last executing test programs: 39.591841323s ago: executing program 1 (id=1855): timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (fail_nth: 1) 39.526367824s ago: executing program 2 (id=1857): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010425bd7000ffdbdf25090000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in6=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@rand_addr=0x64010102, {0x0, 0x0, 0xf7}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xff7ffffd}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @XFRMA_SET_MARK_MASK={0x8}]}, 0x148}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000045f45e27638c6b1200000018110000", @ANYRES32=r4, @ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007bfb0d0000000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r8}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r10}, 0x10) close(r6) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2003, &(0x7f0000000080)) syz_emit_ethernet(0x26a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000002343a00fe8000000001000000000000000000aaff020000000000000000000000000001"], 0x0) 39.223982188s ago: executing program 1 (id=1859): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000080)={[{@i_version}, {@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0xba}}, {@nombcache}, {@discard}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x2000a804) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a600000000f040b067c55a1bc0009003e0006990600000015000500fe800000000000000300014002000c0901ac040098007f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d7f452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x835, 0x0) 39.08197106s ago: executing program 2 (id=1863): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) sendfile(r2, r3, 0x0, 0x1000000201005) 39.006466281s ago: executing program 0 (id=1866): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x740, 0x140) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) (async) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) syz_io_uring_setup(0xfbb, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10000, 0x5, 0x1a6}, &(0x7f0000000100), &(0x7f0000000080)) (async) r1 = syz_io_uring_setup(0xfbb, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10000, 0x5, 0x1a6}, &(0x7f0000000100), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000004, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 38.915258113s ago: executing program 0 (id=1867): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010425bd7000ffdbdf25090000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in6=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@rand_addr=0x64010102, {0x0, 0x0, 0xf7}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xff7ffffd}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @XFRMA_SET_MARK_MASK={0x8}]}, 0x148}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000045f45e27638c6b1200000018110000", @ANYRES32=r4, @ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007bfb0d0000000000bfa200000000000007020000f8ffffffb703000008000041df2a00b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r8}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r6) 38.783112925s ago: executing program 2 (id=1869): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) timer_create(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) unshare(0x68040200) ftruncate(r2, 0x2007ffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000d14010027bd7000fbdbdf25080001"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x40880) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@private2, {0x0, 0x1, 0x8, 0x9, 0x2, 0x0, 0x20001, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0x8000000c}, 0x70bd28, 0x0, 0xa, 0x4, 0x6, 0x2}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x200480d0) 38.718697336s ago: executing program 0 (id=1870): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma']) (fail_nth: 1) 38.600111937s ago: executing program 0 (id=1871): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x2ded, 0xf85a, 0x2d, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r6, 0x2007ffb) sendfile(r5, r6, 0x0, 0x1000000201005) 38.490610279s ago: executing program 1 (id=1875): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r2 = socket$inet6(0xa, 0x6, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x2e8, 0xb0, 0x2e8, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'team_slave_0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'hsr0\x00', {0x4000000000000, 0x8, 0x34, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x2ded, 0xf85a, 0x2d, 0x0, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r7, 0x2007ffb) sendfile(r6, r7, 0x0, 0x1000000201005) 37.943127487s ago: executing program 0 (id=1881): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100072, 0x0, 0x40003, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa404c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xbffffffa, 0xa, 0x0, 0x0, 0x3ff}) 37.699817111s ago: executing program 32 (id=1882): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100072, 0x0, 0x40003, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa404c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xbffffffa, 0xa, 0x0, 0x0, 0x3ff}) (fail_nth: 1) 37.261404187s ago: executing program 0 (id=1884): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x6, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080)) 