing program 38 (id=1191): sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) close(0xffffffffffffffff) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1f, 0x80000000, 0x0, 0x0) 56.206369657s ago: executing program 39 (id=1219): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000580), 0xfe, 0x507, &(0x7f0000001780)="$eJzs3c9vI1cdAPDvOL+cNG3S0gMgoEspLGi1TuJto6oHWE4IoUqIHkHahsQbRbHjKHZKE/aQ/g9IVOIER/4Azj1x54LgxqUckChEoM1KHIxmPMk6WXtjSGJH8ecjjea9N46/78Wa9+Kvd/0CGFm3IuIgIiYj4v2ImMvbk/yI++0jfdzjw0erR4ePVpNotd77R5JdT9ui42dSL+TPWYyIH30v4qfJs3Ebe/ubK9VqZaddnV5o1rYXGnv7dzdqK+uV9cpWuby8tLz49r23ypc21tdqk3npy5/+4eBbP0+7NZu3dI7jMrWHPnESJzUeET+4imBDMJaPZ3LYHeH/UoiIVyLi9ez+n4ux7NUEAG6yVmsuWnOddQDgpitkObCkUMpzAbNRKJRK7RzeqzFTqNYbzTsP67tba+1c2XxMFB5uVCuLea5wPiaStL6UlZ/Wy2fq9yLi5Yj4xdR0Vi+t1qtrw/zDBwBG2Atn1v9/T7XXfwDghisOuwMAwMBZ/wFg9Fj/AWD0WP8BYPQ8Xf/vD7UfAMDgeP8PAKPH+g8AI+WH776bHq2j/Puv1z7Y292sf3B3rdLYLNV2V0ur9Z3t0nq9vp59Z0/tvOer1uvbS2/G7ofz395uNBcae/sPavXdreaD7Hu9H1QmBjIqAOB5Xn7tkz8nEXHwznR2RMdeDtZquNkKw+4AMDRjw+4AMDR2+4LRdYH3+NIDcEN02aL3lGJETJ9tbLVaravrEnDFbn9B/h9GVUf+378ChhEj/w+jS/4fRlerlfS753/0+0AA4HqT4wd6fP7/Sn7+bf7hwE/Wzj7i46vsFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxvx/v/lvK9wGejUCiVIl6MiPmYSB5uVCuLEfFSRPxpamIqrS8Nuc8AwEUV/pbk+3/dnntj9uzVyeTJVHaOiJ/96r1ffrjSbO78MW3/50l78+O8vTyM/gMA5zlep7Nzxxv5x4ePVo+PQfbn79+NiGI7/tHhZBydxB+P8excjImImPlXktfbko7cxUUcfBQRn+82/iRmsxxIe+fTs/HT2C8ONH7hVPxCdq19Tn8Xn7uEvsCo+SSdf+53u/8KcSs7d7//i9kMdXH5/Jc+1epRNgc+jX88/431mP9u9Rvjzd9/v12afvbaRxFfHI84jn3UMf8cx096xH+jz/h/+dJXXu91rfXriNvRPX5nrIVmbXuhsbd/d6O2sl5Zr2yVy8tLy4tv33urvJDlqBd6rwafvXPnpazQ5SHp+Gd6xC+eM/6v9zn+3/zn/R9/tce1NP43v9YtfiFefU78dE38Rp/xV2Z+V+x1LY2/1mP8573+d/qM/+lf95/ZNhwAGJ7G3v7mSrVa2Rlk4fgPiYEGVeivMJW/ONelP6cK17ZjmyvV7wwq1mT8Tz/Vap1u+Wy8r99hrxnjMrJuwHVwctNHxJNhdwYAAAAAAAAAAAAAAOjqSv+jUtIuDHuMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3Fz/DQAA//+sasqI") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000)=0x2a, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb08000140000000000900010073797a30000000000900020073797a32000000001400000011000200000000000621beff5f1558cb"], 0x88}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6bf68237da62a01, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) r6 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x102c0c, &(0x7f0000000400)={0x0, 0xfffffffc, 0x400, 0x3, 0xfffffffd, 0x0, r0}, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r5, &(0x7f00000003c0)=""/4096, 0x1000) 54.219025064s ago: executing program 4 (id=1256): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008d47", @ANYRES16=r2, @ANYBLOB="090200000000fedbdf25010000001400090000000000000000000000ffffe0000001"], 0x28}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000000020104008000000000000039965622b1fc0a00000004000180180003801400018008000100ac1e010108000200ac1414aa100002"], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff83) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000400)={0xa}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1f, 0x80000000, 0x0, 0x0) 53.198806408s ago: executing program 4 (id=1265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 52.667485695s ago: executing program 4 (id=1272): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000e0879d4ce0bc054eef113115b3ce00000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x1, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00*\b\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) pread64(r2, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="090000000000000002004e20e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2e48431bda66ec70000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000004"], 0x90) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x18, 0x1404, 0x400, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x40040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0x10000000000ac6}, 0x18) r6 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) io_uring_setup(0x1dde, &(0x7f00000000c0)={0x0, 0x45d3, 0x1, 0x0, 0x1ffffff}) 52.513308527s ago: executing program 40 (id=1274): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x20020000) unshare(0x2c020400) 52.512354977s ago: executing program 4 (id=1277): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x306}, 0x1c, {0x2, 0x4e20, @multicast2}, 'veth0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 52.104124093s ago: executing program 4 (id=1280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1], 0x4c}}, 0x0) 50.831084s ago: executing program 41 (id=1290): r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, &(0x7f0000000080)=0x6e, 0x800) bind$unix(r0, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x100, 0x5dd8, 0x3a64, 0x9, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x8) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendto(r1, &(0x7f0000000440)="9bc0f2bb1f99194ea93de83f2b692d639c5159b3b1c1386ed03fdc4b8eafa792ae3049f02aef269f76cf563a4fd41a2f7212ffd6ad31b096729f7003ef7a5ba684fd3b35256bb7fcecbfb903ef0f7490ce86d0c0e95d47c7d3ecdc13a9372d975db40fa60d9b452ae7b0ac6ac7b11cff1fb4c143ea15ec3b0475078b81e10dfaa881a1c891cd47fdf7ce311bd98cc9340597e49064254afb8c031c222525a2c22b23", 0xa2, 0x80, &(0x7f0000000500)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0x3}}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x40) 50.758469771s ago: executing program 2 (id=1292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0xc0, 0x9, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x786}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x9, 0x40, 0x7f}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x80, 0x2, 0x1, 0x9f}, 0x6b, &(0x7f0000000100)={0x5, 0xf, 0x6b, 0x1, [@generic={0x66, 0x10, 0xb, "27105e9e2889cd822c5be2a22fc24d4ea7f8a1087fecbc04f8c17db9efd0462555318972b9bedca2da12fb909fc871e557a4dff05491721673dd93c8e90cc1335ee4ea0a3c3d1a5f8272a21cda4fe04f57fc08db36498d73758a8844eccdf0fb8b210b"}]}, 0x1, [{0x8, &(0x7f00000001c0)=@string={0x8, 0x3, "39a86eb9f1ea"}}]}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0x101, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) 50.189668219s ago: executing program 2 (id=1293): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) sendmmsg$inet(r5, &(0x7f0000000940)=[{{&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000540)="f81d65d08aac", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000002600)="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", 0x5dd}], 0x1}}], 0x2, 0x4000) open_tree(r5, &(0x7f0000000040)='./file0\x00', 0x8000) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000000200)={{r8}, 0x0, 0x2, @inherit={0x0, 0x0}, @name="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"}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f00000003c0)=0x6122, 0x4) sendmsg$netlink(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x1) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x49}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 50.122491579s ago: executing program 2 (id=1294): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) socket$inet6(0xa, 0x800, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 49.234481731s ago: executing program 2 (id=1295): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x306}, 0x1c, {0x2, 0x4e20, @multicast2}, 'veth0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 49.135718373s ago: executing program 2 (id=1296): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x10103, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x2710], 0x48}}, 0x0) 48.794339778s ago: executing program 4 (id=1300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) write$selinux_load(0xffffffffffffffff, 0x0, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r0}, 0x8) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000340)=0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x64, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x7) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c001800f8ffffffffffffff140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = syz_genetlink_get_family_id$nl802154(0x0, r4) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r10, 0x3, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000002}, 0x80d0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r11, 0x0, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 48.780115807s ago: executing program 42 (id=1300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) write$selinux_load(0xffffffffffffffff, 0x0, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r0}, 0x8) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000340)=0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x64, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x7) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c001800f8ffffffffffffff140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = syz_genetlink_get_family_id$nl802154(0x0, r4) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r10, 0x3, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000002}, 0x80d0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r11, 0x0, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 48.56952427s ago: executing program 0 (id=1307): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x400, 0x800, 0x0, 0x10}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000900000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000400)=[{&(0x7f00000019c0)="eb81ee14ef1dd3ff572ad50561840130c4b3409fb4f2b1b8d07666ccfd886ee401f0e3213a429c9c7df7b5d196f0497c9f57c08720df760809fa0af3a910639afb924479a7753b8632ace21284d285ff69898662a76066", 0x57}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0) splice(r4, 0x0, r9, 0x0, 0x80, 0x6) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) write(r9, &(0x7f0000003300)="ac", 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x30, 0x14, &(0x7f0000000280)=ANY=[@ANYRESOCT=r6, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b277fcde5000000bfa2001a0000000007020000f8ffff01ff03000008000000b704e9000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) write(r7, 0x0, 0x0) r12 = accept4$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c, 0x800) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000001900)={0x8, @remote, 0x4e22, 0x4, 'dh\x00', 0x2, 0x3, 0x7}, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000003340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x16b0, 0x0, 0x1480, 0x1268, 0x1128, 0x1480, 0x15e0, 0x15e0, 0x15e0, 0x15e0, 0x15e0, 0x6, &(0x7f0000000140), {[{{@ipv6={@mcast2, @local, [0xffffff00, 0x0, 0xff, 0xff], [0xff000000, 0xff000000, 0x0, 0xff000000], 'bond_slave_0\x00', 'sit0\x00', {}, {}, 0x5e, 0x3, 0x2, 0x4}, 0x0, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup/syz1\x00', 0x9, {0x9}}}, @common=@eui64={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2d}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0x26, 0x23, 0x8}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0x0, 0xffffff00, 0xffffffff], 'pimreg0\x00', 'ip6gretap0\x00', {}, {}, 0x2c, 0x8, 0x0, 0x50}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0xa}}}, {{@ipv6={@mcast1, @local, [0x0, 0xff000000, 0xff, 0xff], [0x0, 0xffffff00, 0xff, 0xffffffff], 'ip6_vti0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x88, 0x6, 0x2, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x31, 0x2b}}}, {{@ipv6={@local, @mcast1, [0xffffff00, 0xc0cf6fcc0015453f, 0xff], [0xff000000], 'dummy0\x00', 'pim6reg0\x00', {0xff}, {}, 0x21, 0x6, 0x3, 0x4}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x2, 0x0, [0x7, 0x3, 0xc, 0x9c, 0x1, 0x7ff, 0xffff, 0x8b8, 0x4, 0x1000, 0x2, 0x2, 0x8000, 0x1e, 0x2fbd], 0x6}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private0, 0x3, 0x5, 0x3ff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1710) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) 48.349115943s ago: executing program 2 (id=1313): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008d47", @ANYRES16=r2, @ANYBLOB="090200000000fedbdf25010000001400090000000000000000000000ffffe0000001"], 0x28}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000000020104008000000000000039965622b1fc0a00000004000180180003801400018008000100ac1e010108000200ac1414aa100002"], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff83) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000400)={0xa}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1f, 0x80000000, 0x0, 0x0) 48.338977333s ago: executing program 43 (id=1313): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008d47", @ANYRES16=r2, @ANYBLOB="090200000000fedbdf25010000001400090000000000000000000000ffffe0000001"], 0x28}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000000020104008000000000000039965622b1fc0a00000004000180180003801400018008000100ac1e010108000200ac1414aa100002"], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff83) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000400)={0xa}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1f, 0x80000000, 0x0, 0x0) 47.667676083s ago: executing program 0 (id=1325): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f00000011c0)='mm_page_free\x00', r0}, 0x18) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000008c0)=""/156, 0x9c}, {&(0x7f0000000a00)=""/208, 0xd0}, {&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f00000004c0)=""/103, 0x67}], 0x4, &(0x7f0000000640)}, 0x10000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000003007c896d8f001b000000b70000000000e69acf261bce000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r2}, 0x8) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 47.424388676s ago: executing program 0 (id=1326): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0xfc0}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r1, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000012c0)="23a0be3ec0d9edaccda531874ecf98434f3d10665f6e0346136984c1f2f15d", 0x1f}, {&(0x7f0000001300)="11ca5641cbf9577fa297e890dc4746449416908fa7066d54ca4ed8fb87a71d621ef53449e793c55ba58eab20a5044fd1ec07cc77e4e3bf3b8da2812b8943441c0c565de0c5dbc8c8", 0x48}, {&(0x7f0000001380)="190be02b544a87c33aa4aaaaabfccb6154043a8b5a2ea95211900186170c7a4f2651d264466253c5f9851a58793efcaf45a2c0f7546bf143b9bff46892f86a3e98e625eabbd1043b1e15036c9cf221d620f792d835bcad5a583cdd666c527279ce68530f3e71f6c170d033e0eec71d019b7058f398e887abb014e1930ffe52fe9b32fb847022f7298ba564e6fabd049f56aefe1e966ab30d411e62a5394c8bc6146b171d44ce5dc32018a6b0e15828d2e6853b3b2fec4d21c718e79ee351a06755a9", 0xc2}, {&(0x7f0000002600)="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", 0x4a2}], 0x4}}], 0x6, 0x200040d1) 47.378904307s ago: executing program 0 (id=1328): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x306}, 0x1c, {0x2, 0x4e20, @multicast2}, 'veth0\x00'}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 47.042319771s ago: executing program 0 (id=1329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x12c, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 46.130603194s ago: executing program 0 (id=1338): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 46.126274343s ago: executing program 44 (id=1338): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 43.223941503s ago: executing program 5 (id=1359): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) close(r1) 43.108864265s ago: executing program 5 (id=1360): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') listen(r2, 0x4) 43.090736855s ago: executing program 5 (id=1361): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') listen(r2, 0x4) 43.065839825s ago: executing program 5 (id=1362): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x306}, 0x1c, {0x2, 0x4e20, @multicast2}, 'veth0\x00'}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 42.919288217s ago: executing program 5 (id=1363): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x8800, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@sysvgroups}, {@data_err_abort}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2004000, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000340)='./file0\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:public_content_rw_t:s0\x00', 0x29, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) 41.747498953s ago: executing program 5 (id=1379): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 41.747102973s ago: executing program 45 (id=1379): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 40.053759006s ago: executing program 6 (id=1409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x53}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/60, 0x3c, 0x40, 0x0, 0x0) 39.981917227s ago: executing program 6 (id=1411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa}}], {0x14}}, 0x88}}, 0x4000010) 39.965122878s ago: executing program 6 (id=1413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) 39.937369408s ago: executing program 6 (id=1414): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 39.76746874s ago: executing program 6 (id=1418): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30080, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1800, 0x318, 0x3ff, 0x8, 0xc59, 0x200, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x200}, 0x5f21df7aec8d40fb, 0x0, 0x0, 0x5, 0x8, 0x2543}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, r1, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3, 0x0, 0x5}, 0x18) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000300)={0x5, 0x0, 0xfffffffd, 0xe, 0x1bf, 0x0}) 38.839989163s ago: executing program 6 (id=1426): unshare(0x66000080) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x28440, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040814}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8}, {}, {0xfff2, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2c, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0xfffffffffffffedf, 0x1, {0x0, 0xffff}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xffe0}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}]}, 0x60}}, 0x400c084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="87db24956900040000000000000000000000000000000000080001000200000008000100000000000800010002000000"], 0x30}}, 0x8800) unshare(0x20000600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r5 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) 38.839454043s ago: executing program 46 (id=1426): unshare(0x66000080) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x28440, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040814}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8}, {}, {0xfff2, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2c, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0xfffffffffffffedf, 0x1, {0x0, 0xffff}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xffe0}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}]}, 0x60}}, 0x400c084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="87db24956900040000000000000000000000000000000000080001000200000008000100000000000800010002000000"], 0x30}}, 0x8800) unshare(0x20000600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r5 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) 2.94312429s ago: executing program 7 (id=1972): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380), 0x100004, &(0x7f0000000480)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@uid_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x35, 0x30, 0x37, 0x30, 0x30, 0x66, 0x66], 0x2d, [0x66, 0x64, 0x64, 0x62], 0x2d, [0x39, 0x33, 0x35, 0x39], 0x2d, [0x63, 0x64, 0x33, 0x33], 0x2d, [0x30, 0x39, 0x35, 0x30, 0x63, 0x64, 0x20, 0x39]}}}, {@fsname={'fsname', 0x3d, '*.