37.239324367s ago: executing program 33 (id=1884): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x6, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080)) 37.235783808s ago: executing program 1 (id=1885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000080)={[{@i_version}, {@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0xba}}, {@nombcache}, {@discard}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x2000a804) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a600000000f040b067c55a1bc0009003e0006990600000015000500fe800000000000000300014002000c0901ac040098007f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d7f452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x835, 0x0) 36.859487153s ago: executing program 2 (id=1889): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x855b, 0x1, 0xb, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000003f3b6907773f34ed557800", @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf250a0000000c0003800800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x800) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg(r5, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000140), 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000140), 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) 36.713596255s ago: executing program 2 (id=1890): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010425bd7000ffdbdf25090000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in6=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@rand_addr=0x64010102, {0x0, 0x0, 0xf7}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xff7ffffd}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @XFRMA_SET_MARK_MASK={0x8}]}, 0x148}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000045f45e27638c6b1200000018110000", @ANYRES32=r4, @ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007bfb0d0000000000bfa200000000000007020000f8ffffffb703000008000041df2a00b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r8}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r6) 36.43697229s ago: executing program 1 (id=1891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 36.365628651s ago: executing program 5 (id=1883): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100072, 0x0, 0x40003, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa404c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xbffffffa, 0xa, 0x0, 0x0, 0x3ff}) 36.336377391s ago: executing program 34 (id=1883): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100072, 0x0, 0x40003, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa404c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xbffffffa, 0xa, 0x0, 0x0, 0x3ff}) 36.291182102s ago: executing program 6 (id=1893): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010425bd7000ffdbdf25090000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in6=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@rand_addr=0x64010102, {0x0, 0x0, 0xf7}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xff7ffffd}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @XFRMA_SET_MARK_MASK={0x8}]}, 0x148}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000045f45e27638c6b1200000018110000", @ANYRES32=r4, @ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007bfb0d0000000000bfa200000000000007020000f8ffffffb703000008000041df2a00b704000000000000850000000300000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r8}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r10}, 0x10) close(r6) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2003, &(0x7f0000000080)) syz_emit_ethernet(0x26a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000002343a00fe8000000001000000000000000000aaff020000000000000000000000000001"], 0x0) 36.285036872s ago: executing program 35 (id=1893): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010425bd7000ffdbdf25090000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in6=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@rand_addr=0x64010102, {0x0, 0x0, 0xf7}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xff7ffffd}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @XFRMA_SET_MARK_MASK={0x8}]}, 0x148}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000045f45e27638c6b1200000018110000", @ANYRES32=r4, @ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007bfb0d0000000000bfa200000000000007020000f8ffffffb703000008000041df2a00b704000000000000850000000300000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r8}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r10}, 0x10) close(r6) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2003, &(0x7f0000000080)) syz_emit_ethernet(0x26a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000002343a00fe8000000001000000000000000000aaff020000000000000000000000000001"], 0x0) 36.259636102s ago: executing program 2 (id=1895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f00000002c0)={0x72, "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"}) 36.259371782s ago: executing program 36 (id=1895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f00000002c0)={0x72, "9cbac0f2a07bf515be6a262e0785ab56654938798e9847fa95e59c5b8644ccd0a86cac33fa98ab6d7ddf1aa17558f9db9bd25bbe395045ccc66f68ca06b7e89b04b727f1ba840a9f1e4560705267520e5b3906a93f0c498986b5257c29954eca00ed370b0efe05ad37c052ab328f7e51771416cde9979350dcaccb335601b3aa36a537169a5777f966d549ff8632f17e9810c851092d47df8b716077facb8f0b0a5b049b8aca31e63fd2596767c1e84611d96c0bc622dd6e7de5480a7f0682794e0c90ccd31b428a984c317c2075a3afb7db766e908c2c989175a652f33eba22927928583f3bb0975d0ebae2fbad2001644822ca9ae23f82bbf435ed67516a424bb440920f8a84abd68386ef2af0dc1e9a6b2520e3144f369d40d2e1e33e739f3ec2f2f6f0ccc5fbf6160fbeb933afc1d6aa3729a8203122bf3b64795d4f8947ec234c8610185f51d00a37d29d9aa8cea69810747959c169173d11d9000d58582f0d960c9b6e85f99e0dbc056439711068b9d6a1b943c434f0e7a3516281d56794a2f95918442fe4b0c3e25eeb1cc8cf23eb485fe1c3778eceeda48cb2f16225c31261afb533f8c4a3c6a846e18157b4fb4ca4509e38441685ef358ea2b761795a412eec600ad3f3e3a9792d3773a58f02719bc415d321210327f397756a1c11c38ccf92a48ad228478501546ed700c51eb19512f8abae9e94e4f88977dcd022"}) 36.148121404s ago: executing program 1 (id=1896): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d9", 0x51, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff00000085"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0) 36.147952344s ago: executing program 37 (id=1896): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d9", 0x51, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff00000085"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0) 2.7256233s ago: executing program 3 (id=2187): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x30}}, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x1ec, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x1d8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x4, {0xfc}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0xffffffffffffff59}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xaf, 0x1, 0x20000000, 0x2d2f45bb, 0xaad1}}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0xdc, 0xe, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x7, 0x400, 0x3}, 0xb1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x7f, 0x10000000, 0x8, 0xa2b1000}, 0x1}}]}, {0x71, 0x6, "0a49fe4498ee6e04af62e092ec8fecf9db84169019d4b01d433c0cf45625d1532f984818ce3fe36abf122284adb90894d91a64da6a9165147c2a3da2f09b1467b2fd6bb0a78441078f04e5b9a15c7479f57bb3d633a674d3e07583889b6a2388c315bb845bef27bf82786de59b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2.613692221s ago: executing program 3 (id=2189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r2, 0x0, 0x4009080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x553, &(0x7f0000000800)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000300)=ANY=[], 0x381, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, 0x0) lseek(r4, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) write$ppp(r3, &(0x7f0000000040)="fd8834c1b952e34aa5e2a49806eb541e2ebeaeda568a5f5fc72fffbba2f93c2358c0ac8d5fbfd9dfa0b04db564262710f46c035119f15ac5baaaf92bfd28d2ca16768a99", 0x44) r5 = semget(0x3, 0x2, 0x204) semop(r5, &(0x7f0000000180)=[{0x8c5c1eb0a2e5a351, 0x7ff, 0x800}], 0x1) 2.505688993s ago: executing program 3 (id=2192): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2.409105034s ago: executing program 3 (id=2193): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00') r1 = getuid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001280)) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) fchownat(r0, &(0x7f0000000000)='./file0/file0\x00', r1, r2, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.638463796s ago: executing program 8 (id=2203): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1}) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000019380)={'#! ', './file0'}, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="de4287155f36f3e8ab5c2a41b2361e540b487a51102aaac819dd3c21d4cd51097c2cb57f0d4e6cc86498776467612da361b3260ded160c382501e612b9f95b4d84a83708878bd625fc8500143132512e3c845d07fba6d0b25cf4c832d93ee73b4830a1f3fdf90aa376efb1c6bd2f8c6f298c89c016a9a8f6749ef50c239f26ea1e699365ea012fa8d805244f9a1a2e335220a3112e1b7a66cd7cc4ef647c6556c395e3a81b7164da8345cefaa26ee517faf6ea60d5730a3db5d841f424679d48fc4aec3739457472cb416d91b091c5d4ca4432a8cd994fd30b58e4016a46437343dacd13f56593ce0e0cc2f8d9e9b0bbce8109c3a7924b6d6e234d749b30d8af79d778cd2fb335da56af401d2ef5e420690f6f30a4dfbd2063c4a126c1be"], 0x14}, 0x1, 0x0, 0x0, 0x4000846}, 0x4001804) 1.469770008s ago: executing program 8 (id=2206): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x30}}, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) syz_io_uring_setup(0x28f, &(0x7f0000000080)={0x0, 0xb96, 0x13f81, 0x0, 0x40}, &(0x7f0000000100), &(0x7f0000000280)) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x1ec, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x1d8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x4, {0xfc}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0xffffffffffffff59}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xaf, 0x1, 0x20000000, 0x2d2f45bb, 0xaad1}}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0xdc, 0xe, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x7, 0x400, 0x3}, 0xb1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x7f, 0x10000000, 0x8, 0xa2b1000}, 0x1}}]}, {0x71, 0x6, "0a49fe4498ee6e04af62e092ec8fecf9db84169019d4b01d433c0cf45625d1532f984818ce3fe36abf122284adb90894d91a64da6a9165147c2a3da2f09b1467b2fd6bb0a78441078f04e5b9a15c7479f57bb3d633a674d3e07583889b6a2388c315bb845bef27bf82786de59b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.306796661s ago: executing program 7 (id=2209): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x4000054) 