}--]'}}]}}) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x4, 0x80000000, 0x4, 0x101, 0x2002, 0xffffffffffffffff, 0xfffffeff, '\x00', r3, 0xffffffffffffffff, 0x3, 0x2}, 0x50) read(r2, &(0x7f0000000200)=""/209, 0x128) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x10, 0x6, 0x948, 0x738, 0x738, 0xf0, 0x438, 0x738, 0x878, 0x878, 0x878, 0x878, 0x878, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @mcast1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bridge_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9a8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000400)={0x1f, 0x1f000000}) socket$netlink(0x10, 0x3, 0x4) tkill(r1, 0x7) 2.821165472s ago: executing program 1 (id=1978): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 2.659462464s ago: executing program 7 (id=1981): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000580), 0xfe, 0x507, &(0x7f0000001780)="$eJzs3c9vI1cdAPDvOL+cNG3S0gMgoEspLGi1TuJto6oHWE4IoUqIHkHahsQbRbHjKHZKE/aQ/g9IVOIER/4Azj1x54LgxqUckChEoM1KHIxmPMk6WXtjSGJH8ecjjea9N46/78Wa9+Kvd/0CGFm3IuIgIiYj4v2ImMvbk/yI++0jfdzjw0erR4ePVpNotd77R5JdT9ui42dSL+TPWYyIH30v4qfJs3Ebe/ubK9VqZaddnV5o1rYXGnv7dzdqK+uV9cpWuby8tLz49r23ypc21tdqk3npy5/+4eBbP0+7NZu3dI7jMrWHPnESJzUeET+4imBDMJaPZ3LYHeH/UoiIVyLi9ez+n4ux7NUEAG6yVmsuWnOddQDgpitkObCkUMpzAbNRKJRK7RzeqzFTqNYbzTsP67tba+1c2XxMFB5uVCuLea5wPiaStL6UlZ/Wy2fq9yLi5Yj4xdR0Vi+t1qtrw/zDBwBG2Atn1v9/T7XXfwDghisOuwMAwMBZ/wFg9Fj/AWD0WP8BYPQ8Xf/vD7UfAMDgeP8PAKPH+g8AI+WH776bHq2j/Puv1z7Y292sf3B3rdLYLNV2V0ur9Z3t0nq9vp59Z0/tvOer1uvbS2/G7ofz395uNBcae/sPavXdreaD7Hu9H1QmBjIqAOB5Xn7tkz8nEXHwznR2RMdeDtZquNkKw+4AMDRjw+4AMDR2+4LRdYH3+NIDcEN02aL3lGJETJ9tbLVaravrEnDFbn9B/h9GVUf+378ChhEj/w+jS/4fRlerlfS753/0+0AA4HqT4wd6fP7/Sn7+bf7hwE/Wzj7i46vsFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxvx/v/lvK9wGejUCiVIl6MiPmYSB5uVCuLEfFSRPxpamIqrS8Nuc8AwEUV/pbk+3/dnntj9uzVyeTJVHaOiJ/96r1ffrjSbO78MW3/50l78+O8vTyM/gMA5zlep7Nzxxv5x4ePVo+PQfbn79+NiGI7/tHhZBydxB+P8excjImImPlXktfbko7cxUUcfBQRn+82/iRmsxxIe+fTs/HT2C8ONH7hVPxCdq19Tn8Xn7uEvsCo+SSdf+53u/8KcSs7d7//i9kMdXH5/Jc+1epRNgc+jX88/431mP9u9Rvjzd9/v12afvbaRxFfHI84jn3UMf8cx096xH+jz/h/+dJXXu91rfXriNvRPX5nrIVmbXuhsbd/d6O2sl5Zr2yVy8tLy4tv33urvJDlqBd6rwafvXPnpazQ5SHp+Gd6xC+eM/6v9zn+3/zn/R9/tce1NP43v9YtfiFefU78dE38Rp/xV2Z+V+x1LY2/1mP8573+d/qM/+lf95/ZNhwAGJ7G3v7mSrVa2Rlk4fgPiYEGVeivMJW/ONelP6cK17ZjmyvV7wwq1mT8Tz/Vap1u+Wy8r99hrxnjMrJuwHVwctNHxJNhdwYAAAAAAAAAAAAAAOjqSv+jUtIuDHuMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3Fz/DQAA//+sasqI") r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000005200010705bd7000fbdbce2502"], 0x18}}, 0x40804) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000)=0x2a, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb08000140000000000900010073797a30000000000900020073797a32000000001400000011000200000000000621beff5f1558cb"], 0x88}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)=r9}, 0x20) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f00000083c0)={{0x1}}) r11 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x102c0c, &(0x7f0000000400)={0x0, 0xfffffffc, 0x400, 0x3, 0xfffffffd, 0x0, r6}, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) 2.598592795s ago: executing program 1 (id=1984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xd810, 0x8}, 0x4c58, 0x2, 0x0, 0x1, 0x8, 0x1ffff, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x10000}, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0700000004000000080200000e00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000003f2fb7117969ff211e571834f16632f72010bffa5b473e4cd41bc5eb0a1c43a2083c6350d562cffa854418ffeba75ec45c414dd1b3b876f16883d754789ca4b414a491e935a5fdfb6b9337814120f98f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001200010a0b6c8ae55520df3b07000000"], 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109002, 0x0) write(r8, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x50bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0xfffffffd}, {0x0, 0xc3, 0x0, 0x636e8971}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x1000}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x6, 0x6, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x1000, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {0x2, 0x0, 0x0, 0x2}, {0x8, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0xb8a, 0x6}, {0xffffffff}, {}, {}, {}, {0x80000001, 0x0, 0x0, 0x2000000, 0x3}, {}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x3, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0xfffffffd, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x2, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0x7091cba, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xa144}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x1a5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {0x3, 0x0, 0x0, 0x4, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000}, {0x0, 0x2e9c}, {0x0, 0x10000000, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x20000, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x5}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x5}, {0x2}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x2}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="030300000000fcffffff0c00000008000300d4"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) 2.463594637s ago: executing program 7 (id=1987): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) socket$inet6(0xa, 0x800, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) unshare(0x2040400) r5 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 2.347671448s ago: executing program 8 (id=1990): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 2.123731291s ago: executing program 8 (id=1992): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000480)='io_uring_create\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, 0x0, 0x0, 0x1000000000) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x6, r0, 0x14, {0x5, 0x3}, 0x4}, 0x1) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d, 0x0, @void}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372"], 0xfc}}, 0x20000004) 1.491500561s ago: executing program 1 (id=1993): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r3, r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000012c0)="23a0be3ec0d9edaccda531874ecf98434f3d10665f6e0346136984c1f2f1", 0x1e}, {&(0x7f0000001300)="11ca5641cbf9577fa297e890dc4746449416908fa7066d54ca4ed8fb87a71d621ef53449e793c55ba58eab20a5044fd1ec07cc77e4e3bf3b8da2812b8943441c0c565de0c5dbc8c8", 0x48}, {&(0x7f0000001380)="190be02b544a87c33aa4aaaaabfccb6154043a8b5a2ea95211900186170c7a4f2651d264466253c5f9851a58793efcaf45a2c0f7546bf143b9bff46892f86a3e98e625eabbd1043b1e15036c9cf221d620f792d835bcad5a583cdd666c527279ce68530f3e71f6c170d033e0eec71d019b7058f398e887abb014e1930ffe52fe9b32fb847022f7298ba564e6fabd049f56aefe1e966ab30d411e62a5394c8bc6146b171d44ce5dc32018a6b0e15828d2e6853b3b2fec4d21c718e79ee351a06755a9", 0xc2}, {&(0x7f0000002600)="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", 0x4b4}], 0x4}}], 0x6, 0x200040d1) 1.380277162s ago: executing program 1 (id=1996): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r2}, 0x10) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r1, 0xffffffffffffffff, 0x0) 1.342832992s ago: executing program 1 (id=1998): r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0d00000001000000090000000000010015440300", @ANYRES32=r1, @ANYRES16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000004000000000000000000000000000000000000008e8da3270c7cda05dbc08dfdbfd96bf625f1372e4d2ae857d68e7f0985a8018ab44af7748156c63fe2e071b9a56b972b995bcab991d025fa24169c4bc4949873ff59f5f4f378c44a93794538a96e9f488f68564fcdedfb50d0b298fa09eec1c62f798a2f474e9fad89ed90742bf9d963784bdbfcf055047c70f65b0e50501dc61062d8f56fbf2d0e115242e6a0c9bd79f2cdc7801e0fadeec96fdae156f5ce876f95be23", @ANYRES32, @ANYRES16=r2], 0x50) syz_open_dev$vcsn(&(0x7f0000000380), 0x8, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000011000"/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000cc0)="0000000000000000000051229dc9", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6tnl0\x00', 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/40, 0x54}], 0x1) 1.309735913s ago: executing program 3 (id=1999): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.242134724s ago: executing program 9 (id=2001): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) socket$packet(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0xc8, 0xffff, 0x7, 0xf9, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x14}, 0x108003, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e4"], 0xfdef) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 1.241710504s ago: executing program 9 (id=2002): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 1.231007044s ago: executing program 8 (id=2003): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0xa) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/packet\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 1.166759545s ago: executing program 8 (id=2004): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x9071, 0xfffffffffffffffc}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x4854) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="0002"], 0x20) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0xfffc}, 0x1c) 1.166411555s ago: executing program 7 (id=2005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) 1.149926025s ago: executing program 3 (id=2006): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x0) 1.123969235s ago: executing program 7 (id=2007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r3, r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000012c0)="23a0be3ec0d9edaccda531874ecf98434f3d10665f6e0346136984c1f2f15d", 0x1f}, {&(0x7f0000001300)="11ca5641cbf9577fa297e890dc4746449416908fa7066d54ca4ed8fb87a71d621ef53449e793c55ba58eab20a5044fd1ec07cc77e4e3bf3b8da2812b8943441c0c565de0c5dbc8c8", 0x48}, {&(0x7f0000001380)="190be02b544a87c33aa4aaaaabfccb6154043a8b5a2ea95211900186170c7a4f2651d264466253c5f9851a58793efcaf45a2c0f7546bf143b9bff46892f86a3e98e625eabbd1043b1e15036c9cf221d620f792d835bcad5a583cdd666c527279ce68530f3e71f6c170d033e0eec71d019b7058f398e887abb014e1930ffe52fe9b32fb847022f7298ba564e6fabd049f56aefe1e966ab30d411e62a5394c8bc6146b171d44ce5dc32018a6b0e15828d2e6853b3b2fec4d21c718e79ee351a06755a9", 0xc2}, {&(0x7f0000002600)="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", 0x4b4}], 0x4}}], 0x5, 0x200040d1) 1.123681345s ago: executing program 3 (id=2008): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xc4fc9e906872338b, 0x70bd2d, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0) 1.109172505s ago: executing program 3 (id=2009): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x0) 1.094692385s ago: executing program 3 (id=2010): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @loopback}, &(0x7f0000000880)=0x10, 0x800) setsockopt$inet_buf(r0, 0x0, 0x25, &(0x7f0000000980)="aa2122ffda57eda5b482cde5e0bea7e76cf0d94b92851b27f2c1c0175baada2187aed93593e08a4018e7fb796c9496f16acbdf10be2f4c9a7d838fbc402b9620b8e2ed1d8ceb131c730001ad7e437c62b6cc039452ee1c710338bf61d967f64f27165cba7cb52bf787dc82cb3ffd49c49f7c83730d3c54f49509cd203245bc6001ca40097c33b02f87fd34d8c6681e4338a35a81b0bd2bfbd1c2624eea67a1a955ff5b", 0xa3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_prespec={0x44, 0x4, 0xb3, 0x3, 0x1}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0xa9, &(0x7f0000000a40)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x18, 0x4, 0x2, 0x3, 0x9b, 0x64, 0x0, 0x0, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @broadcast, {[@timestamp_prespec={0x44, 0x4c, 0x52, 0x3, 0x3, [{@loopback, 0x4}, {@rand_addr=0x64010101, 0xaf7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe}, {@broadcast, 0x1}, {@loopback, 0x40}, {@rand_addr=0x64010102, 0x9}, {@local}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x3}]}]}}, {{0x4e22, 0x4e21, 0x4, 0x1, 0x5, 0x0, 0x0, 0x5, 0x1, "2c9ce2", 0x9, "adbbac"}, "b8130f590b12dd95b4b21dbca9bb689b5ccdd867722afff934b7d4ddb20e1f2b1fd945ee8737716344bec1"}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 1.073587856s ago: executing program 3 (id=2011): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x20000000000002bd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 1.067832486s ago: executing program 9 (id=2012): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000500), 0x12) 991.613657ms ago: executing program 9 (id=2013): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 746.98298ms ago: executing program 9 (id=2014): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kfree\x00', r1}, 0x18) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) 717.288191ms ago: executing program 9 (id=2015): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000480)='io_uring_create\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, 0x0, 0x0, 0x1000000000) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x6, r0, 0x14, {0x5, 0x3}, 0x4}, 0x1) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d, 0x0, @void}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372"], 0xfc}}, 0x20000004) 443.099754ms ago: executing program 1 (id=2016): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, 0x0, 0x101142, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r7 = fspick(r6, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$inet(r6, &(0x7f00000009c0)={&(0x7f0000000800)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000840)="a1170ba0b15b3cb4385f7a07a9b03d85d9f8aa476364c8e9558a1b69ce946430fbc692631f2730e707f4dc043b6d88", 0x2f}, {&(0x7f0000000880)="e54e1f905fd63bf16cec32e6abe70d174986782dc32c6517155e894b3e73008e882212e0394fe1dccb7d12929aaf451b27b16750fd7c2c807dfde48781020d82c3627743c0", 0x45}], 0x2, &(0x7f0000000940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x1e}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffd6}}], 0x70}, 0x850) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000640)=0x4, 0x1) connect$inet(r10, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 231.806097ms ago: executing program 7 (id=2017): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1cb0bf10a067cb5f) open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') unshare(0x26020480) pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 171.326078ms ago: executing program 8 (id=2018): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="415e31bbb1a4990fd60e6b438064f314a7c2906440d5914d", 0x18, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0xfffffffffffffde1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="9c62aca157be59a29363830e537f341f9e76a7b65f0c5cea9eb9e6673bf10c18081cfd6ef00ea316ae1f2330f0caadec5bbc6ba8b0499639bb4b37f17851a116efd5606b23f9b65ed5a74a5ee4171b65c2c3493852074ed17dca1313a6f106a6c2f0791f3a66db750621d5b4d916fb2ec18a36c457b690caf4a4c16cbbb1c447e03742337c26bda4a0b030c4873781dc0f", @ANYRES16=r0, @ANYBLOB="a592cfc49e94f139345488af7795358e990beab3b1da84e7a296ac8ec5d33aa397835f6518eb254b90f985606cf398e70863c39b3e549a27f6f3273cb1d84f1dd5c02706c1b82a4820efc9391c9a568e7d48d79d4073cbbc5953ec817556132cdf5baeff0960b3fb698a6cc207d683b54bc522e0c716bc81d581f5c64551316b371335a956ac05038b729ad2cb5f0f67ab9b2787062694ff63ba17491afd9024457c0329941b4ce0832eebe3257ab848725994acc677", @ANYRES16, @ANYRES16=r0, @ANYBLOB="1cd4494f7657c43e4c343f6152165e210a26d4857d96239f1185dc2c964d47147668555d239211953510ebf81581c35524e2f8c6a023077d09f2a175f4b9da2d", @ANYRESDEC=r0], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)='%-5lx \x00'}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@rand_addr=' \x01\x00', @in6=@mcast1, 0x4e24, 0x0, 0x4, 0x0, 0x2, 0x0, 0x20, 0x2c}, {0x0, 0xdc, 0x3, 0x80, 0x6, 0x7, 0x1, 0x7}, {0x1, 0x3ff, 0x9}, 0x4, 0x0, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x4d2, 0x33}, 0x2, @in=@broadcast, 0x3507, 0x7, 0x1, 0x68, 0xf, 0x74d1e62a, 0x7}}, 0xe8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r4}, 0x10) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xbc, 0x0, 0x7ffc0002}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x10) utimes(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r9 = accept4$unix(r5, 0x0, 0x0, 0x0) recvfrom$unix(r9, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) cachestat(r1, &(0x7f0000000000)={0x100000001, 0xffffffffffff2929}, &(0x7f0000000040), 0x0) 0s ago: executing program 8 (id=2019): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x0) kernel console output (not intermixed with test programs): 822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.202003][ T8482] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /18/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 141.327198][ T8482] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 141.347455][ T8482] EXT4-fs warning (device loop6): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 141.361806][ T8822] hsr_slave_0: entered promiscuous mode [ 141.363863][ T8482] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /18/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 