1.299499951s ago: executing program 4 (id=2210): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.265366141s ago: executing program 4 (id=2211): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x2ded, 0xf85a, 0x2d, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r3, 0x2007ffb) sendfile(r2, r3, 0x0, 0x1000000201005) 1.211758032s ago: executing program 7 (id=2212): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010425bd7000ffdbdf25090000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in6=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@rand_addr=0x64010102, {0x0, 0x0, 0xf7}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xff7ffffd}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @XFRMA_SET_MARK_MASK={0x8}]}, 0x148}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000045f45e27638c6b1200000018110000", @ANYRES32=r4, @ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007bfb0d0000000000bfa200000000000007020000f8ffffffb703000008000041df2a00b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r7}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r6) 1.180651203s ago: executing program 3 (id=2213): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x1ec, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x1d8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x4, {0xfc}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0xffffffffffffff59}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xaf, 0x1, 0x20000000, 0x2d2f45bb, 0xaad1}}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0xdc, 0xe, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x7, 0x400, 0x3}, 0xb1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x7f, 0x10000000, 0x8, 0xa2b1000}, 0x1}}]}, {0x71, 0x6, "0a49fe4498ee6e04af62e092ec8fecf9db84169019d4b01d433c0cf45625d1532f984818ce3fe36abf122284adb90894d91a64da6a9165147c2a3da2f09b1467b2fd6bb0a78441078f04e5b9a15c7479f57bb3d633a674d3e07583889b6a2388c315bb845bef27bf82786de59b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.165071403s ago: executing program 8 (id=2214): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x20401, &(0x7f0000000500)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x31, 0x37, 0x39, 0x37, 0x32, 0x62, 0x63], 0x2d, [0x63, 0x36, 0x66, 0x39], 0x2d, [0x37, 0x31, 0x35], 0x2d, [0x36, 0x39, 0x34, 0x39], 0x2d, [0x33, 0x64, 0x32, 0x63, 0x39, 0x35, 0x65, 0x34]}}}, {@obj_type={'obj_type', 0x3d, 'ext4\x00'}}, {@subj_type={'subj_type', 0x3d, '%*,/!\\'}}, {@fsmagic={'fsmagic', 0x3d, 0xa}}]}, 0x0, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file2\x00', &(0x7f00000000c0), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) 1.144899983s ago: executing program 7 (id=2215): socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 891.468597ms ago: executing program 7 (id=2220): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 863.227298ms ago: executing program 9 (id=2221): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x10, @empty, @empty, 0x700, 0x7}}) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000080)=0x1, 0x4) ftruncate(r0, 0x7ffffffffffffa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000006161eb0000612f00"/33], 0x0, 0x21, 0x0, 0x1, 0xfe6e, 0x0, @void, @value}, 0x28) 828.747538ms ago: executing program 9 (id=2222): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x4000054) 799.782688ms ago: executing program 3 (id=2223): mknod$loop(0x0, 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$eJzs3c1vFVUbAPBnbj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sRr5nam9LZzW3r7MZX5/ZJLZ+bc4TzT26fn3NNz5gZQWYPpP7WI/RExnUT0J/OLZZ2RFQ4uPO/Bnx+dTR9J1Ouv/Z5Ekh3Ln59kX/uyk3si4scfktjXsbLemblrF8enpiavZvvDs5emh2fmrh2+cGn8/OT5ycujL4yeOH7s+ImRI21d1/WCY6dvvvt+/ydjb37z1V/JyLe/jCVxMl7Onrj0OjbLYAw2vifJyqK+E5tdWUk6sp+TpS9x0lliQKxL/vp1RcQT0R8d8fDF64+PXyk1OGBL1ZOIOlBRifyHisr7Afl7++Xvg2ul9EqA7XD/1MIAwMr871wYG4yextjA7gdJLB3WSSKivZG5Znsi4u6dsZvn7ozdjC0ahwOKzd+IiCeL8j9p5P9A9MRAI/9rTfmf9gvOZF/T46+2Wf/yoWL5D9tnIf97Vs3/aJH/by3J/7fbrH/w4eY7vU3539vuJQEAAAAAAEBl3T4VEc8X/f2/tjj/Jwrm//RFxMlNqH9w2f7Kv//X7m1CNUCB+6ciXiqc/1vLZ/8OdGRb/2nMB+hKzl2YmjwSEf+NiEPRtSvdH1mljsOf7vuyVdlgNv8vf6T1383mAmZx3Ovc1XzOxPjs+EavG4i4fyPiqcL5v8li+58UtP/p74PpR6xj37O3zrQqWzv/ga1S/zriYGH7//CuFcnq9+cYbvQHhvNewUpPf/jZd63qbzf/3WICNi5t/3evnv8DydL79cysv46jc531VmXt9v+7k9cbt5zpzo59MD47e3Ukojs53ZEebTo+uv6Y4XGU50OeL2n+H3pm9fG/ov5/b0TML/u/kz+a1xTn/v9336+t4tH/h/Kk+T+xrvZ//Rujtwa+b1X/o7X/xxpt/aHsiPE/WPBFnqbdzccL0rGzqGi74wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx0EtIvZEUhta3K7VhoYi+iLif7G7NnVlZva5c1feuzyRljU+/7+Wf9Jv/8J+kn/+/8CS/dFl+0cjYm9EfN7R29gfOntlaqLsiwcAAAAAAAAAAAAAAAAAAIAdoq/F+v/Ubx1lRwdsuc6yAwBKU5D/P5URB7D9tP9QXfIfqkv+Q3XJf6gu+Q/VJf+huuQ/VNc68z/JHgAAAAAAwM6098Dtn5OImH+xt/FIdWdlXaVGBmy1WtkBAKVxix+oLlP/oLrW+x7/5BbFAZRnrfm8PS1P2shM4OmzGzgZAAAAAAAAAAAAACrn4H7r/6GqrP+H6rL+H6orX/9/oOQ4gO3nPT4Qa6zkL1z/v+ZZAAAAAAAAAAAAAMBmmpm7dnF8amryqo03dkYY27lRr9evpz8FOyWef/lGPhV+p8SzbCNf6/doZ5X3OwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGj2TwAAAP//030lBw==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6}}, &(0x7f00000003c0)=0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="611049000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a40)={0x0}, &(0x7f0000000a80)=0xc) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r8}]}]}, 0x28}}, 0x0) sendmsg$unix(r5, &(0x7f0000001c00)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880), 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r6, r8, 0xee01}}}], 0x20, 0x10}, 0x20004050) mount$9p_xen(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', &(0x7f00000002c0), 0x100800, &(0x7f00000005c0)={'trans=xen,', {[{@directio}, {@cache_loose}], [{@smackfshat={'smackfshat', 0x3d, '\'\''}}, {@uid_eq={'uid', 0x3d, r4}}, {@fowner_eq={'fowner', 0x3d, r8}}]}}) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 707.84049ms ago: executing program 9 (id=2224): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x113a0, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x38}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r3}, 0x18) alarm(0x9) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x27) creat(0x0, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x6}, 0x1c) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r5 = socket(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f00000002c0), 0x9, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r7 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="aebc7d4a", 0x4, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r7}) keyctl$link(0x8, r7, r6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x8, 0x1100, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x164, 0x0, 0x5, 0x4, 0x0, @empty, @private}}}}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r8, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) 676.97277ms ago: executing program 4 (id=2225): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x30}}, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) io_uring_enter(0xffffffffffffffff, 0x5c, 0x0, 0x2b, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x1ec, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x1d8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x4, {0xfc}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0xffffffffffffff59}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xaf, 0x1, 0x20000000, 0x2d2f45bb, 0xaad1}}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0xdc, 0xe, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x7, 0x400, 0x3}, 0xb1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x7f, 0x10000000, 0x8, 0xa2b1000}, 0x1}}]}, {0x71, 0x6, "0a49fe4498ee6e04af62e092ec8fecf9db84169019d4b01d433c0cf45625d1532f984818ce3fe36abf122284adb90894d91a64da6a9165147c2a3da2f09b1467b2fd6bb0a78441078f04e5b9a15c7479f57bb3d633a674d3e07583889b6a2388c315bb845bef27bf82786de59b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 660.151461ms ago: executing program 9 (id=2226): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010425bd7000ffdbdf25090000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in6=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@rand_addr=0x64010102, {0x0, 0x0, 0xf7}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xff7ffffd}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @XFRMA_SET_MARK_MASK={0x8}]}, 0x148}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000045f45e27638c6b1200000018110000", @ANYRES32=r4, @ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007bfb0d0000000000bfa200000000000007020000f8ffffffb703000008000041df2a00b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r7}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r6) 494.189723ms ago: executing program 8 (id=2227): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000a00)={&(0x7f00000006c0)="29f931cab4906fccf61cf4b10a9bcf8d4edd80fc76e818a9d5eebfefadce2e8f079d4b8fc41b3aaa897d50a9388eb6ec79a03f6a2b83c5051268d0dc07241ae5c3fef7d0aa9464", &(0x7f0000000800)=""/114, &(0x7f0000000880)="53d9698e54765d2ce7d434cc57ca8fa638a5866edec446f43baf34bb0e21af7b0124", &(0x7f0000000980)="08b83f1593409525a634bcd776ee5fa8c4cc887ffd9be0576c13d220b11d8e02e557a4a9530a9de8e8f16a6b55bb94c853b729abba608ba54444", 0x101, r4, 0x4}, 0x38) r5 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xffffffffffffffff, 0x0, 0x8) tkill(r5, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f0000019380)={'#! ', './file0'}, 0xb) close(r6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000002e40), 0xffffffffffffffff) syz_clone(0x4000400, &(0x7f0000000500)="e34f0670000ae73178fd644ccc55deb05d587290e6f2bf70eccbedaf5fba91726db4", 0x22, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="78c1a860e5ab672f7c0aa44b19811c0eeb96bbd1013b0e1ec981523460422138a7d8e1b25f6490b3cb74311f28725dccd8b5a00ae233a4547326dcc88a6ea493454a08dc92f1bdc2e08253e33aa8cae3b074fa70f3bb20c49f86acc25b9db994806246d86890053aa3676e9f218d26ef98ef910e04f488ff96482d23cf72b69945fdc7538424f842f074328b8c6f7e82df9b7af00485fc258f8a95a441abb7868c2c869498c158b41bbffdc76d859a45155888a484acc1cb7d8b1e6f423b4301a4967d35e396cdc2865833319da80c1d06de9c8ea4d55560809d7d675c6af251b8abbd1f46") timerfd_create(0x8, 0x80800) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x140400, 0x0) 469.006533ms ago: executing program 9 (id=2228): mknod$loop(0x0, 0x100000000000600d, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1}) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000019380)={'#! ', './file0'}, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000846}, 0x4001804) 339.744485ms ago: executing program 9 (id=2229): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x129}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r3, 0xc}, 0x8) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000340), 0x2000011a) recvmsg$unix(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000680)=""/86, 0x56}], 0x1}, 0x12161) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020022207a3100000080050005010200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x20401, &(0x7f0000000500)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x31, 0x37, 0x39, 0x37, 0x32, 0x62, 0x63], 0x2d, [0x63, 0x36, 0x66, 0x39], 0x2d, [0x37, 0x31, 0x35], 0x2d, [0x36, 0x39, 0x34, 0x39], 0x2d, [0x33, 0x64, 0x32, 0x63, 0x39, 0x35, 0x65, 0x34]}}}, {@obj_type={'obj_type', 0x3d, 'ext4\x00'}}, {@subj_type={'subj_type', 0x3d, '%*,/!