141.368636][ T8822] hsr_slave_1: entered promiscuous mode [ 141.401407][ T8482] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 141.425289][ T8482] EXT4-fs warning (device loop6): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 141.437814][ T8482] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /18/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 141.460618][ T8482] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 141.483193][ T8482] EXT4-fs warning (device loop6): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 141.496676][ T8482] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /18/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 141.536808][ T8482] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 141.557046][ T8482] EXT4-fs warning (device loop6): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 141.568842][ T8482] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /18/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 141.593102][ T8482] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 141.613604][ T8482] EXT4-fs warning (device loop6): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 141.617698][ T8945] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.625644][ T8482] EXT4-fs warning (device loop6): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 141.632401][ T8945] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.646686][ T8482] EXT4-fs warning (device loop6): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 141.663906][ T8482] EXT4-fs warning (device loop6): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 141.676127][ T8482] EXT4-fs warning (device loop6): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 141.689527][ T8482] EXT4-fs warning (device loop6): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 141.770518][ T8945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.816086][ T8945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.851642][ T8945] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.860676][ T8945] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.869613][ T8945] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.878500][ T8945] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.998201][ T8953] loop9: detected capacity change from 0 to 1024 [ 142.064137][ T8482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.075426][ T5346] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.112188][ T8953] EXT4-fs: Ignoring removed oldalloc option [ 142.126320][ T5346] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.133081][ T8953] EXT4-fs: Ignoring removed orlov option [ 142.146677][ T8953] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 142.174198][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1429'. [ 142.224160][ T5346] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.235255][ T8953] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.296958][ T5346] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.323571][ T8822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 142.344838][ T8974] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1431'. [ 142.358030][ T8822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 142.369861][ T8822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 142.385982][ T8607] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.413515][ T8822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 142.442258][ T8982] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 142.448985][ T8982] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.456710][ T8982] vhci_hcd vhci_hcd.0: Device attached [ 142.478716][ T8989] vhci_hcd: cannot find the pending unlink 6 [ 142.511704][ T5346] bridge_slave_1: left allmulticast mode [ 142.517549][ T5346] bridge_slave_1: left promiscuous mode [ 142.523341][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.534460][ T5346] bridge_slave_0: left allmulticast mode [ 142.540403][ T5346] bridge_slave_0: left promiscuous mode [ 142.546309][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.604976][ T8989] vhci_hcd: connection closed [ 142.607076][ T5344] vhci_hcd: stop threads [ 142.616169][ T5344] vhci_hcd: release socket [ 142.620673][ T5344] vhci_hcd: disconnect device [ 142.653153][ T9] vhci_hcd: vhci_device speed not set [ 142.660514][ T5346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.670241][ T5346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.679854][ T5346] bond0 (unregistering): Released all slaves [ 142.719079][ T8822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.741541][ T5346] hsr_slave_0: left promiscuous mode [ 142.741795][ T5346] hsr_slave_1: left promiscuous mode [ 142.741977][ T5346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.741996][ T5346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.742205][ T5346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.742229][ T5346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.749295][ T5346] veth1_macvtap: left promiscuous mode [ 142.761138][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1444'. [ 142.773001][ T5346] veth0_macvtap: left promiscuous mode [ 142.837064][ T5346] veth1_vlan: left promiscuous mode [ 142.842555][ T5346] veth0_vlan: left promiscuous mode [ 142.848193][ T9019] FAULT_INJECTION: forcing a failure. [ 142.848193][ T9019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.861667][ T9019] CPU: 1 UID: 0 PID: 9019 Comm: syz.9.1447 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 142.861755][ T9019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.861832][ T9019] Call Trace: [ 142.861837][ T9019] [ 142.861843][ T9019] __dump_stack+0x1d/0x30 [ 142.861889][ T9019] dump_stack_lvl+0xe8/0x140 [ 142.861908][ T9019] dump_stack+0x15/0x1b [ 142.861988][ T9019] should_fail_ex+0x265/0x280 [ 142.862048][ T9019] should_fail+0xb/0x20 [ 142.862085][ T9019] should_fail_usercopy+0x1a/0x20 [ 142.862119][ T9019] _copy_from_user+0x1c/0xb0 [ 142.862172][ T9019] memdup_user+0x5e/0xd0 [ 142.862191][ T9019] strndup_user+0x68/0xb0 [ 142.862209][ T9019] __se_sys_mount+0x4d/0x2e0 [ 142.862353][ T9019] ? fput+0x8f/0xc0 [ 142.862372][ T9019] ? ksys_write+0x192/0x1a0 [ 142.862452][ T9019] __x64_sys_mount+0x67/0x80 [ 142.862538][ T9019] x64_sys_call+0xd36/0x2fb0 [ 142.862563][ T9019] do_syscall_64+0xd2/0x200 [ 142.862577][ T9019] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 142.862600][ T9019] ? clear_bhb_loop+0x40/0x90 [ 142.862663][ T9019] ? clear_bhb_loop+0x40/0x90 [ 142.862701][ T9019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.862721][ T9019] RIP: 0033:0x7fbffe88e929 [ 142.862736][ T9019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.862753][ T9019] RSP: 002b:00007fbffcef7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 142.862771][ T9019] RAX: ffffffffffffffda RBX: 00007fbffeab5fa0 RCX: 00007fbffe88e929 [ 142.862782][ T9019] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 142.862866][ T9019] RBP: 00007fbffcef7090 R08: 0000200000000280 R09: 0000000000000000 [ 142.862876][ T9019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.862932][ T9019] R13: 0000000000000000 R14: 00007fbffeab5fa0 R15: 00007fff12d85fd8 [ 142.862949][ T9019] [ 142.881212][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.063628][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.071022][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.079010][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.086443][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.094183][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.101595][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.109193][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.116618][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.124091][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.131473][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.138896][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.146308][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.153742][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.161237][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.168740][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.176286][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.183881][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.191359][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.198861][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.206268][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.213707][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.221286][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.228725][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.236355][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.243791][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.251519][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.259120][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.267371][ T3391] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz1] on syz0 [ 143.302231][ T9027] loop8: detected capacity change from 0 to 2048 [ 143.314686][ T5346] team0 (unregistering): Port device team_slave_1 removed [ 143.325462][ T5346] team0 (unregistering): Port device team_slave_0 removed [ 143.336786][ T9027] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.387728][ T8822] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.400839][ T8962] chnl_net:caif_netlink_parms(): no params data found [ 143.437337][ T5308] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.444444][ T5308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.470241][ T8520] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.481609][ T5308] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.488707][ T5308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.499015][ T8962] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.506229][ T8962] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.523234][ T8962] bridge_slave_0: entered allmulticast mode [ 143.546644][ T8962] bridge_slave_0: entered promiscuous mode [ 143.566622][ T8822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 143.577352][ T8822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.590480][ T8962] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.597609][ T8962] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.622005][ T8962] bridge_slave_1: entered allmulticast mode [ 143.630624][ T8962] bridge_slave_1: entered promiscuous mode [ 143.637639][ T9052] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1457'. [ 143.656845][ T8962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.671461][ T8962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.741522][ T8822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.750435][ T8962] team0: Port device team_slave_0 added [ 143.751480][ T8962] team0: Port device team_slave_1 added [ 143.791529][ T8962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.803410][ T8962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.803489][ T8962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.901093][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1461'. [ 143.925343][ T8962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.925358][ T8962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.925457][ T8962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.475277][ T8962] hsr_slave_0: entered promiscuous mode [ 144.475706][ T8962] hsr_slave_1: entered promiscuous mode [ 144.476069][ T8962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.476082][ T8962] Cannot create hsr debugfs directory [ 144.535926][ T8822] veth0_vlan: entered promiscuous mode [ 144.570471][ T8822] veth1_vlan: entered promiscuous mode [ 144.614748][ T8822] veth0_macvtap: entered promiscuous mode [ 144.625038][ T9092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1467'. [ 144.640956][ T8822] veth1_macvtap: entered promiscuous mode [ 144.674753][ T8822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.685822][ T8822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.715416][ T8822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.717278][ T9099] loop8: detected capacity change from 0 to 256 [ 144.724248][ T8822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.724284][ T8822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.731410][ T9099] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.739231][ T8822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.769586][ T9099] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.830624][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 144.830639][ T29] audit: type=1326 audit(144.845:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c258e929 code=0x7ffc0000 [ 144.859725][ T29] audit: type=1326 audit(144.845:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c258e929 code=0x7ffc0000 [ 144.883353][ T29] audit: type=1326 audit(144.855:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0c258e929 code=0x7ffc0000 [ 144.906463][ T29] audit: type=1326 audit(144.855:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c258e929 code=0x7ffc0000 [ 144.929516][ T29] audit: type=1326 audit(144.855:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb0c258e929 code=0x7ffc0000 [ 144.952343][ T29] audit: type=1326 audit(144.855:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c258e929 code=0x7ffc0000 [ 144.975361][ T29] audit: type=1326 audit(144.855:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0c258e929 code=0x7ffc0000 [ 144.975798][ T9106] loop3: detected capacity change from 0 to 512 [ 144.998166][ T29] audit: type=1326 audit(144.855:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c258e929 code=0x7ffc0000 [ 144.998223][ T29] audit: type=1326 audit(144.855:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0c258e929 code=0x7ffc0000 [ 144.998244][ T29] audit: type=1326 audit(144.855:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c258e929 code=0x7ffc0000 [ 145.082143][ T9106] EXT4-fs: Ignoring removed orlov option [ 145.088050][ T9106] EXT4-fs: dax option not supported [ 145.120384][ T9117] syzkaller1: entered promiscuous mode [ 145.125950][ T9117] syzkaller1: entered allmulticast mode [ 145.136515][ T9117] loop1: detected capacity change from 0 to 512 [ 145.168011][ T8962] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 145.177267][ T9106] loop3: detected capacity change from 0 to 1764 [ 145.187454][ T8962] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 145.197001][ T8962] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 145.202178][ T9106] iso9660: Bad value for 'dmode' [ 145.215682][ T9117] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 145.222327][ T9117] EXT4-fs (loop1): mount failed [ 145.223201][ T8962] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 145.265089][ T8962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.265593][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1479'. [ 145.276125][ T8962] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.304608][ T8962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.315035][ T8962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.360347][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.367540][ T5346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.547710][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.554919][ T5346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.782365][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1490'. [ 145.804954][ T9155] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.812143][ T9155] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.856466][ T9155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.867125][ T9155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.899431][ T9155] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.908490][ T9155] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.917740][ T9155] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.926822][ T9155] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.162605][ T8962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.171255][ T9176] FAULT_INJECTION: forcing a failure. [ 146.171255][ T9176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.184468][ T9176] CPU: 1 UID: 0 PID: 9176 Comm: syz.8.1496 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 146.184551][ T9176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.184564][ T9176] Call Trace: [ 146.184571][ T9176] [ 146.184579][ T9176] __dump_stack+0x1d/0x30 [ 146.184601][ T9176] dump_stack_lvl+0xe8/0x140 [ 146.184620][ T9176] dump_stack+0x15/0x1b [ 146.184634][ T9176] should_fail_ex+0x265/0x280 [ 146.184729][ T9176] should_fail+0xb/0x20 [ 146.184846][ T9176] should_fail_usercopy+0x1a/0x20 [ 146.184873][ T9176] strncpy_from_user+0x25/0x230 [ 146.184897][ T9176] ? kmem_cache_alloc_noprof+0x186/0x310 [ 146.184924][ T9176] ? getname_flags+0x80/0x3b0 [ 146.184989][ T9176] getname_flags+0xae/0x3b0 [ 146.185052][ T9176] user_path_at+0x28/0x130 [ 146.185078][ T9176] do_utimes+0xd9/0x210 [ 146.185098][ T9176] __x64_sys_utime+0xbc/0x140 [ 146.185119][ T9176] x64_sys_call+0x2e1c/0x2fb0 [ 146.185207][ T9176] do_syscall_64+0xd2/0x200 [ 146.185223][ T9176] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 146.185244][ T9176] ? clear_bhb_loop+0x40/0x90 [ 146.185264][ T9176] ? clear_bhb_loop+0x40/0x90 [ 146.185286][ T9176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.185341][ T9176] RIP: 0033:0x7f6bd40fe929 [ 146.185353][ T9176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.185368][ T9176] RSP: 002b:00007f6bd2767038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 146.185384][ T9176] RAX: ffffffffffffffda RBX: 00007f6bd4325fa0 RCX: 00007f6bd40fe929 [ 146.185396][ T9176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 146.185409][ T9176] RBP: 00007f6bd2767090 R08: 0000000000000000 R09: 0000000000000000 [ 146.185423][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.185435][ T9176] R13: 0000000000000000 R14: 00007f6bd4325fa0 R15: 00007fffa21eb5d8 [ 146.185452][ T9176] [ 146.436583][ T9186] loop3: detected capacity change from 0 to 512 [ 146.485781][ T9186] EXT4-fs: Ignoring removed orlov option [ 146.504675][ T9186] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.522055][ T9186] EXT4-fs error (device loop3): ext4_init_orphan_info:585: comm syz.3.1500: inode #0: comm syz.3.1500: iget: illegal inode # [ 146.544173][ T8962] veth0_vlan: entered promiscuous mode [ 146.551973][ T8962] veth1_vlan: entered promiscuous mode [ 146.557790][ T9186] EXT4-fs (loop3): Remounting filesystem read-only [ 146.564388][ T9186] EXT4-fs (loop3): get orphan inode failed [ 146.579187][ T8962] veth0_macvtap: entered promiscuous mode [ 146.585261][ T9186] EXT4-fs (loop3): mount failed [ 146.595105][ T8962] veth1_macvtap: entered promiscuous mode [ 146.606853][ T8962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.618244][ T8962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.644808][ T9201] loop1: detected capacity change from 0 to 512 [ 146.651611][ T8962] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.651656][ T9201] EXT4-fs: Ignoring removed orlov option [ 146.660317][ T8962] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.666154][ T9201] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.674789][ T8962] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.690287][ T8962] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.724510][ T9201] EXT4-fs error (device loop1): ext4_init_orphan_info:585: comm syz.1.1502: inode #0: comm syz.1.1502: iget: illegal inode # [ 146.738065][ T9201] EXT4-fs (loop1): Remounting filesystem read-only [ 146.744625][ T9201] EXT4-fs (loop1): get orphan inode failed [ 146.869975][ T9201] EXT4-fs (loop1): mount failed [ 147.482884][ T9219] FAULT_INJECTION: forcing a failure. [ 147.482884][ T9219] name failslab, interval 1, probability 0, space 0, times 0 [ 147.495611][ T9219] CPU: 1 UID: 0 PID: 9219 Comm: syz.8.1504 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 147.495664][ T9219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.495675][ T9219] Call Trace: [ 147.495682][ T9219] [ 147.495689][ T9219] __dump_stack+0x1d/0x30 [ 147.495711][ T9219] dump_stack_lvl+0xe8/0x140 [ 147.495732][ T9219] dump_stack+0x15/0x1b [ 147.495747][ T9219] should_fail_ex+0x265/0x280 [ 147.495826][ T9219] ? __se_sys_memfd_create+0x1cc/0x590 [ 147.495860][ T9219] should_failslab+0x8c/0xb0 [ 147.495881][ T9219] __kmalloc_cache_noprof+0x4c/0x320 [ 147.495904][ T9219] ? fput+0x8f/0xc0 [ 147.495988][ T9219] __se_sys_memfd_create+0x1cc/0x590 [ 147.496079][ T9219] __x64_sys_memfd_create+0x31/0x40 [ 147.496109][ T9219] x64_sys_call+0x122f/0x2fb0 [ 147.496207][ T9219] do_syscall_64+0xd2/0x200 [ 147.496267][ T9219] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 147.496293][ T9219] ? clear_bhb_loop+0x40/0x90 [ 147.496315][ T9219] ? clear_bhb_loop+0x40/0x90 [ 147.496333][ T9219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.496359][ T9219] RIP: 0033:0x7f6bd40fe929 [ 147.496375][ T9219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.496392][ T9219] RSP: 002b:00007f6bd2745e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 147.496552][ T9219] RAX: ffffffffffffffda RBX: 000000000000051f RCX: 00007f6bd40fe929 [ 147.496564][ T9219] RDX: 00007f6bd2745ef0 RSI: 0000000000000000 RDI: 00007f6bd41814cc [ 147.496578][ T9219] RBP: 00002000000007c0 R08: 00007f6bd2745bb7 R09: 00007f6bd2745e40 [ 147.496641][ T9219] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000004c0 [ 147.496670][ T9219] R13: 00007f6bd2745ef0 R14: 00007f6bd2745eb0 R15: 00002000000021c0 [ 147.496690][ T9219] [ 147.689686][ T9218] loop7: detected capacity change from 0 to 764 [ 147.702658][ T9218] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 147.732355][ T9218] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 147.739906][ T9221] loop8: detected capacity change from 0 to 512 [ 147.749302][ T9221] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 147.795627][ T9225] FAULT_INJECTION: forcing a failure. [ 147.795627][ T9225] name failslab, interval 1, probability 0, space 0, times 0 [ 147.808390][ T9225] CPU: 1 UID: 0 PID: 9225 Comm: syz.8.1507 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 147.808419][ T9225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.808462][ T9225] Call Trace: [ 147.808469][ T9225] [ 147.808537][ T9225] __dump_stack+0x1d/0x30 [ 147.808556][ T9225] dump_stack_lvl+0xe8/0x140 [ 147.808576][ T9225] dump_stack+0x15/0x1b [ 147.808591][ T9225] should_fail_ex+0x265/0x280 [ 147.808617][ T9225] should_failslab+0x8c/0xb0 [ 147.808680][ T9225] __kmalloc_noprof+0xa5/0x3e0 [ 147.808703][ T9225] ? bpf_test_init+0xa9/0x160 [ 147.808735][ T9225] bpf_test_init+0xa9/0x160 [ 147.808775][ T9225] bpf_prog_test_run_xdp+0x274/0x910 [ 147.808805][ T9225] ? kstrtouint+0x76/0xc0 [ 147.808827][ T9225] ? __rcu_read_unlock+0x4f/0x70 [ 147.808854][ T9225] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 147.808891][ T9225] bpf_prog_test_run+0x22a/0x390 [ 147.808956][ T9225] __sys_bpf+0x3dc/0x790 [ 147.808991][ T9225] __x64_sys_bpf+0x41/0x50 [ 147.809052][ T9225] x64_sys_call+0x2478/0x2fb0 [ 147.809138][ T9225] do_syscall_64+0xd2/0x200 [ 147.809217][ T9225] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 147.809304][ T9225] ? clear_bhb_loop+0x40/0x90 [ 147.809325][ T9225] ? clear_bhb_loop+0x40/0x90 [ 147.809348][ T9225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.809365][ T9225] RIP: 0033:0x7f6bd40fe929 [ 147.809379][ T9225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.809394][ T9225] RSP: 002b:00007f6bd2767038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.809423][ T9225] RAX: ffffffffffffffda RBX: 00007f6bd4325fa0 RCX: 00007f6bd40fe929 [ 147.809437][ T9225] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 147.809450][ T9225] RBP: 00007f6bd2767090 R08: 0000000000000000 R09: 0000000000000000 [ 147.809464][ T9225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.809476][ T9225] R13: 0000000000000000 R14: 00007f6bd4325fa0 R15: 00007fffa21eb5d8 [ 147.809492][ T9225] [ 148.016134][ T9226] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1506'. [ 148.048497][ T9229] loop9: detected capacity change from 0 to 512 [ 148.070819][ T9229] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.077665][ T9229] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 148.105100][ T9229] EXT4-fs (loop9): 1 truncate cleaned up [ 148.114131][ T9229] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.164944][ T9241] netlink: 'syz.3.1512': attribute type 26 has an invalid length. [ 148.175859][ T8607] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.214921][ T9247] loop9: detected capacity change from 0 to 512 [ 148.221859][ T9247] EXT4-fs: Ignoring removed orlov option [ 148.227589][ T9247] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.236426][ T9247] EXT4-fs error (device loop9): ext4_init_orphan_info:585: comm syz.9.1515: inode #0: comm syz.9.1515: iget: illegal inode # [ 148.249803][ T9247] EXT4-fs (loop9): Remounting filesystem read-only [ 148.256396][ T9247] EXT4-fs (loop9): get orphan inode failed [ 148.263481][ T9247] EXT4-fs (loop9): mount failed [ 148.273880][ T9250] netlink: 'syz.1.1517': attribute type 10 has an invalid length. [ 148.283357][ T9250] team0: Device hsr_slave_0 failed to register rx_handler [ 148.333332][ T9253] SELinux: syz.9.1515 (9253) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 148.380913][ T9257] FAULT_INJECTION: forcing a failure. [ 148.380913][ T9257] name failslab, interval 1, probability 0, space 0, times 0 [ 148.393648][ T9257] CPU: 0 UID: 0 PID: 9257 Comm: syz.7.1519 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 148.393691][ T9257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.393702][ T9257] Call Trace: [ 148.393709][ T9257] [ 148.393738][ T9257] __dump_stack+0x1d/0x30 [ 148.393757][ T9257] dump_stack_lvl+0xe8/0x140 [ 148.393774][ T9257] dump_stack+0x15/0x1b [ 148.393788][ T9257] should_fail_ex+0x265/0x280 [ 148.393814][ T9257] should_failslab+0x8c/0xb0 [ 148.393832][ T9257] kmem_cache_alloc_node_noprof+0x57/0x320 [ 148.393919][ T9257] ? __alloc_skb+0x101/0x320 [ 148.393968][ T9257] __alloc_skb+0x101/0x320 [ 148.393997][ T9257] netlink_alloc_large_skb+0xba/0xf0 [ 148.394033][ T9257] netlink_sendmsg+0x3cf/0x6b0 [ 148.394054][ T9257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.394075][ T9257] __sock_sendmsg+0x145/0x180 [ 148.394101][ T9257] ____sys_sendmsg+0x31e/0x4e0 [ 148.394149][ T9257] ___sys_sendmsg+0x17b/0x1d0 [ 148.394201][ T9257] __x64_sys_sendmsg+0xd4/0x160 [ 148.394293][ T9257] x64_sys_call+0x2999/0x2fb0 [ 148.394315][ T9257] do_syscall_64+0xd2/0x200 [ 148.394334][ T9257] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 148.394369][ T9257] ? clear_bhb_loop+0x40/0x90 [ 148.394388][ T9257] ? clear_bhb_loop+0x40/0x90 [ 148.394426][ T9257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.394467][ T9257] RIP: 0033:0x7fa65e95e929 [ 148.394480][ T9257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.394510][ T9257] RSP: 002b:00007fa65cfc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.394530][ T9257] RAX: ffffffffffffffda RBX: 00007fa65eb85fa0 RCX: 00007fa65e95e929 [ 148.394543][ T9257] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 148.394556][ T9257] RBP: 00007fa65cfc7090 R08: 0000000000000000 R09: 0000000000000000 [ 148.394619][ T9257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.394631][ T9257] R13: 0000000000000000 R14: 00007fa65eb85fa0 R15: 00007fffecf3ffc8 [ 148.394647][ T9257] [ 148.649181][ T9264] loop1: detected capacity change from 0 to 512 [ 148.657400][ T9264] EXT4-fs: Ignoring removed orlov option [ 148.663222][ T9264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.673088][ T9264] EXT4-fs error (device loop1): ext4_init_orphan_info:585: comm syz.1.1522: inode #0: comm syz.1.1522: iget: illegal inode # [ 148.686500][ T9264] EXT4-fs (loop1): Remounting filesystem read-only [ 148.693103][ T9264] EXT4-fs (loop1): get orphan inode failed [ 148.700538][ T9264] EXT4-fs (loop1): mount failed [ 149.136862][ T9276] FAULT_INJECTION: forcing a failure. [ 149.136862][ T9276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.150074][ T9276] CPU: 1 UID: 0 PID: 9276 Comm: syz.8.1526 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 149.150101][ T9276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.150110][ T9276] Call Trace: [ 149.150117][ T9276] [ 149.150124][ T9276] __dump_stack+0x1d/0x30 [ 149.150193][ T9276] dump_stack_lvl+0xe8/0x140 [ 149.150209][ T9276] dump_stack+0x15/0x1b [ 149.150328][ T9276] should_fail_ex+0x265/0x280 [ 149.150355][ T9276] should_fail+0xb/0x20 [ 149.150381][ T9276] should_fail_usercopy+0x1a/0x20 [ 149.150413][ T9276] _copy_from_user+0x1c/0xb0 [ 149.150502][ T9276] memdup_user+0x5e/0xd0 [ 149.150522][ T9276] strndup_user+0x68/0xb0 [ 149.150540][ T9276] __se_sys_mount+0x4d/0x2e0 [ 149.150570][ T9276] ? fput+0x8f/0xc0 [ 149.150590][ T9276] ? ksys_write+0x192/0x1a0 [ 149.150644][ T9276] __x64_sys_mount+0x67/0x80 [ 149.150673][ T9276] x64_sys_call+0xd36/0x2fb0 [ 149.150691][ T9276] do_syscall_64+0xd2/0x200 [ 149.150741][ T9276] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 149.150768][ T9276] ? clear_bhb_loop+0x40/0x90 [ 149.150797][ T9276] ? clear_bhb_loop+0x40/0x90 [ 149.150819][ T9276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.150870][ T9276] RIP: 0033:0x7f6bd40fe929 [ 149.150884][ T9276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.150903][ T9276] RSP: 002b:00007f6bd2767038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 149.150921][ T9276] RAX: ffffffffffffffda RBX: 00007f6bd4325fa0 RCX: 00007f6bd40fe929 [ 149.150932][ T9276] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 149.150945][ T9276] RBP: 00007f6bd2767090 R08: 0000200000000340 R09: 0000000000000000 [ 149.150958][ T9276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.150989][ T9276] R13: 0000000000000000 R14: 00007f6bd4325fa0 R15: 00007fffa21eb5d8 [ 149.151006][ T9276] [ 149.521639][ T9284] netlink: 'syz.7.1530': attribute type 2 has an invalid length. [ 149.529535][ T9284] netlink: 'syz.7.1530': attribute type 2 has an invalid length. [ 149.537320][ T9284] netlink: 'syz.7.1530': attribute type 1 has an invalid length. [ 149.545088][ T9284] netlink: 'syz.7.1530': attribute type 1 has an invalid length. [ 149.594950][ T9290] 9pnet_fd: Insufficient options for proto=fd [ 149.598147][ T9289] loop7: detected capacity change from 0 to 512 [ 149.607783][ T9289] EXT4-fs: Ignoring removed orlov option [ 149.613799][ T9289] EXT4-fs: dax option not supported [ 149.640239][ T9289] loop7: detected capacity change from 0 to 1764 [ 149.647161][ T9289] iso9660: Bad value for 'dmode' [ 149.696610][ T9294] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1535'. [ 149.753852][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1537'. [ 149.819464][ T9304] loop7: detected capacity change from 0 to 512 [ 149.841656][ T9304] EXT4-fs: Ignoring removed orlov option [ 149.847349][ T9304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.847552][ T9306] loop9: detected capacity change from 0 to 1024 [ 149.856140][ T9304] EXT4-fs error (device loop7): ext4_init_orphan_info:585: comm syz.7.1539: inode #0: comm syz.7.1539: iget: illegal inode # [ 149.871033][ T9306] EXT4-fs: Ignoring removed bh option [ 149.874052][ T9304] EXT4-fs (loop7): Remounting filesystem read-only [ 149.885583][ T9304] EXT4-fs (loop7): get orphan inode failed [ 149.892222][ T9304] EXT4-fs (loop7): mount failed [ 149.906037][ T9306] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.937447][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 149.937463][ T29] audit: type=1400 audit(149.957:2636): avc: denied { append } for pid=9305 comm="syz.9.1540" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 149.967636][ T3423] IPVS: starting estimator thread 0... [ 149.976045][ T9306] SELinux: syz.9.1540 (9306) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 150.005410][ T8607] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.021837][ T9322] FAULT_INJECTION: forcing a failure. [ 150.021837][ T9322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.035051][ T9322] CPU: 1 UID: 0 PID: 9322 Comm: syz.8.1543 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 150.035076][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.035087][ T9322] Call Trace: [ 150.035125][ T9322] [ 150.035132][ T9322] __dump_stack+0x1d/0x30 [ 150.035150][ T9322] dump_stack_lvl+0xe8/0x140 [ 150.035169][ T9322] dump_stack+0x15/0x1b [ 150.035187][ T9322] should_fail_ex+0x265/0x280 [ 150.035219][ T9322] should_fail+0xb/0x20 [ 150.035288][ T9322] should_fail_usercopy+0x1a/0x20 [ 150.035318][ T9322] _copy_from_user+0x1c/0xb0 [ 150.035338][ T9322] simple_transaction_get+0xe2/0x130 [ 150.035370][ T9322] selinux_transaction_write+0x9d/0x110 [ 150.035407][ T9322] ? __pfx_selinux_transaction_write+0x10/0x10 [ 150.035431][ T9322] vfs_write+0x269/0x8e0 [ 150.035484][ T9322] ? __rcu_read_unlock+0x4f/0x70 [ 150.035502][ T9322] ? __fget_files+0x184/0x1c0 [ 150.035545][ T9322] ksys_write+0xda/0x1a0 [ 150.035583][ T9322] __x64_sys_write+0x40/0x50 [ 150.035612][ T9322] x64_sys_call+0x2cdd/0x2fb0 [ 150.035651][ T9322] do_syscall_64+0xd2/0x200 [ 150.035667][ T9322] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.035693][ T9322] ? clear_bhb_loop+0x40/0x90 [ 150.035780][ T9322] ? clear_bhb_loop+0x40/0x90 [ 150.035802][ T9322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.035902][ T9322] RIP: 0033:0x7f6bd40fe929 [ 150.035946][ T9322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.035961][ T9322] RSP: 002b:00007f6bd2767038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 150.036014][ T9322] RAX: ffffffffffffffda RBX: 00007f6bd4325fa0 RCX: 00007f6bd40fe929 [ 150.036099][ T9322] RDX: 0000000000000027 RSI: 0000200000000240 RDI: 0000000000000003 [ 150.036113][ T9322] RBP: 00007f6bd2767090 R08: 0000000000000000 R09: 0000000000000000 [ 150.036126][ T9322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.036139][ T9322] R13: 0000000000000000 R14: 00007f6bd4325fa0 R15: 00007fffa21eb5d8 [ 150.036157][ T9322] [ 150.245557][ T29] audit: type=1326 audit(150.268:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26782558e7 code=0x7ffc0000 [ 150.268297][ T9313] IPVS: using max 2544 ests per chain, 127200 per kthread [ 150.277744][ T29] audit: type=1326 audit(150.298:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26781fab19 code=0x7ffc0000 [ 150.300649][ T29] audit: type=1326 audit(150.298:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267825e929 code=0x7ffc0000 [ 150.323737][ T29] audit: type=1326 audit(150.298:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267825e929 code=0x7ffc0000 [ 150.346916][ T29] audit: type=1326 audit(150.298:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f267825e929 code=0x7ffc0000 [ 150.370003][ T29] audit: type=1326 audit(150.298:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267825e929 code=0x7ffc0000 [ 150.393061][ T29] audit: type=1326 audit(150.298:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267825e929 code=0x7ffc0000 [ 150.415831][ T29] audit: type=1326 audit(150.298:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f267825e929 code=0x7ffc0000 [ 150.438576][ T29] audit: type=1326 audit(150.298:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267825e929 code=0x7ffc0000 [ 150.465474][ T9321] loop1: detected capacity change from 0 to 512 [ 150.466759][ T9327] loop8: detected capacity change from 0 to 512 [ 150.472411][ T9321] EXT4-fs: Ignoring removed orlov option [ 150.478558][ T9327] EXT4-fs: Ignoring removed bh option [ 150.484059][ T9321] EXT4-fs: dax option not supported [ 150.492584][ T9327] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.503678][ T9327] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 150.513543][ T9321] loop1: detected capacity change from 0 to 1764 [ 150.520680][ T9321] iso9660: Bad value for 'dmode' [ 150.526641][ T9327] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 150.537133][ T9327] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 150.548110][ T9327] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.576395][ T9333] FAULT_INJECTION: forcing a failure. [ 150.576395][ T9333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.589521][ T9333] CPU: 0 UID: 0 PID: 9333 Comm: syz.9.1548 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 