\\'}}, {@fsmagic={'fsmagic', 0x3d, 0xa}}]}, 0x0, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file2\x00', &(0x7f00000000c0), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000400)={0x0, 0x5888}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109802, 0x15) getpgid(0x0) unlink(&(0x7f0000000180)='./file1\x00') close_range(r1, 0xffffffffffffffff, 0x200000000000000) 318.858906ms ago: executing program 4 (id=2230): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000940)=ANY=[@ANYBLOB="70000000030601020000000000000000000000050500ffff060000000900a20073797a32000000000900020073797a32000000000900020073797a30000000000500010007000000050001000700000005000100070000000900020073797a30000000000900020073797a300050"], 0x70}, 0x1, 0x0, 0x0, 0x4081}, 0x80) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x1, 0x20538, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x10000, 0xfffffffc, 0x3, 0x9, 0x1c, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000004000000ff11000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) pipe(&(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x42400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x400, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x800, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x1, 0x0, 0x409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x2, 0x6}, {0xff}}}]}}]}, 0x45c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0) 109.785749ms ago: executing program 8 (id=2231): r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r5, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') bpf$MAP_CREATE(0x0, 0x0, 0xe4) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000700000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f00000002c0)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x109) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) 78.771719ms ago: executing program 4 (id=2232): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000f1401002bbd70e2060000000800010000000000090045006973736d"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4048480) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 0s ago: executing program 4 (id=2233): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000a00)={&(0x7f00000006c0)="29f931cab4906fccf61cf4b10a9bcf8d4edd80fc76e818a9d5eebfefadce2e8f079d4b8fc41b3aaa897d50a9388eb6ec79a03f6a2b83c5051268d0dc07241ae5c3fef7d0aa9464", &(0x7f0000000800)=""/114, &(0x7f0000000880)="53d9698e54765d2ce7d434cc57ca8fa638a5866edec446f43baf34bb0e21af7b0124", &(0x7f0000000980)="08b83f1593409525a634bcd776ee5fa8c4cc887ffd9be0576c13d220b11d8e02e557a4a9530a9de8e8f16a6b55bb94c853b729abba608ba54444", 0x101, r4, 0x4}, 0x38) r5 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xffffffffffffffff, 0x0, 0x8) tkill(r5, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f0000019380)={'#! ', './file0'}, 0xb) close(r6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000002e40), 0xffffffffffffffff) syz_clone(0x4000400, &(0x7f0000000500)="e34f0670000ae73178fd644ccc55deb05d587290e6f2bf70eccbedaf5fba91726db4", 0x22, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="78c1a860e5ab672f7c0aa44b19811c0eeb96bbd1013b0e1ec981523460422138a7d8e1b25f6490b3cb74311f28725dccd8b5a00ae233a4547326dcc88a6ea493454a08dc92f1bdc2e08253e33aa8cae3b074fa70f3bb20c49f86acc25b9db994806246d86890053aa3676e9f218d26ef98ef910e04f488ff96482d23cf72b69945fdc7538424f842f074328b8c6f7e82df9b7af00485fc258f8a95a441abb7868c2c869498c158b41bbffdc76d859a45155888a484acc1cb7d8b1e6f423b4301a4967d35e396cdc2865833319da80c1d06de9c8ea4d55560809d7d675c6af251b8abbd1f46") timerfd_create(0x8, 0x80800) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x140400, 0x0) kernel console output (not intermixed with test programs): [T10154] RAX: ffffffffffffffda RBX: 00007f92be735fa0 RCX: 00007f92be50e929 [ 241.919340][T10154] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 241.919354][T10154] RBP: 00007f92bcb77090 R08: 0000000000000000 R09: 0000000000000000 [ 241.919369][T10154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.919383][T10154] R13: 0000000000000000 R14: 00007f92be735fa0 R15: 00007ffd47ca79e8 [ 241.919427][T10154] [ 242.172381][T10160] loop1: detected capacity change from 0 to 1024 [ 242.229096][T10166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1853'. [ 242.239951][T10160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.323055][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.409037][T10175] FAULT_INJECTION: forcing a failure. [ 242.409037][T10175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.423555][T10175] CPU: 0 UID: 0 PID: 10175 Comm: syz.1.1855 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 242.423589][T10175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.423605][T10175] Call Trace: [ 242.423614][T10175] [ 242.423622][T10175] __dump_stack+0x1d/0x30 [ 242.423705][T10175] dump_stack_lvl+0xe8/0x140 [ 242.423729][T10175] dump_stack+0x15/0x1b [ 242.423745][T10175] should_fail_ex+0x265/0x280 [ 242.423824][T10175] should_fail+0xb/0x20 [ 242.423901][T10175] should_fail_usercopy+0x1a/0x20 [ 242.423922][T10175] _copy_from_user+0x1c/0xb0 [ 242.423946][T10175] get_itimerspec64+0x4c/0x1a0 [ 242.423972][T10175] __x64_sys_timer_settime+0x9a/0x160 [ 242.424081][T10175] x64_sys_call+0x29e6/0x2fb0 [ 242.424109][T10175] do_syscall_64+0xd2/0x200 [ 242.424137][T10175] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 242.424172][T10175] ? clear_bhb_loop+0x40/0x90 [ 242.424223][T10175] ? clear_bhb_loop+0x40/0x90 [ 242.424265][T10175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.424290][T10175] RIP: 0033:0x7f92be50e929 [ 242.424305][T10175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.424322][T10175] RSP: 002b:00007f92bcb77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 242.424340][T10175] RAX: ffffffffffffffda RBX: 00007f92be735fa0 RCX: 00007f92be50e929 [ 242.424374][T10175] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000000 [ 242.424390][T10175] RBP: 00007f92bcb77090 R08: 0000000000000000 R09: 0000000000000000 [ 242.424416][T10175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.424432][T10175] R13: 0000000000000000 R14: 00007f92be735fa0 R15: 00007ffd47ca79e8 [ 242.424456][T10175] [ 242.888285][T10191] loop3: detected capacity change from 0 to 1024 [ 242.893448][T10189] loop2: detected capacity change from 0 to 2048 [ 242.937526][T10179] loop1: detected capacity change from 0 to 512 [ 242.945266][T10191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.947728][T10179] EXT4-fs: Ignoring removed i_version option [ 242.964588][T10179] EXT4-fs: Ignoring removed mblk_io_submit option [ 243.011444][T10189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.025931][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.035241][T10179] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 243.059598][T10179] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 243.107505][T10205] loop4: detected capacity change from 0 to 512 [ 243.116504][T10205] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 243.140018][T10203] FAULT_INJECTION: forcing a failure. [ 243.140018][T10203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.143597][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.153177][T10203] CPU: 0 UID: 0 PID: 10203 Comm: syz.3.1868 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 243.153221][T10203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.153260][T10203] Call Trace: [ 243.153270][T10203] [ 243.153347][T10203] __dump_stack+0x1d/0x30 [ 243.153375][T10203] dump_stack_lvl+0xe8/0x140 [ 243.153400][T10203] dump_stack+0x15/0x1b [ 243.153488][T10203] should_fail_ex+0x265/0x280 [ 243.153567][T10203] should_fail+0xb/0x20 [ 243.153608][T10203] should_fail_usercopy+0x1a/0x20 [ 243.153665][T10203] _copy_from_user+0x1c/0xb0 [ 243.153697][T10203] get_itimerspec64+0x4c/0x1a0 [ 243.153725][T10203] __x64_sys_timer_settime+0x9a/0x160 [ 243.153796][T10203] x64_sys_call+0x29e6/0x2fb0 [ 243.153825][T10203] do_syscall_64+0xd2/0x200 [ 243.153851][T10203] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 243.153942][T10203] ? clear_bhb_loop+0x40/0x90 [ 243.153971][T10203] ? clear_bhb_loop+0x40/0x90 [ 243.154007][T10203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.154109][T10203] RIP: 0033:0x7f2d6cd5e929 [ 243.154133][T10203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.154180][T10203] RSP: 002b:00007f2d6b3c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 243.154206][T10203] RAX: ffffffffffffffda RBX: 00007f2d6cf85fa0 RCX: 00007f2d6cd5e929 [ 243.154228][T10203] RDX: 0000200000000080 RSI: ffffffffffffffff RDI: 0000000000000000 [ 243.154244][T10203] RBP: 00007f2d6b3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 243.154258][T10203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.154270][T10203] R13: 0000000000000000 R14: 00007f2d6cf85fa0 R15: 00007fff3126d298 [ 243.154293][T10203] [ 243.333999][T10213] 9pnet_virtio: no channels available for device 127.0.0.1 [ 243.350929][T10205] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 243.359685][T10205] EXT4-fs (loop4): orphan cleanup on readonly fs [ 243.387855][T10205] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1861: bg 0: block 361: padding at end of block bitmap is not set [ 243.406918][T10205] EXT4-fs (loop4): Remounting filesystem read-only [ 243.451504][T10205] EXT4-fs (loop4): 1 truncate cleaned up [ 243.472582][T10205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 243.498291][T10229] loop1: detected capacity change from 0 to 2048 [ 243.509808][T10230] loop2: detected capacity change from 0 to 2048 [ 243.541570][T10230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.554292][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 243.563444][T10230] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.595356][T10229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.617648][T10224] futex_wake_op: syz.2.1869 tries to shift op by -1; fix this program [ 243.713617][T10242] FAULT_INJECTION: forcing a failure. [ 243.713617][T10242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.726791][T10242] CPU: 1 UID: 0 PID: 10242 Comm: syz.3.1879 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 