150.589598][ T9333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.589610][ T9333] Call Trace: [ 150.589617][ T9333] [ 150.589624][ T9333] __dump_stack+0x1d/0x30 [ 150.589707][ T9333] dump_stack_lvl+0xe8/0x140 [ 150.589738][ T9333] dump_stack+0x15/0x1b [ 150.589779][ T9333] should_fail_ex+0x265/0x280 [ 150.589809][ T9333] should_fail+0xb/0x20 [ 150.589874][ T9333] should_fail_usercopy+0x1a/0x20 [ 150.589911][ T9333] strncpy_from_user+0x25/0x230 [ 150.589937][ T9333] strncpy_from_user_nofault+0x68/0xf0 [ 150.589969][ T9333] bpf_probe_read_user_str+0x2a/0x70 [ 150.590037][ T9333] bpf_prog_02a70dbeb5f742df+0x43/0x49 [ 150.590054][ T9333] bpf_trace_run2+0x104/0x1c0 [ 150.590077][ T9333] ? __sys_setsockopt+0x18e/0x200 [ 150.590126][ T9333] ? __sys_setsockopt+0x18e/0x200 [ 150.590170][ T9333] kfree+0x27b/0x320 [ 150.590192][ T9333] ? sock_common_setsockopt+0x69/0x80 [ 150.590224][ T9333] __sys_setsockopt+0x18e/0x200 [ 150.590255][ T9333] __x64_sys_setsockopt+0x64/0x80 [ 150.590363][ T9333] x64_sys_call+0x2bd5/0x2fb0 [ 150.590384][ T9333] do_syscall_64+0xd2/0x200 [ 150.590403][ T9333] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.590489][ T9333] ? clear_bhb_loop+0x40/0x90 [ 150.590510][ T9333] ? clear_bhb_loop+0x40/0x90 [ 150.590532][ T9333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.590579][ T9333] RIP: 0033:0x7fbffe88e929 [ 150.590593][ T9333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.590682][ T9333] RSP: 002b:00007fbffcef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 150.590701][ T9333] RAX: ffffffffffffffda RBX: 00007fbffeab5fa0 RCX: 00007fbffe88e929 [ 150.590714][ T9333] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000003 [ 150.590727][ T9333] RBP: 00007fbffcef7090 R08: 0000000000000044 R09: 0000000000000000 [ 150.590739][ T9333] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.590821][ T9333] R13: 0000000000000000 R14: 00007fbffeab5fa0 R15: 00007fff12d85fd8 [ 150.590838][ T9333] [ 150.831314][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'. [ 150.861072][ T8520] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.945311][ T9350] loop9: detected capacity change from 0 to 512 [ 150.949316][ T9360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.952278][ T9362] FAULT_INJECTION: forcing a failure. [ 150.952278][ T9362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.961443][ T9360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.972989][ T9362] CPU: 1 UID: 0 PID: 9362 Comm: syz.8.1560 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 150.973077][ T9362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.973089][ T9362] Call Trace: [ 150.973096][ T9362] [ 150.973104][ T9362] __dump_stack+0x1d/0x30 [ 150.973125][ T9362] dump_stack_lvl+0xe8/0x140 [ 150.973175][ T9362] dump_stack+0x15/0x1b [ 150.973211][ T9362] should_fail_ex+0x265/0x280 [ 150.973246][ T9362] should_fail+0xb/0x20 [ 150.973402][ T9362] should_fail_usercopy+0x1a/0x20 [ 150.973433][ T9362] _copy_from_user+0x1c/0xb0 [ 150.973452][ T9362] input_event_from_user+0x5f/0x160 [ 150.973478][ T9362] ? input_inject_event+0xd9/0xf0 [ 150.973583][ T9362] evdev_write+0x1b1/0x290 [ 150.973676][ T9362] ? __pfx_evdev_write+0x10/0x10 [ 150.973693][ T9362] vfs_write+0x269/0x8e0 [ 150.973728][ T9362] ? __rcu_read_unlock+0x4f/0x70 [ 150.973746][ T9362] ? __fget_files+0x184/0x1c0 [ 150.973764][ T9362] ksys_write+0xda/0x1a0 [ 150.973801][ T9362] __x64_sys_write+0x40/0x50 [ 150.973834][ T9362] x64_sys_call+0x2cdd/0x2fb0 [ 150.973855][ T9362] do_syscall_64+0xd2/0x200 [ 150.973872][ T9362] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.973964][ T9362] ? clear_bhb_loop+0x40/0x90 [ 150.974064][ T9362] ? clear_bhb_loop+0x40/0x90 [ 150.974147][ T9362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.974167][ T9362] RIP: 0033:0x7f6bd40fe929 [ 150.974183][ T9362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.974200][ T9362] RSP: 002b:00007f6bd2767038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 150.974219][ T9362] RAX: ffffffffffffffda RBX: 00007f6bd4325fa0 RCX: 00007f6bd40fe929 [ 150.974260][ T9362] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 150.974272][ T9362] RBP: 00007f6bd2767090 R08: 0000000000000000 R09: 0000000000000000 [ 150.974284][ T9362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.974370][ T9362] R13: 0000000000000000 R14: 00007f6bd4325fa0 R15: 00007fffa21eb5d8 [ 150.974389][ T9362] [ 150.975119][ T9350] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 151.075303][ T9365] tipc: Started in network mode [ 151.075390][ T9365] tipc: Node identity f67602eaeb5c, cluster identity 4711 [ 151.092937][ T9350] EXT4-fs (loop9): 1 truncate cleaned up [ 151.093853][ T9365] tipc: Enabled bearer , priority 0 [ 151.100556][ T9350] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.241774][ T9363] tipc: Disabling bearer [ 151.263126][ T8607] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.303055][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1563'. [ 151.329529][ T3405] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 151.339403][ T3405] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 151.416635][ T9376] netlink: 284 bytes leftover after parsing attributes in process `syz.8.1566'. [ 151.527237][ T9375] hid-generic 0000:0000:0000.0002: pid 9375 passed too large report [ 151.635917][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1575'. [ 151.688156][ T9396] tipc: Enabling of bearer rejected, failed to enable media [ 151.722364][ T9404] netlink: 'syz.1.1580': attribute type 1 has an invalid length. [ 151.801590][ T9417] FAULT_INJECTION: forcing a failure. [ 151.801590][ T9417] name failslab, interval 1, probability 0, space 0, times 0 [ 151.816488][ T9417] CPU: 0 UID: 0 PID: 9417 Comm: syz.9.1583 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 151.816616][ T9417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.816628][ T9417] Call Trace: [ 151.816632][ T9417] [ 151.816638][ T9417] __dump_stack+0x1d/0x30 [ 151.816658][ T9417] dump_stack_lvl+0xe8/0x140 [ 151.816704][ T9417] dump_stack+0x15/0x1b [ 151.816722][ T9417] should_fail_ex+0x265/0x280 [ 151.816752][ T9417] ? ftrace_profile_set_filter+0xc2/0x190 [ 151.816770][ T9417] should_failslab+0x8c/0xb0 [ 151.816841][ T9417] __kmalloc_cache_noprof+0x4c/0x320 [ 151.816866][ T9417] ftrace_profile_set_filter+0xc2/0x190 [ 151.816892][ T9417] perf_ioctl+0x7b3/0x12e0 [ 151.816928][ T9417] ? ioctl_has_perm+0x289/0x2a0 [ 151.816949][ T9417] ? do_vfs_ioctl+0x9df/0x11d0 [ 151.816975][ T9417] ? selinux_file_ioctl+0x2e3/0x370 [ 151.817026][ T9417] ? __fget_files+0x184/0x1c0 [ 151.817042][ T9417] ? __pfx_perf_ioctl+0x10/0x10 [ 151.817063][ T9417] __se_sys_ioctl+0xcb/0x140 [ 151.817091][ T9417] __x64_sys_ioctl+0x43/0x50 [ 151.817168][ T9417] x64_sys_call+0x19a8/0x2fb0 [ 151.817192][ T9417] do_syscall_64+0xd2/0x200 [ 151.817207][ T9417] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 151.817273][ T9417] ? clear_bhb_loop+0x40/0x90 [ 151.817292][ T9417] ? clear_bhb_loop+0x40/0x90 [ 151.817316][ T9417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.817336][ T9417] RIP: 0033:0x7fbffe88e929 [ 151.817350][ T9417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.817368][ T9417] RSP: 002b:00007fbffcef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.817385][ T9417] RAX: ffffffffffffffda RBX: 00007fbffeab5fa0 RCX: 00007fbffe88e929 [ 151.817396][ T9417] RDX: 0000200000000000 RSI: 0000000040082406 RDI: 0000000000000005 [ 151.817406][ T9417] RBP: 00007fbffcef7090 R08: 0000000000000000 R09: 0000000000000000 [ 151.817479][ T9417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.817547][ T9417] R13: 0000000000000000 R14: 00007fbffeab5fa0 R15: 00007fff12d85fd8 [ 151.817562][ T9417] [ 152.031736][ T9423] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1581'. [ 152.044093][ T9423] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 152.159985][ T9431] 9pnet_fd: Insufficient options for proto=fd [ 152.175544][ T9432] FAULT_INJECTION: forcing a failure. [ 152.175544][ T9432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.188855][ T9432] CPU: 0 UID: 0 PID: 9432 Comm: syz.3.1577 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 152.188882][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.188893][ T9432] Call Trace: [ 152.188897][ T9432] [ 152.188903][ T9432] __dump_stack+0x1d/0x30 [ 152.188921][ T9432] dump_stack_lvl+0xe8/0x140 [ 152.188937][ T9432] dump_stack+0x15/0x1b [ 152.189015][ T9432] should_fail_ex+0x265/0x280 [ 152.189041][ T9432] should_fail+0xb/0x20 [ 152.189069][ T9432] should_fail_usercopy+0x1a/0x20 [ 152.189111][ T9432] strncpy_from_user+0x25/0x230 [ 152.189205][ T9432] ? kmem_cache_alloc_noprof+0x186/0x310 [ 152.189227][ T9432] ? getname_flags+0x80/0x3b0 [ 152.189245][ T9432] getname_flags+0xae/0x3b0 [ 152.189271][ T9432] do_sys_openat2+0x60/0x110 [ 152.189294][ T9432] __x64_sys_openat+0xf2/0x120 [ 152.189316][ T9432] x64_sys_call+0x1af/0x2fb0 [ 152.189374][ T9432] do_syscall_64+0xd2/0x200 [ 152.189392][ T9432] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 152.189533][ T9432] ? clear_bhb_loop+0x40/0x90 [ 152.189555][ T9432] ? clear_bhb_loop+0x40/0x90 [ 152.189574][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.189591][ T9432] RIP: 0033:0x7fb0c258e929 [ 152.189605][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.189669][ T9432] RSP: 002b:00007fb0c0bb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 152.189685][ T9432] RAX: ffffffffffffffda RBX: 00007fb0c27b6160 RCX: 00007fb0c258e929 [ 152.189698][ T9432] RDX: 0000000000000000 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 152.189711][ T9432] RBP: 00007fb0c0bb5090 R08: 0000000000000000 R09: 0000000000000000 [ 152.189722][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.189732][ T9432] R13: 0000000000000000 R14: 00007fb0c27b6160 R15: 00007fff919829e8 [ 152.189749][ T9432] [ 152.455805][ T9428] loop7: detected capacity change from 0 to 512 [ 152.607586][ T9436] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.614942][ T9436] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.658145][ T9428] EXT4-fs (loop7): too many log groups per flexible block group [ 152.665987][ T9428] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 152.687971][ T9428] EXT4-fs (loop7): mount failed [ 152.697952][ T9427] uprobe: syz.7.1586:9427 failed to unregister, leaking uprobe [ 152.730484][ T9436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.760509][ T9436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.827158][ T9436] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.836284][ T9436] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.845175][ T9436] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.854138][ T9436] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.301094][ T9454] program syz.1.1592 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.369562][ T9459] loop9: detected capacity change from 0 to 128 [ 153.487864][ T9473] FAULT_INJECTION: forcing a failure. [ 153.487864][ T9473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.491458][ T9468] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1598'. [ 153.501060][ T9473] CPU: 0 UID: 0 PID: 9473 Comm: syz.1.1596 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 153.501150][ T9473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.501163][ T9473] Call Trace: [ 153.501248][ T9473] [ 153.501256][ T9473] __dump_stack+0x1d/0x30 [ 153.501277][ T9473] dump_stack_lvl+0xe8/0x140 [ 153.501296][ T9473] dump_stack+0x15/0x1b [ 153.501312][ T9473] should_fail_ex+0x265/0x280 [ 153.501341][ T9473] should_fail+0xb/0x20 [ 153.501411][ T9473] should_fail_usercopy+0x1a/0x20 [ 153.501441][ T9473] _copy_to_user+0x20/0xa0 [ 153.501503][ T9473] simple_read_from_buffer+0xb5/0x130 [ 153.501554][ T9473] proc_fail_nth_read+0x100/0x140 [ 153.501583][ T9473] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.501611][ T9473] vfs_read+0x19d/0x6f0 [ 153.501713][ T9473] ? __rcu_read_unlock+0x4f/0x70 [ 153.501734][ T9473] ? __fget_files+0x184/0x1c0 [ 153.501754][ T9473] ksys_read+0xda/0x1a0 [ 153.501850][ T9473] __x64_sys_read+0x40/0x50 [ 153.501879][ T9473] x64_sys_call+0x2d77/0x2fb0 [ 153.501899][ T9473] do_syscall_64+0xd2/0x200 [ 153.501949][ T9473] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 153.501975][ T9473] ? clear_bhb_loop+0x40/0x90 [ 153.502026][ T9473] ? clear_bhb_loop+0x40/0x90 [ 153.502047][ T9473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.502068][ T9473] RIP: 0033:0x7f267825d33c [ 153.502083][ T9473] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 153.502144][ T9473] RSP: 002b:00007f26768a6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.502163][ T9473] RAX: ffffffffffffffda RBX: 00007f2678486080 RCX: 00007f267825d33c [ 153.502175][ T9473] RDX: 000000000000000f RSI: 00007f26768a60a0 RDI: 0000000000000008 [ 153.502187][ T9473] RBP: 00007f26768a6090 R08: 0000000000000000 R09: 0000000000000000 [ 153.502199][ T9473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.502268][ T9473] R13: 0000000000000000 R14: 00007f2678486080 R15: 00007fff61ada808 [ 153.502286][ T9473] [ 153.560782][ T9465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1597'. [ 153.572042][ T9465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1597'. [ 153.577925][ T9476] loop9: detected capacity change from 0 to 512 [ 153.652418][ T9480] loop7: detected capacity change from 0 to 128 [ 153.666240][ T9476] EXT4-fs: Ignoring removed orlov option [ 153.755814][ T9476] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.763602][ T9476] EXT4-fs error (device loop9): ext4_init_orphan_info:585: comm syz.9.1599: inode #0: comm syz.9.1599: iget: illegal inode # [ 153.777028][ T9476] EXT4-fs (loop9): Remounting filesystem read-only [ 153.783687][ T9476] EXT4-fs (loop9): get orphan inode failed [ 153.789872][ T9476] EXT4-fs (loop9): mount failed [ 153.902178][ T9494] FAULT_INJECTION: forcing a failure. [ 153.902178][ T9494] name failslab, interval 1, probability 0, space 0, times 0 [ 153.914903][ T9494] CPU: 0 UID: 0 PID: 9494 Comm: syz.3.1605 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 153.914928][ T9494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.914938][ T9494] Call Trace: [ 153.914943][ T9494] [ 153.914950][ T9494] __dump_stack+0x1d/0x30 [ 153.914968][ T9494] dump_stack_lvl+0xe8/0x140 [ 153.914986][ T9494] dump_stack+0x15/0x1b [ 153.915002][ T9494] should_fail_ex+0x265/0x280 [ 153.915091][ T9494] should_failslab+0x8c/0xb0 [ 153.915110][ T9494] kmem_cache_alloc_noprof+0x50/0x310 [ 153.915138][ T9494] ? security_inode_alloc+0x37/0x100 [ 153.915243][ T9494] security_inode_alloc+0x37/0x100 [ 153.915267][ T9494] inode_init_always_gfp+0x4b7/0x500 [ 153.915294][ T9494] ? __pfx_sock_alloc_inode+0x10/0x10 [ 153.915343][ T9494] alloc_inode+0x58/0x170 [ 153.915374][ T9494] __sock_create+0x122/0x5b0 [ 153.915399][ T9494] __sys_socketpair+0x1bc/0x430 [ 153.915498][ T9494] __x64_sys_socketpair+0x52/0x60 [ 153.915520][ T9494] x64_sys_call+0x23f2/0x2fb0 [ 153.915538][ T9494] do_syscall_64+0xd2/0x200 [ 153.915560][ T9494] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 153.915587][ T9494] ? clear_bhb_loop+0x40/0x90 [ 153.915608][ T9494] ? clear_bhb_loop+0x40/0x90 [ 153.915667][ T9494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.915685][ T9494] RIP: 0033:0x7fb0c258e929 [ 153.915765][ T9494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.915784][ T9494] RSP: 002b:00007fb0c0bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 153.915832][ T9494] RAX: ffffffffffffffda RBX: 00007fb0c27b5fa0 RCX: 00007fb0c258e929 [ 153.915842][ T9494] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000018 [ 153.915853][ T9494] RBP: 00007fb0c0bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 153.915863][ T9494] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.915875][ T9494] R13: 0000000000000000 R14: 00007fb0c27b5fa0 R15: 00007fff919829e8 [ 153.915893][ T9494] [ 153.915903][ T9494] socket: no more sockets [ 154.194268][ T9512] loop7: detected capacity change from 0 to 512 [ 154.201396][ T9512] EXT4-fs: Ignoring removed orlov option [ 154.208618][ T9512] EXT4-fs: dax option not supported [ 154.214770][ T9502] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 154.242941][ T9514] loop8: detected capacity change from 0 to 512 [ 154.259482][ T9514] ext4: Unknown parameter 'noacl' [ 154.316672][ T9512] loop7: detected capacity change from 0 to 1764 [ 154.344572][ T9512] iso9660: Bad value for 'dmode' [ 154.672110][ T9530] loop9: detected capacity change from 0 to 512 [ 154.686488][ T9530] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 154.707024][ T9530] EXT4-fs (loop9): 1 truncate cleaned up [ 154.712966][ T9530] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.775812][ T8607] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.799688][ T9536] loop9: detected capacity change from 0 to 512 [ 154.807454][ T9536] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 154.820489][ T9536] EXT4-fs (loop9): 1 truncate cleaned up [ 154.827469][ T9536] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.842788][ T9536] FAULT_INJECTION: forcing a failure. [ 154.842788][ T9536] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 154.856146][ T9536] CPU: 1 UID: 0 PID: 9536 Comm: syz.9.1621 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 154.856172][ T9536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.856186][ T9536] Call Trace: [ 154.856192][ T9536] [ 154.856200][ T9536] __dump_stack+0x1d/0x30 [ 154.856275][ T9536] dump_stack_lvl+0xe8/0x140 [ 154.856291][ T9536] dump_stack+0x15/0x1b [ 154.856305][ T9536] should_fail_ex+0x265/0x280 [ 154.856340][ T9536] should_fail_alloc_page+0xf2/0x100 [ 154.856365][ T9536] __alloc_frozen_pages_noprof+0xff/0x360 [ 154.856482][ T9536] alloc_pages_mpol+0xb3/0x250 [ 154.856513][ T9536] folio_alloc_noprof+0x97/0x150 [ 154.856550][ T9536] filemap_alloc_folio_noprof+0x66/0x210 [ 154.856579][ T9536] __filemap_get_folio+0x28f/0x6b0 [ 154.856622][ T9536] ? ext4_writepage_trans_blocks+0x1bf/0x1e0 [ 154.856652][ T9536] ext4_write_begin+0x234/0xd30 [ 154.856675][ T9536] ? mntput_no_expire+0x6f/0x3c0 [ 154.856765][ T9536] ? terminate_walk+0x27f/0x2a0 [ 154.856786][ T9536] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 154.856813][ T9536] generic_perform_write+0x181/0x490 [ 154.856834][ T9536] ext4_buffered_write_iter+0x1ee/0x3c0 [ 154.856856][ T9536] ext4_file_write_iter+0x383/0xf00 [ 154.856921][ T9536] ? 0xffffffff81000000 [ 154.856934][ T9536] ? __rcu_read_unlock+0x4f/0x70 [ 154.856957][ T9536] ? avc_policy_seqno+0x15/0x30 [ 154.856984][ T9536] ? selinux_file_permission+0x1e4/0x320 [ 154.857005][ T9536] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 154.857049][ T9536] vfs_write+0x49d/0x8e0 [ 154.857084][ T9536] __x64_sys_pwrite64+0xfd/0x150 [ 154.857113][ T9536] x64_sys_call+0xe45/0x2fb0 [ 154.857201][ T9536] do_syscall_64+0xd2/0x200 [ 154.857220][ T9536] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 154.857316][ T9536] ? clear_bhb_loop+0x40/0x90 [ 154.857338][ T9536] ? clear_bhb_loop+0x40/0x90 [ 154.857392][ T9536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.857429][ T9536] RIP: 0033:0x7fbffe88e929 [ 154.857442][ T9536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.857458][ T9536] RSP: 002b:00007fbffcef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 154.857475][ T9536] RAX: ffffffffffffffda RBX: 00007fbffeab5fa0 RCX: 00007fbffe88e929 [ 154.857488][ T9536] RDX: 00000000ffffff07 RSI: 0000200000000140 RDI: 0000000000000004 [ 154.857546][ T9536] RBP: 00007fbffcef7090 R08: 0000000000000000 R09: 0000000000000000 [ 154.857556][ T9536] R10: 0000000008000c61 R11: 0000000000000246 R12: 0000000000000001 [ 154.857566][ T9536] R13: 0000000000000000 R14: 00007fbffeab5fa0 R15: 00007fff12d85fd8 [ 154.857581][ T9536] [ 155.163985][ T9544] loop8: detected capacity change from 0 to 512 [ 155.172143][ T9544] EXT4-fs: Ignoring removed orlov option [ 155.178085][ T9544] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.179571][ T8607] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.206784][ T9544] EXT4-fs error (device loop8): ext4_init_orphan_info:585: comm syz.8.1625: inode #0: comm syz.8.1625: iget: illegal inode # [ 155.225179][ T9544] EXT4-fs (loop8): Remounting filesystem read-only [ 155.231870][ T9544] EXT4-fs (loop8): get orphan inode failed [ 155.239688][ T9544] EXT4-fs (loop8): mount failed [ 155.252035][ T9550] FAULT_INJECTION: forcing a failure. [ 155.252035][ T9550] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 155.265370][ T9550] CPU: 0 UID: 0 PID: 9550 Comm: syz.9.1626 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 155.265395][ T9550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.265405][ T9550] Call Trace: [ 155.265411][ T9550] [ 155.265418][ T9550] __dump_stack+0x1d/0x30 [ 155.265451][ T9550] dump_stack_lvl+0xe8/0x140 [ 155.265495][ T9550] dump_stack+0x15/0x1b [ 155.265509][ T9550] should_fail_ex+0x265/0x280 [ 155.265541][ T9550] should_fail_alloc_page+0xf2/0x100 [ 155.265619][ T9550] __alloc_frozen_pages_noprof+0xff/0x360 [ 155.265649][ T9550] alloc_pages_mpol+0xb3/0x250 [ 155.265697][ T9550] vma_alloc_folio_noprof+0x1aa/0x300 [ 155.265722][ T9550] handle_mm_fault+0xec2/0x2be0 [ 155.265738][ T9550] ? __rcu_read_unlock+0x4f/0x70 [ 155.265834][ T9550] do_user_addr_fault+0x3fe/0x1090 [ 155.265861][ T9550] ? __rcu_read_unlock+0x4f/0x70 [ 155.265880][ T9550] exc_page_fault+0x62/0xa0 [ 155.265904][ T9550] asm_exc_page_fault+0x26/0x30 [ 155.265920][ T9550] RIP: 0010:__put_user_4+0xd/0x20 [ 155.265998][ T9550] Code: 66 89 01 31 c9 0f 01 ca e9 d0 7d 01 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 155.266013][ T9550] RSP: 0018:ffffc9000473be78 EFLAGS: 00050206 [ 155.266026][ T9550] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000000 [ 155.266036][ T9550] RDX: ffff88810285e180 RSI: 0000000000000005 RDI: 0000000000000000 [ 155.266046][ T9550] RBP: 0000000000000004 R08: 0001ffff86848aff R09: 0000000000000000 [ 155.266056][ T9550] R10: 0001888117a16560 R11: 0001888117a16567 R12: 0000200000000000 [ 155.266117][ T9550] R13: 0000000000000000 R14: 0000000000000018 R15: 0000000000000000 [ 155.266132][ T9550] __sys_socketpair+0xa6/0x430 [ 155.266154][ T9550] ? ksys_write+0x192/0x1a0 [ 155.266179][ T9550] __x64_sys_socketpair+0x52/0x60 [ 155.266200][ T9550] x64_sys_call+0x23f2/0x2fb0 [ 155.266266][ T9550] do_syscall_64+0xd2/0x200 [ 155.266280][ T9550] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 155.266300][ T9550] ? clear_bhb_loop+0x40/0x90 [ 155.266317][ T9550] ? clear_bhb_loop+0x40/0x90 [ 155.266335][ T9550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.266384][ T9550] RIP: 0033:0x7fbffe88e929 [ 155.266424][ T9550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.266443][ T9550] RSP: 002b:00007fbffcef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 155.266460][ T9550] RAX: ffffffffffffffda RBX: 00007fbffeab5fa0 RCX: 00007fbffe88e929 [ 155.266472][ T9550] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000018 [ 155.266481][ T9550] RBP: 00007fbffcef7090 R08: 0000000000000000 R09: 0000000000000000 [ 155.266566][ T9550] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.266576][ T9550] R13: 0000000000000001 R14: 00007fbffeab5fa0 R15: 00007fff12d85fd8 [ 155.266591][ T9550] [ 155.566601][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 155.566632][ T29] audit: type=1326 audit(155.580:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.1.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267825e929 code=0x7fc00000 [ 155.627020][ T9554] loop7: detected capacity change from 0 to 512 [ 155.641710][ T9554] EXT4-fs: Ignoring removed orlov option [ 155.648664][ T29] audit: type=1326 audit(155.640:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.7.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65e95e929 code=0x7ffc0000 [ 155.671559][ T29] audit: type=1326 audit(155.640:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.7.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65e95e929 code=0x7ffc0000 [ 155.694542][ T29] audit: type=1326 audit(155.640:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.7.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa65e95e929 code=0x7ffc0000 [ 155.695266][ T9567] netlink: 'syz.3.1630': attribute type 1 has an invalid length. [ 155.717442][ T29] audit: type=1326 audit(155.640:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.7.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65e95e929 code=0x7ffc0000 [ 155.725180][ T9567] __nla_validate_parse: 8 callbacks suppressed [ 155.725192][ T9567] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1630'. [ 155.747960][ T29] audit: type=1326 audit(155.640:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.7.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65e95e929 code=0x7ffc0000 [ 155.766984][ T9554] EXT4-fs: dax option not supported [ 155.785946][ T29] audit: type=1326 audit(155.640:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.7.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa65e95e929 code=0x7ffc0000 [ 155.785975][ T29] audit: type=1326 audit(155.640:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.7.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65e95e929 code=0x7ffc0000 [ 155.828802][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1632'. [ 155.836825][ T29] audit: type=1326 audit(155.640:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.7.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65e95e929 code=0x7ffc0000 [ 155.836883][ T29] audit: type=1326 audit(155.640:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.7.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa65e95e929 code=0x7ffc0000 [ 155.849570][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'. [ 157.269556][ T9724] loop3: detected capacity change from 0 to 512 [ 157.312534][ T9724] EXT4-fs: Ignoring removed orlov option [ 157.348028][ T9724] EXT4-fs: dax option not supported [ 157.410145][ T9726] xt_TPROXY: Can be used only with -p tcp or -p udp [ 157.430824][ T9726] lo speed is unknown, defaulting to 1000 [ 157.445236][ T9726] lo speed is unknown, defaulting to 1000 [ 157.452228][ T9726] lo speed is unknown, defaulting to 1000 [ 157.460125][ T9726] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 157.471428][ T9726] lo speed is unknown, defaulting to 1000 [ 157.488874][ T9726] lo speed is unknown, defaulting to 1000 [ 157.495289][ T9726] lo speed is unknown, defaulting to 1000 [ 157.502640][ T9726] lo speed is unknown, defaulting to 1000 [ 157.510131][ T9726] lo speed is unknown, defaulting to 1000 [ 157.518296][ T9726] lo speed is unknown, defaulting to 1000 [ 157.524426][ T9726] lo speed is unknown, defaulting to 1000 [ 157.530821][ T9731] loop7: detected capacity change from 0 to 512 [ 157.551176][ T9731] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.726822][ T9747] bridge_slave_1: left allmulticast mode [ 157.732550][ T9747] bridge_slave_1: left promiscuous mode [ 157.732714][ T9745] loop8: detected capacity change from 0 to 512 [ 157.738255][ T9747] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.752193][ T9745] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.761430][ T9747] bridge_slave_0: left allmulticast mode [ 157.767299][ T9747] bridge_slave_0: left promiscuous mode [ 157.768153][ T9745] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.773059][ T9747] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.803997][ T9751] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 157.835529][ T9745] lo speed is unknown, defaulting to 1000 [ 157.904854][ T9745] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1654'. [ 157.914512][ T9745] netlink: 'syz.8.1654': attribute type 4 has an invalid length. [ 157.925714][ T9745] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.1654: corrupted xattr block 19: overlapping e_value [ 157.940814][ T9745] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 157.950654][ T9745] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.1654: corrupted xattr block 19: overlapping e_value [ 157.966059][ T9745] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 157.975525][ T9745] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.1654: corrupted xattr block 19: overlapping e_value [ 158.077324][ T8520] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.457514][ T8962] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.831111][ T9866] lo speed is unknown, defaulting to 1000 [ 159.074023][ T9867] lo speed is unknown, defaulting to 1000 [ 159.189842][ T9899] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1668'. [ 159.277866][ T9918] loop3: detected capacity change from 0 to 512 [ 159.321137][ T9918] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1669: Failed to acquire dquot type 1 [ 159.358329][ T9918] EXT4-fs (loop3): 1 truncate cleaned up [ 159.364336][ T9918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.457727][ T9921] lo speed is unknown, defaulting to 1000 [ 159.592194][ T9932] tipc: Started in network mode [ 159.597145][ T9932] tipc: Node identity 0a5ae2f51c29, cluster identity 4711 [ 159.604355][ T9932] tipc: Enabled bearer , priority 0 [ 159.622688][ T9931] tipc: Resetting bearer [ 159.642594][ T9931] tipc: Disabling bearer [ 159.817684][ T9961] FAULT_INJECTION: forcing a failure. [ 159.817684][ T9961] name failslab, interval 1, probability 0, space 0, times 0 [ 159.830485][ T9961] CPU: 0 UID: 0 PID: 9961 Comm: syz.1.1684 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 159.830570][ T9961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.830580][ T9961] Call Trace: [ 159.830586][ T9961] [ 159.830592][ T9961] __dump_stack+0x1d/0x30 [ 159.830610][ T9961] dump_stack_lvl+0xe8/0x140 [ 159.830627][ T9961] dump_stack+0x15/0x1b [ 159.830641][ T9961] should_fail_ex+0x265/0x280 [ 159.830674][ T9961] should_failslab+0x8c/0xb0 [ 159.830692][ T9961] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 159.830714][ T9961] ? shmem_alloc_inode+0x34/0x50 [ 159.830742][ T9961] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 159.830797][ T9961] shmem_alloc_inode+0x34/0x50 [ 159.830823][ T9961] alloc_inode+0x3d/0x170 [ 159.830868][ T9961] new_inode+0x1d/0xe0 [ 159.830883][ T9961] shmem_get_inode+0x244/0x750 [ 159.830984][ T9961] __shmem_file_setup+0x113/0x210 [ 159.831008][ T9961] shmem_file_setup+0x3b/0x50 [ 159.831078][ T9961] __se_sys_memfd_create+0x2c3/0x590 [ 159.831104][ T9961] __x64_sys_memfd_create+0x31/0x40 [ 159.831209][ T9961] x64_sys_call+0x122f/0x2fb0 [ 159.831226][ T9961] do_syscall_64+0xd2/0x200 [ 159.831241][ T9961] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 159.831263][ T9961] ? clear_bhb_loop+0x40/0x90 [ 159.831282][ T9961] ? clear_bhb_loop+0x40/0x90 [ 159.831299][ T9961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.831317][ T9961] RIP: 0033:0x7f267825e929 [ 159.831336][ T9961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.831410][ T9961] RSP: 002b:00007f26768c6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 159.831426][ T9961] RAX: ffffffffffffffda RBX: 0000000000000544 RCX: 00007f267825e929 [ 159.831437][ T9961] RDX: 00007f26768c6ef0 RSI: 0000000000000000 RDI: 00007f26782e14cc [ 159.831447][ T9961] RBP: 0000200000001000 R08: 00007f26768c6bb7 R09: 00007f26768c6e40 [ 159.831518][ T9961] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000540 [ 159.831528][ T9961] R13: 00007f26768c6ef0 R14: 00007f26768c6eb0 R15: 0000200000000140 [ 159.831550][ T9961] [ 159.968152][ T9967] tipc: Enabled bearer , priority 0 [ 159.968847][ T9966] tipc: Resetting bearer [ 159.976120][ T9966] tipc: Disabling bearer [ 160.128927][ T8822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.193712][ T9984] FAULT_INJECTION: forcing a failure. [ 160.193712][ T9984] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 160.207414][ T9984] CPU: 0 UID: 0 PID: 9984 Comm: syz.8.1693 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 160.207439][ T9984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.207449][ T9984] Call Trace: [ 160.207454][ T9984] [ 160.207460][ T9984] __dump_stack+0x1d/0x30 [ 160.207481][ T9984] dump_stack_lvl+0xe8/0x140 [ 160.207499][ T9984] dump_stack+0x15/0x1b [ 160.207593][ T9984] should_fail_ex+0x265/0x280 [ 160.207621][ T9984] should_fail_alloc_page+0xf2/0x100 [ 160.207644][ T9984] __alloc_frozen_pages_noprof+0xff/0x360 [ 160.207711][ T9984] alloc_pages_mpol+0xb3/0x250 [ 160.207736][ T9984] vma_alloc_folio_noprof+0x1aa/0x300 [ 160.207872][ T9984] handle_mm_fault+0xec2/0x2be0 [ 160.207892][ T9984] ? __rcu_read_unlock+0x4f/0x70 [ 160.207923][ T9984] do_user_addr_fault+0x3fe/0x1090 [ 160.207964][ T9984] exc_page_fault+0x62/0xa0 [ 160.207993][ T9984] asm_exc_page_fault+0x26/0x30 [ 160.208013][ T9984] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 160.208038][ T9984] Code: c9 75 f6 e9 02 ff 01 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 160.208130][ T9984] RSP: 0018:ffffc9000472fd98 EFLAGS: 00050246 [ 160.208145][ T9984] RAX: 0000000000000000 RBX: 0000000000005000 RCX: 0000000000000040 [ 160.208158][ T9984] RDX: 0000000000000000 RSI: 0000200000005040 RDI: 0000200000006000 [ 160.208170][ T9984] RBP: 0000200000005040 R08: 0001ffff858ac9bf R09: 0000000000000000 [ 160.208183][ T9984] R10: 0000000000000000 R11: ffffffff821e7010 R12: 0000000000001000 [ 160.208196][ T9984] R13: 00007ffffffff000 R14: 000000007fffa000 R15: 0000000000000000 [ 160.208210][ T9984] ? __pfx_read_zero+0x10/0x10 [ 160.208247][ T9984] read_zero+0x77/0x160 [ 160.208277][ T9984] ? __pfx_read_zero+0x10/0x10 [ 160.208347][ T9984] vfs_read+0x19d/0x6f0 [ 160.208374][ T9984] ? __rcu_read_unlock+0x4f/0x70 [ 160.208395][ T9984] ? __fget_files+0x184/0x1c0 [ 160.208416][ T9984] ksys_read+0xda/0x1a0 [ 160.208525][ T9984] __x64_sys_read+0x40/0x50 [ 160.208556][ T9984] x64_sys_call+0x2d77/0x2fb0 [ 160.208597][ T9984] do_syscall_64+0xd2/0x200 [ 160.208615][ T9984] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 160.208642][ T9984] ? clear_bhb_loop+0x40/0x90 [ 160.208663][ T9984] ? clear_bhb_loop+0x40/0x90 [ 160.208686][ T9984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.208765][ T9984] RIP: 0033:0x7f6bd40fe929 [ 160.208780][ T9984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.208798][ T9984] RSP: 002b:00007f6bd2767038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.208816][ T9984] RAX: ffffffffffffffda RBX: 00007f6bd4325fa0 RCX: 00007f6bd40fe929 [ 160.208829][ T9984] RDX: 00000000ffffff96 RSI: 0000200000000040 RDI: 0000000000000003 [ 160.208842][ T9984] RBP: 00007f6bd2767090 R08: 0000000000000000 R09: 0000000000000000 [ 160.208869][ T9984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.208882][ T9984] R13: 0000000000000000 R14: 00007f6bd4325fa0 R15: 00007fffa21eb5d8 [ 160.208901][ T9984] [ 160.752996][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 160.753019][ T29] audit: type=1326 audit(160.773:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10001 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c258e929 code=0x7ffc0000 [ 160.883539][ T29] audit: type=1326 audit(160.773:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10001 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c258e929 code=0x7ffc0000 [ 160.906669][ T29] audit: type=1400 audit(160.813:2993): avc: denied { prog_load } for pid=9997 comm="syz.8.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.925477][ T29] audit: type=1400 audit(160.813:2994): avc: denied { map_create } for pid=9994 comm="syz.1.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.944330][ T29] audit: type=1400 audit(160.813:2995): avc: denied { perfmon } for pid=9994 comm="syz.1.1696" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.964868][ T29] audit: type=1400 audit(160.813:2996): avc: denied { bpf } for pid=9997 comm="syz.8.1698" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.984804][ T29] audit: type=1400 audit(160.813:2997): avc: denied { map_read map_write } for pid=9994 comm="syz.1.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 161.004228][ T29] audit: type=1400 audit(160.813:2998): avc: denied { perfmon } for pid=9997 comm="syz.8.1698" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 161.024538][ T29] audit: type=1400 audit(160.813:2999): avc: denied { prog_run } for pid=9997 comm="syz.8.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 161.043037][ T29] audit: type=1400 audit(160.813:3000): avc: denied { mounton } for pid=9997 comm="syz.8.1698" path="/78/file0" dev="tmpfs" ino=428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 161.090547][T10016] loop3: detected capacity change from 0 to 512 [ 161.104352][T10016] EXT4-fs: Ignoring removed orlov option [ 161.114290][T10016] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.144632][T10016] EXT4-fs error (device loop3): ext4_init_orphan_info:585: comm syz.3.1704: inode #0: comm syz.3.1704: iget: illegal inode # [ 161.160540][T10016] EXT4-fs (loop3): Remounting filesystem read-only [ 161.167384][T10016] EXT4-fs (loop3): get orphan inode failed [ 161.205086][T10016] EXT4-fs (loop3): mount failed [ 161.297271][T10029] tipc: Enabled bearer , priority 0 [ 161.305066][T10028] tipc: Resetting bearer [ 161.319059][T10028] tipc: Disabling bearer [ 161.414055][T10039] loop8: detected capacity change from 0 to 512 [ 161.428748][T10039] EXT4-fs: Ignoring removed orlov option [ 161.437245][T10039] EXT4-fs: dax option not supported [ 161.681023][T10068] tipc: Enabled bearer , priority 0 [ 161.688723][T10067] tipc: Resetting bearer [ 161.701403][T10067] tipc: Disabling bearer [ 161.779298][T10078] loop7: detected capacity change from 0 to 512 [ 161.786323][T10078] EXT4-fs: Ignoring removed orlov option [ 161.792201][T10078] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.831310][T10078] EXT4-fs error (device loop7): ext4_init_orphan_info:585: comm syz.7.1729: inode #0: comm syz.7.1729: iget: illegal inode # [ 161.847194][T10078] EXT4-fs (loop7): Remounting filesystem read-only [ 161.853810][T10078] EXT4-fs (loop7): get orphan inode failed [ 161.859986][T10078] EXT4-fs (loop7): mount failed [ 162.003730][T10090] loop7: detected capacity change from 0 to 512 [ 162.016391][T10092] loop9: detected capacity change from 0 to 1024 [ 162.029738][T10090] EXT4-fs: Ignoring removed orlov option [ 162.044713][T10090] EXT4-fs: dax option not supported [ 162.064991][T10092] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.141901][ T8607] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.179255][T10105] tipc: Enabled bearer , priority 0 [ 162.186967][T10104] tipc: Resetting bearer [ 162.202366][T10104] tipc: Disabling bearer [ 162.288303][T10111] bridge0: port 3(batadv1) entered blocking state [ 162.294957][T10111] bridge0: port 3(batadv1) entered disabled state [ 162.309052][T10111] batadv1: entered allmulticast mode [ 162.323107][T10111] batadv1: entered promiscuous mode [ 162.354333][T10113] tipc: Started in network mode [ 162.359292][T10113] tipc: Node identity 4e2b30817d9f, cluster identity 4711 [ 162.366533][T10113] tipc: Enabled bearer , priority 0 [ 162.374917][T10112] tipc: Resetting bearer [ 162.389126][T10112] tipc: Disabling bearer [ 162.405310][T10111] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1741'. [ 162.414751][T10107] loop9: detected capacity change from 0 to 8192 [ 162.432229][T10111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.439746][T10111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.468607][T10111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.476234][T10111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.550332][T10120] lo speed is unknown, defaulting to 1000 [ 162.631000][T10125] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 162.637545][T10125] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 162.645025][T10125] vhci_hcd vhci_hcd.0: Device attached [ 162.658606][T10125] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 162.723882][T10131] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 162.726087][T10134] loop8: detected capacity change from 0 to 512 [ 162.730518][T10131] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 162.730604][T10131] vhci_hcd vhci_hcd.0: Device attached [ 162.747391][T10134] EXT4-fs: Ignoring removed orlov option [ 162.762472][T10134] EXT4-fs: dax option not supported [ 162.792845][ T5329] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 162.802140][ T5329] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 162.822486][T10125] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(13) [ 162.829108][T10125] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 162.836951][T10125] vhci_hcd vhci_hcd.0: Device attached [ 162.842786][ T3418] vhci_hcd: vhci_device speed not set [ 162.851781][T10131] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(16) [ 162.858476][T10131] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 162.866181][T10131] vhci_hcd vhci_hcd.0: Device attached [ 162.890111][T10148] tipc: Enabled bearer , priority 0 [ 162.897747][T10147] tipc: Resetting bearer [ 162.909990][T10147] tipc: Disabling bearer [ 162.913900][ T3418] usb 7-1: new full-speed USB device number 3 using vhci_hcd [ 162.924310][T10125] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(21) [ 162.931146][T10125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.938879][T10125] vhci_hcd vhci_hcd.0: Device attached [ 162.948121][T10125] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 162.959466][T10149] macvlan1: entered promiscuous mode [ 162.966921][T10139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.978132][T10139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.981100][T10145] vhci_hcd: connection closed [ 162.986070][T10150] vhci_hcd: connection closed [ 162.991150][T10132] vhci_hcd: connection closed [ 162.992976][T10149] ipvlan0: entered promiscuous mode [ 163.007567][T10149] ipvlan0: left promiscuous mode [ 163.014940][T10149] macvlan1: left promiscuous mode [ 163.016042][ T164] vhci_hcd: stop threads [ 163.024306][ T164] vhci_hcd: release socket [ 163.026238][T10141] vhci_hcd: connection closed [ 163.028765][ T164] vhci_hcd: disconnect device [ 163.029750][T10126] vhci_hcd: connection reset by peer [ 163.046146][ T164] vhci_hcd: stop threads [ 163.050530][ T164] vhci_hcd: release socket [ 163.055178][ T164] vhci_hcd: disconnect device [ 163.173921][ T164] vhci_hcd: stop threads [ 163.178268][ T164] vhci_hcd: release socket [ 163.182880][ T164] vhci_hcd: disconnect device [ 163.188270][ T164] vhci_hcd: stop threads [ 163.192763][ T164] vhci_hcd: release socket [ 163.197358][ T164] vhci_hcd: disconnect device [ 163.203323][ T164] vhci_hcd: stop threads [ 163.207701][ T164] vhci_hcd: release socket [ 163.212279][ T164] vhci_hcd: disconnect device [ 163.353491][T10159] netlink: 'syz.8.1755': attribute type 2 has an invalid length. [ 163.362537][T10159] netlink: 192 bytes leftover after parsing attributes in process `syz.8.1755'. [ 163.374589][T10159] netlink: 'syz.8.1755': attribute type 1 has an invalid length. [ 163.407188][T10159] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 163.416131][T10159] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 163.425032][T10159] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 163.433898][T10159] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 163.445291][T10159] bond1: (slave geneve2): making interface the new active one [ 163.453510][T10159] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 163.481782][T10161] lo speed is unknown, defaulting to 1000 [ 163.639458][T10175] netlink: 'syz.3.1758': attribute type 1 has an invalid length. [ 163.647281][T10175] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1758'. [ 164.015017][T10215] tipc: Enabled bearer , priority 0 [ 164.023166][T10214] tipc: Resetting bearer [ 164.038540][T10214] tipc: Disabling bearer [ 164.052629][T10204] vlan2: entered allmulticast mode [ 164.107496][T10226] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 164.116647][T10226] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 164.125673][T10226] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 164.134665][T10226] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 164.361522][T10250] loop9: detected capacity change from 0 to 512 [ 164.369205][T10250] EXT4-fs: Ignoring removed orlov option [ 164.377885][T10250] EXT4-fs: dax option not supported [ 164.507974][T10268] loop8: detected capacity change from 0 to 1024 [ 164.535134][T10268] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.575231][T10268] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 164.612868][T10268] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1772: bg 0: block 393: padding at end of block bitmap is not set [ 164.658916][ T8520] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.736516][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1776'. [ 164.774651][T10298] loop9: detected capacity change from 0 to 1024 [ 164.788227][T10298] EXT4-fs: Ignoring removed nobh option [ 164.806212][T10298] ext4: Unknown parameter 'func' [ 165.142611][T10331] SELinux: syz.1.1778 (10331) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 165.560100][T10363] netlink: 'syz.1.1783': attribute type 13 has an invalid length. [ 165.573072][T10363] gretap0: refused to change device tx_queue_len [ 165.579706][T10363] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 165.607173][T10363] lo speed is unknown, defaulting to 1000 [ 165.649063][T10365] tipc: Enabled bearer , priority 0 [ 165.658925][T10364] tipc: Resetting bearer [ 165.671951][T10364] tipc: Disabling bearer [ 165.770398][ T29] kauditd_printk_skb: 478 callbacks suppressed [ 165.770412][ T29] audit: type=1400 audit(165.795:3477): avc: denied { create } for pid=10362 comm="syz.1.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 165.796552][ T29] audit: type=1400 audit(165.795:3478): avc: denied { write } for pid=10362 comm="syz.1.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 165.823035][T10378] vlan2: entered allmulticast mode [ 165.828196][T10378] bond0: entered allmulticast mode [ 165.833371][T10378] bond_slave_0: entered allmulticast mode [ 165.839252][T10378] bond_slave_1: entered allmulticast mode [ 165.889969][ T29] audit: type=1400 audit(165.915:3479): avc: denied { mount } for pid=10391 comm="syz.1.1792" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 165.935453][ T29] audit: type=1326 audit(165.965:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267825e929 code=0x7ffc0000 [ 165.961067][T10398] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 165.968836][T10398] audit: out of memory in audit_log_start [ 165.982442][ T29] audit: type=1326 audit(165.995:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f267825e929 code=0x7ffc0000 [ 166.005419][ T29] audit: type=1326 audit(165.995:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267825e929 code=0x7ffc0000 [ 166.028457][ T29] audit: type=1326 audit(165.995:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f267825e929 code=0x7ffc0000 [ 166.051722][ T29] audit: type=1326 audit(165.995:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267825e929 code=0x7ffc0000 [ 166.432800][T10422] netlink: 'syz.9.1800': attribute type 1 has an invalid length. [ 166.440600][T10422] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1800'. [ 166.489740][T10425] FAULT_INJECTION: forcing a failure. [ 166.489740][T10425] name failslab, interval 1, probability 0, space 0, times 0 [ 166.502551][T10425] CPU: 1 UID: 0 PID: 10425 Comm: syz.3.1802 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 166.502652][T10425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.502670][T10425] Call Trace: [ 166.502677][T10425] [ 166.502684][T10425] __dump_stack+0x1d/0x30 [ 166.502703][T10425] dump_stack_lvl+0xe8/0x140 [ 166.502720][T10425] dump_stack+0x15/0x1b [ 166.502797][T10425] should_fail_ex+0x265/0x280 [ 166.502823][T10425] should_failslab+0x8c/0xb0 [ 166.502864][T10425] kmem_cache_alloc_noprof+0x50/0x310 [ 166.502890][T10425] ? getname_flags+0x80/0x3b0 [ 166.502922][T10425] getname_flags+0x80/0x3b0 [ 166.502943][T10425] do_sys_openat2+0x60/0x110 [ 166.502985][T10425] __x64_sys_openat+0xf2/0x120 [ 166.503011][T10425] x64_sys_call+0x1af/0x2fb0 [ 166.503035][T10425] do_syscall_64+0xd2/0x200 [ 166.503125][T10425] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 166.503153][T10425] ? clear_bhb_loop+0x40/0x90 [ 166.503176][T10425] ? clear_bhb_loop+0x40/0x90 [ 166.503198][T10425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.503218][T10425] RIP: 0033:0x7fb0c258e929 [ 166.503231][T10425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.503252][T10425] RSP: 002b:00007fb0c0bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 166.503272][T10425] RAX: ffffffffffffffda RBX: 00007fb0c27b5fa0 RCX: 00007fb0c258e929 [ 166.503282][T10425] RDX: 00000000000c2d41 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 166.503293][T10425] RBP: 00007fb0c0bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 166.503303][T10425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.503315][T10425] R13: 0000000000000000 R14: 00007fb0c27b5fa0 R15: 00007fff919829e8 [ 166.503335][T10425] [ 167.566389][T10513] loop7: detected capacity change from 0 to 512 [ 167.574535][T10513] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 167.900881][T10513] EXT4-fs (loop7): 1 truncate cleaned up [ 167.907534][T10513] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.045680][ T3418] usb 7-1: enqueue for inactive port 0 [ 168.053535][ T3418] usb 7-1: enqueue for inactive port 0 [ 168.134913][ T3418] vhci_hcd: vhci_device speed not set [ 168.241829][T10542] macvlan1: entered promiscuous mode [ 168.255937][T10542] ipvlan0: entered promiscuous mode [ 168.263829][T10542] ipvlan0: left promiscuous mode [ 168.264216][T10542] macvlan1: left promiscuous mode [ 168.324181][T10549] loop3: detected capacity change from 0 to 512 [ 168.362544][T10549] ext4: Unknown parameter 'noacl' [ 168.382713][T10560] netlink: 'syz.1.1830': attribute type 10 has an invalid length. [ 168.395439][T10560] team0: Port device dummy0 added [ 168.421136][T10560] netlink: 'syz.1.1830': attribute type 10 has an invalid length. [ 168.431433][T10560] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 168.441791][ T8962] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.464432][T10560] team0: Failed to send options change via netlink (err -105) [ 168.490463][T10568] FAULT_INJECTION: forcing a failure. [ 168.490463][T10568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.490688][T10560] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 168.503744][T10568] CPU: 1 UID: 0 PID: 10568 Comm: syz.7.1831 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 168.503781][T10568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.503793][T10568] Call Trace: [ 168.503800][T10568] [ 168.503809][T10568] __dump_stack+0x1d/0x30 [ 168.503830][T10568] dump_stack_lvl+0xe8/0x140 [ 168.503875][T10568] dump_stack+0x15/0x1b [ 168.503889][T10568] should_fail_ex+0x265/0x280 [ 168.503937][T10568] should_fail+0xb/0x20 [ 168.504035][T10568] should_fail_usercopy+0x1a/0x20 [ 168.504066][T10568] _copy_to_user+0x20/0xa0 [ 168.504085][T10568] snd_seq_ioctl+0x223/0x2e0 [ 168.504114][T10568] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 168.504183][T10568] __se_sys_ioctl+0xcb/0x140 [ 168.504217][T10568] __x64_sys_ioctl+0x43/0x50 [ 168.504242][T10568] x64_sys_call+0x19a8/0x2fb0 [ 168.504284][T10568] do_syscall_64+0xd2/0x200 [ 168.504309][T10568] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 168.504368][T10568] ? clear_bhb_loop+0x40/0x90 [ 168.504401][T10568] ? clear_bhb_loop+0x40/0x90 [ 168.504423][T10568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.504485][T10568] RIP: 0033:0x7fa65e95e929 [ 168.504582][T10568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.504602][T10568] RSP: 002b:00007fa65cfc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.504634][T10568] RAX: ffffffffffffffda RBX: 00007fa65eb85fa0 RCX: 00007fa65e95e929 [ 168.504647][T10568] RDX: 0000200000000040 RSI: 00000000c08c5332 RDI: 0000000000000003 [ 168.504659][T10568] RBP: 00007fa65cfc7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.504706][T10568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.504731][T10568] R13: 0000000000000000 R14: 00007fa65eb85fa0 R15: 00007fffecf3ffc8 [ 168.504749][T10568] [ 168.720083][T10560] team0: Port device dummy0 removed [ 168.727133][T10560] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 168.776360][T10586] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1834'. [ 168.930113][T10606] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1839'. [ 169.101615][T10598] lo speed is unknown, defaulting to 1000 [ 169.229504][T10615] lo speed is unknown, defaulting to 1000 [ 169.725412][T10667] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 169.732148][T10667] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 169.739750][T10667] vhci_hcd vhci_hcd.0: Device attached [ 169.887036][T10667] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 169.895876][T10674] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1847'. [ 169.905126][T10667] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(13) [ 169.911885][T10667] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 169.919539][T10667] vhci_hcd vhci_hcd.0: Device attached [ 169.976143][T10680] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15) [ 169.982830][T10680] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 169.990637][T10680] vhci_hcd vhci_hcd.0: Device attached [ 169.996236][ T3418] usb 3-1: new low-speed USB device number 5 using vhci_hcd [ 170.038964][T10667] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(17) [ 170.045636][T10667] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 170.053401][T10667] vhci_hcd vhci_hcd.0: Device attached [ 170.085024][T10667] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(21) [ 170.091747][T10667] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.099340][T10667] vhci_hcd vhci_hcd.0: Device attached [ 170.101688][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1850'. [ 170.128597][T10667] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 170.139277][T10692] loop9: detected capacity change from 0 to 512 [ 170.152680][T10681] vhci_hcd: connection closed [ 170.152839][T10688] vhci_hcd: connection closed [ 170.152874][T10670] vhci_hcd: connection reset by peer [ 170.157767][T10675] vhci_hcd: connection closed [ 170.168197][T10683] vhci_hcd: connection closed [ 170.180600][T10692] EXT4-fs: Ignoring removed i_version option [ 170.219052][ T5323] vhci_hcd: stop threads [ 170.223365][ T5323] vhci_hcd: release socket [ 170.227792][ T5323] vhci_hcd: disconnect device [ 170.234530][ T5323] vhci_hcd: stop threads [ 170.238787][ T5323] vhci_hcd: release socket [ 170.243281][ T5323] vhci_hcd: disconnect device [ 170.248313][T10692] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.320116][ T5323] vhci_hcd: stop threads [ 170.324562][ T5323] vhci_hcd: release socket [ 170.328996][ T5323] vhci_hcd: disconnect device [ 170.345078][T10692] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 170.369087][ T5323] vhci_hcd: stop threads [ 170.373425][ T5323] vhci_hcd: release socket [ 170.377857][ T5323] vhci_hcd: disconnect device [ 170.409542][T10692] EXT4-fs (loop9): 1 truncate cleaned up [ 170.425624][ T5323] vhci_hcd: stop threads [ 170.429967][ T5323] vhci_hcd: release socket [ 170.434397][ T5323] vhci_hcd: disconnect device [ 170.441433][T10692] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.480377][T10704] lo speed is unknown, defaulting to 1000 [ 170.599031][T10717] FAULT_INJECTION: forcing a failure. [ 170.599031][T10717] name failslab, interval 1, probability 0, space 0, times 0 [ 170.611815][T10717] CPU: 0 UID: 0 PID: 10717 Comm: syz.8.1858 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 170.611844][T10717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.611857][T10717] Call Trace: [ 170.611932][T10717] [ 170.611939][T10717] __dump_stack+0x1d/0x30 [ 170.611957][T10717] dump_stack_lvl+0xe8/0x140 [ 170.611986][T10717] dump_stack+0x15/0x1b [ 170.612001][T10717] should_fail_ex+0x265/0x280 [ 170.612029][T10717] ? nf_tables_newtable+0x375/0xea0 [ 170.612056][T10717] should_failslab+0x8c/0xb0 [ 170.612177][T10717] __kmalloc_cache_noprof+0x4c/0x320 [ 170.612206][T10717] nf_tables_newtable+0x375/0xea0 [ 170.612254][T10717] nfnetlink_rcv+0xb96/0x1690 [ 170.612362][T10717] netlink_unicast+0x5a5/0x680 [ 170.612388][T10717] netlink_sendmsg+0x58b/0x6b0 [ 170.612409][T10717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.612425][T10717] __sock_sendmsg+0x145/0x180 [ 170.612486][T10717] ____sys_sendmsg+0x31e/0x4e0 [ 170.612529][T10717] ___sys_sendmsg+0x17b/0x1d0 [ 170.612569][T10717] __x64_sys_sendmsg+0xd4/0x160 [ 170.612657][T10717] x64_sys_call+0x2999/0x2fb0 [ 170.612680][T10717] do_syscall_64+0xd2/0x200 [ 170.612741][T10717] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 170.612768][T10717] ? clear_bhb_loop+0x40/0x90 [ 170.612869][T10717] ? clear_bhb_loop+0x40/0x90 [ 170.612892][T10717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.612980][T10717] RIP: 0033:0x7f6bd40fe929 [ 170.612993][T10717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.613008][T10717] RSP: 002b:00007f6bd2767038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.613024][T10717] RAX: ffffffffffffffda RBX: 00007f6bd4325fa0 RCX: 00007f6bd40fe929 [ 170.613036][T10717] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 170.613060][T10717] RBP: 00007f6bd2767090 R08: 0000000000000000 R09: 0000000000000000 [ 170.613073][T10717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.613092][T10717] R13: 0000000000000000 R14: 00007f6bd4325fa0 R15: 00007fffa21eb5d8 [ 170.613108][T10717] [ 170.832609][ T3405] usb usb8-port1: attempt power cycle [ 170.849039][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 170.849052][ T29] audit: type=1400 audit(170.888:3639): avc: denied { unmount } for pid=8607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 170.883446][ T8607] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.939286][ T29] audit: type=1400 audit(170.968:3640): avc: denied { wake_alarm } for pid=10723 comm="syz.1.1862" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 170.981086][ T29] audit: type=1400 audit(170.998:3641): avc: denied { ioctl } for pid=10706 comm="syz.7.1856" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 170.989764][T10725] lo speed is unknown, defaulting to 1000 [ 171.162509][ T29] audit: type=1400 audit(171.068:3642): avc: denied { write } for pid=10728 comm="syz.3.1863" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 171.185455][ T29] audit: type=1400 audit(171.068:3643): avc: denied { open } for pid=10728 comm="syz.3.1863" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 171.287139][ T29] audit: type=1400 audit(171.318:3644): avc: denied { setopt } for pid=10735 comm="syz.3.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.323188][T10741] loop3: detected capacity change from 0 to 512 [ 171.339329][T10741] ext4: Unknown parameter 'noacl' [ 171.352420][ T29] audit: type=1400 audit(171.348:3645): avc: denied { create } for pid=10742 comm="syz.8.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 171.372343][ T29] audit: type=1400 audit(171.348:3646): avc: denied { write } for pid=10742 comm="syz.8.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 171.392070][ T29] audit: type=1400 audit(171.348:3647): avc: denied { create } for pid=10742 comm="syz.8.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 171.411309][ T29] audit: type=1400 audit(171.358:3648): avc: denied { create } for pid=10735 comm="syz.3.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 171.459731][T10749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1870'. [ 171.848164][T10759] lo speed is unknown, defaulting to 1000 [ 171.861400][T10779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1882'. [ 172.042405][T10780] loop3: detected capacity change from 0 to 512 [ 172.058314][T10780] ext4: Unknown parameter 'noacl' [ 173.362261][T10812] loop9: detected capacity change from 0 to 2048 [ 173.378738][T10821] xt_hashlimit: size too large, truncated to 1048576 [ 173.429105][T10822] loop1: detected capacity change from 0 to 512 [ 173.445804][T10822] ext4: Unknown parameter 'noacl' [ 173.459118][T10812] Alternate GPT is invalid, using primary GPT. [ 173.465996][T10812] loop9: p1 p2 p3 [ 173.474156][T10824] x_tables: duplicate underflow at hook 2 [ 173.517694][ T3405] usb usb8-port1: unable to enumerate USB device [ 173.571269][T10829] lo speed is unknown, defaulting to 1000 [ 173.683042][T10829] loop8: detected capacity change from 0 to 164 [ 173.786340][T10829] Unable to read rock-ridge attributes [ 173.819945][T10829] Unable to read rock-ridge attributes [ 173.829227][T10826] Restarting kernel threads ... [ 173.834497][T10826] Done restarting kernel threads. [ 173.940888][T10836] Unable to read rock-ridge attributes [ 174.080471][T10836] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 174.088659][T10837] SELinux: syz.8.1900 (10837) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 174.113152][T10843] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1903'. [ 174.236585][T10849] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.243949][T10849] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.374934][T10849] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.383962][T10849] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.393111][T10849] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.402207][T10849] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.476159][T10857] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1910'. [ 174.552187][T10861] netlink: 'syz.7.1912': attribute type 7 has an invalid length. [ 174.576077][T10861] pim6reg: entered allmulticast mode [ 174.654306][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1915'. [ 174.756948][T10871] tipc: Enabled bearer , priority 0 [ 174.773629][T10870] tipc: Resetting bearer [ 174.798630][T10870] tipc: Disabling bearer [ 174.992297][T10874] netlink: 'syz.8.1918': attribute type 13 has an invalid length. [ 175.076698][ T3418] usb 3-1: enqueue for inactive port 0 [ 175.083760][ T3418] usb 3-1: enqueue for inactive port 0 [ 175.156734][ T3418] vhci_hcd: vhci_device speed not set [ 175.691095][T10896] tipc: Started in network mode [ 175.696008][T10896] tipc: Node identity 1252e087e406, cluster identity 4711 [ 175.703280][T10896] tipc: Enabled bearer , priority 0 [ 175.712085][T10894] tipc: Resetting bearer [ 175.753592][T10894] tipc: Disabling bearer [ 175.804709][T10907] netlink: 'syz.8.1929': attribute type 1 has an invalid length. [ 175.812524][T10907] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1929'. [ 175.970220][T10918] tipc: Enabled bearer , priority 0 [ 175.998815][T10916] tipc: Resetting bearer [ 176.103764][T10916] tipc: Disabling bearer [ 176.258607][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 176.258622][ T29] audit: type=1400 audit(176.291:3844): avc: denied { create } for pid=10917 comm="syz.1.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.300939][T10957] loop7: detected capacity change from 0 to 2048 [ 176.326126][ T29] audit: type=1400 audit(176.331:3845): avc: denied { create } for pid=10960 comm="syz.3.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 176.365416][ T29] audit: type=1400 audit(176.391:3846): avc: denied { bind } for pid=10917 comm="syz.1.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.384963][ T29] audit: type=1400 audit(176.391:3847): avc: denied { write } for pid=10917 comm="syz.1.1931" path="socket:[30829]" dev="sockfs" ino=30829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.408265][ T29] audit: type=1400 audit(176.391:3848): avc: denied { read } for pid=10917 comm="syz.1.1931" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 176.430776][ T29] audit: type=1400 audit(176.391:3849): avc: denied { open } for pid=10917 comm="syz.1.1931" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 176.453679][ T29] audit: type=1400 audit(176.391:3850): avc: denied { ioctl } for pid=10960 comm="syz.3.1936" path="socket:[30076]" dev="sockfs" ino=30076 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 176.477940][ T29] audit: type=1400 audit(176.391:3851): avc: denied { write } for pid=10960 comm="syz.3.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 176.498200][T10957] Alternate GPT is invalid, using primary GPT. [ 176.504599][T10957] loop7: p1 p2 p3 [ 176.565928][ T29] audit: type=1400 audit(176.591:3852): avc: denied { allowed } for pid=10970 comm="syz.7.1937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 176.646442][ T29] audit: type=1400 audit(176.651:3853): avc: denied { create } for pid=10970 comm="syz.7.1937" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 176.678417][T10972] loop7: detected capacity change from 0 to 512 [ 176.709091][T10972] ext4: Unknown parameter 'noacl' [ 176.852437][T11002] loop1: detected capacity change from 0 to 512 [ 176.864751][T11002] ext4: Unknown parameter 'noacl' [ 177.233077][T11046] random: crng reseeded on system resumption [ 177.310590][T11060] tipc: Enabled bearer , priority 0 [ 177.329465][T11059] tipc: Resetting bearer [ 177.361533][T11059] tipc: Disabling bearer [ 177.396514][T11073] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1948'. [ 177.487502][T11087] loop7: detected capacity change from 0 to 512 [ 177.494433][T11087] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 177.526005][T11087] EXT4-fs (loop7): failed to initialize system zone (-117) [ 177.551990][T11087] EXT4-fs (loop7): mount failed [ 177.559665][T11096] FAULT_INJECTION: forcing a failure. [ 177.559665][T11096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.572819][T11096] CPU: 0 UID: 0 PID: 11096 Comm: syz.3.1957 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 177.572844][T11096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.572885][T11096] Call Trace: [ 177.572931][T11096] [ 177.572939][T11096] __dump_stack+0x1d/0x30 [ 177.572959][T11096] dump_stack_lvl+0xe8/0x140 [ 177.572998][T11096] dump_stack+0x15/0x1b [ 177.573015][T11096] should_fail_ex+0x265/0x280 [ 177.573109][T11096] should_fail+0xb/0x20 [ 177.573136][T11096] should_fail_usercopy+0x1a/0x20 [ 177.573164][T11096] _copy_from_user+0x1c/0xb0 [ 177.573182][T11096] ___sys_sendmsg+0xc1/0x1d0 [ 177.573252][T11096] __x64_sys_sendmsg+0xd4/0x160 [ 177.573283][T11096] x64_sys_call+0x2999/0x2fb0 [ 177.573303][T11096] do_syscall_64+0xd2/0x200 [ 177.573319][T11096] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 177.573360][T11096] ? clear_bhb_loop+0x40/0x90 [ 177.573455][T11096] ? clear_bhb_loop+0x40/0x90 [ 177.573478][T11096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.573558][T11096] RIP: 0033:0x7fb0c258e929 [ 177.573570][T11096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.573595][T11096] RSP: 002b:00007fb0c0bf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.573612][T11096] RAX: ffffffffffffffda RBX: 00007fb0c27b5fa0 RCX: 00007fb0c258e929 [ 177.573626][T11096] RDX: 0000000004000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 177.573639][T11096] RBP: 00007fb0c0bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 177.573650][T11096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.573724][T11096] R13: 0000000000000000 R14: 00007fb0c27b5fa0 R15: 00007fff919829e8 [ 177.573743][T11096] [ 177.778536][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1959'. [ 177.787867][T11104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1961'. [ 177.898144][T11114] loop1: detected capacity change from 0 to 512 [ 177.910052][T11114] ext4: Unknown parameter 'noacl' [ 178.069134][T11133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1973'. [ 178.097372][T11138] hugetlbfs: syz.8.1975 (11138): Using mlock ulimits for SHM_HUGETLB is obsolete [ 178.113980][T11140] tipc: Enabled bearer , priority 0 [ 178.129196][T11139] tipc: Resetting bearer [ 178.144648][T11139] tipc: Disabling bearer [ 178.166422][ T3538] usb usb4-port1: attempt power cycle [ 178.182889][T11144] tipc: Enabled bearer , priority 0 [ 178.201434][T11143] tipc: Resetting bearer [ 178.222154][T11148] loop8: detected capacity change from 0 to 128 [ 178.249105][T11143] tipc: Disabling bearer [ 178.255397][T11148] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.298821][T11156] loop7: detected capacity change from 0 to 512 [ 178.325472][ T8520] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.361183][T11156] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.432883][T11163] serio: Serial port ptm0 [ 178.471192][ T8962] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.500051][T11173] loop1: detected capacity change from 0 to 1024 [ 178.538653][T11173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.545663][T11179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1988'. [ 178.617294][T11184] tipc: Enabled bearer , priority 0 [ 178.624551][T11183] tipc: Resetting bearer [ 178.635981][T11183] tipc: Disabling bearer [ 178.688067][T11173] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 178.704566][T11173] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 178.717095][T11173] EXT4-fs (loop1): This should not happen!! Data will be lost [ 178.717095][T11173] [ 178.726841][T11173] EXT4-fs (loop1): Total free blocks count 0 [ 178.732819][T11173] EXT4-fs (loop1): Free/Dirty block details [ 178.738746][T11173] EXT4-fs (loop1): free_blocks=68451041280 [ 178.744638][T11173] EXT4-fs (loop1): dirty_blocks=64 [ 178.750036][T11173] EXT4-fs (loop1): Block reservation details [ 178.756205][T11173] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 178.813149][T11186] lo speed is unknown, defaulting to 1000 [ 179.445663][ T8341] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.785992][T11216] tipc: Started in network mode [ 179.790924][T11216] tipc: Node identity d6d10003ee07, cluster identity 4711 [ 179.798221][T11216] tipc: Enabled bearer , priority 0 [ 179.817449][T11214] tipc: Resetting bearer [ 179.829829][T11214] tipc: Disabling bearer [ 180.024745][T11238] lo speed is unknown, defaulting to 1000 [ 180.204756][ T3538] usb usb4-port1: unable to enumerate USB device [ 180.994650][T11250] ================================================================== [ 181.002772][T11250] BUG: KCSAN: data-race in avc_policy_seqno / avc_ss_reset [ 181.010086][T11250] [ 181.012410][T11250] write to 0xffffffff88e97d28 of 4 bytes by task 11258 on cpu 1: [ 181.020133][T11250] avc_ss_reset+0x20c/0x240 [ 181.024653][T11250] security_set_bools+0x301/0x340 [ 181.029786][T11250] sel_commit_bools_write+0x1ea/0x270 [ 181.035174][T11250] vfs_write+0x269/0x8e0 [ 181.039420][T11250] __x64_sys_pwrite64+0xfd/0x150 [ 181.044364][T11250] x64_sys_call+0xe45/0x2fb0 [ 181.048958][T11250] do_syscall_64+0xd2/0x200 [ 181.053456][T11250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.059460][T11250] [ 181.061891][T11250] read to 0xffffffff88e97d28 of 4 bytes by task 11250 on cpu 0: [ 181.069516][T11250] avc_policy_seqno+0x15/0x30 [ 181.074233][T11250] selinux_inode_permission+0x284/0x620 [ 181.079775][T11250] security_inode_permission+0x6d/0xb0 [ 181.085245][T11250] inode_permission+0x106/0x310 [ 181.090100][T11250] link_path_walk+0x162/0x900 [ 181.094780][T11250] path_openat+0x1de/0x2170 [ 181.099294][T11250] do_filp_open+0x109/0x230 [ 181.103861][T11250] io_openat2+0x272/0x390 [ 181.108273][T11250] io_openat+0x1b/0x30 [ 181.112420][T11250] __io_issue_sqe+0xfe/0x2e0 [ 181.117015][T11250] io_issue_sqe+0x53/0x970 [ 181.121431][T11250] io_submit_sqes+0x667/0xfd0 [ 181.126110][T11250] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 181.131652][T11250] __x64_sys_io_uring_enter+0x78/0x90 [ 181.137066][T11250] x64_sys_call+0x28c8/0x2fb0 [ 181.141836][T11250] do_syscall_64+0xd2/0x200 [ 181.146332][T11250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.152219][T11250] [ 181.154530][T11250] value changed: 0x0000000b -> 0x0000000c [ 181.160233][T11250] [ 181.162543][T11250] Reported by Kernel Concurrency Sanitizer on: [ 181.168768][T11250] CPU: 0 UID: 0 PID: 11250 Comm: syz.1.2016 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 181.181267][T11250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.191342][T11250] ================================================================== [ 181.405960][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 181.405982][ T29] audit: type=1400 audit(181.443:4114): avc: denied { read write } for pid=8341 comm="syz-executor" name="loop1" dev="devtmpfs" ino=908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 181.435141][ T29] audit: type=1400 audit(181.443:4115): avc: denied { open } for pid=8341 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 181.457739][ T29] audit: type=1400 audit(181.443:4116): avc: denied { ioctl } for pid=8341 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=908 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1