243.726819][T10242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.726831][T10242] Call Trace: [ 243.726837][T10242] [ 243.726844][T10242] __dump_stack+0x1d/0x30 [ 243.726912][T10242] dump_stack_lvl+0xe8/0x140 [ 243.726937][T10242] dump_stack+0x15/0x1b [ 243.726970][T10242] should_fail_ex+0x265/0x280 [ 243.727012][T10242] should_fail+0xb/0x20 [ 243.727047][T10242] should_fail_usercopy+0x1a/0x20 [ 243.727139][T10242] _copy_from_user+0x1c/0xb0 [ 243.727212][T10242] perf_copy_attr+0x145/0x610 [ 243.727239][T10242] __se_sys_perf_event_open+0x67/0x11c0 [ 243.727265][T10242] ? vfs_write+0x75e/0x8e0 [ 243.727294][T10242] ? __rcu_read_unlock+0x4f/0x70 [ 243.727329][T10242] __x64_sys_perf_event_open+0x67/0x80 [ 243.727359][T10242] x64_sys_call+0x27ec/0x2fb0 [ 243.727404][T10242] do_syscall_64+0xd2/0x200 [ 243.727487][T10242] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 243.727521][T10242] ? clear_bhb_loop+0x40/0x90 [ 243.727549][T10242] ? clear_bhb_loop+0x40/0x90 [ 243.727595][T10242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.727671][T10242] RIP: 0033:0x7f2d6cd5e929 [ 243.727694][T10242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.727718][T10242] RSP: 002b:00007f2d6b3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 243.727741][T10242] RAX: ffffffffffffffda RBX: 00007f2d6cf85fa0 RCX: 00007f2d6cd5e929 [ 243.727758][T10242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 243.727773][T10242] RBP: 00007f2d6b3c7090 R08: 0000000000000003 R09: 0000000000000000 [ 243.727785][T10242] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 243.727797][T10242] R13: 0000000000000001 R14: 00007f2d6cf85fa0 R15: 00007fff3126d298 [ 243.727897][T10242] [ 243.972663][T10229] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 244.070726][T10249] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1869'. [ 244.203839][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.304994][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.414409][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.441470][ T3337] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 244.457448][ T3337] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 244.470118][ T3337] EXT4-fs (loop1): This should not happen!! Data will be lost [ 244.470118][ T3337] [ 244.479786][ T3337] EXT4-fs (loop1): Total free blocks count 0 [ 244.485901][ T3337] EXT4-fs (loop1): Free/Dirty block details [ 244.491867][ T3337] EXT4-fs (loop1): free_blocks=2415919504 [ 244.498322][ T3337] EXT4-fs (loop1): dirty_blocks=5696 [ 244.503828][ T3337] EXT4-fs (loop1): Block reservation details [ 244.510477][ T3337] EXT4-fs (loop1): i_reserved_data_blocks=356 [ 244.520582][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.545045][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 244.612041][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 244.612059][ T29] audit: type=1400 audit(1749774773.291:15960): avc: denied { search } for pid=3036 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.639882][ T29] audit: type=1400 audit(1749774773.291:15961): avc: denied { search } for pid=3036 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.661641][ T29] audit: type=1400 audit(1749774773.291:15962): avc: denied { search } for pid=3036 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.683453][ T29] audit: type=1400 audit(1749774773.291:15963): avc: denied { read } for pid=3036 comm="dhcpcd" name="n25" dev="tmpfs" ino=12136 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 244.717515][ T29] audit: type=1400 audit(1749774773.291:15964): avc: denied { open } for pid=3036 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=12136 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 244.746875][ T56] bridge_slave_1: left allmulticast mode [ 244.750170][ T29] audit: type=1400 audit(1749774773.421:15965): avc: denied { getattr } for pid=3036 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=12136 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 244.752662][ T56] bridge_slave_1: left promiscuous mode [ 244.781682][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.868679][ T29] audit: type=1400 audit(1749774773.501:15966): avc: denied { mounton } for pid=10267 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 244.890733][ T29] audit: type=1326 audit(1749774773.531:15967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 244.917107][ T29] audit: type=1326 audit(1749774773.531:15968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 244.940829][ T29] audit: type=1326 audit(1749774773.531:15969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 244.964769][ T56] bridge_slave_0: left allmulticast mode [ 244.970632][ T56] bridge_slave_0: left promiscuous mode [ 244.976454][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.030712][T10194] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 245.063765][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.075800][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.096771][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.115050][ T56] bond0 (unregistering): Released all slaves [ 245.133610][T10277] loop1: detected capacity change from 0 to 512 [ 245.152098][T10277] EXT4-fs: Ignoring removed i_version option [ 245.159035][T10277] EXT4-fs: Ignoring removed mblk_io_submit option [ 245.193861][T10277] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 245.228091][ T56] hsr_slave_0: left promiscuous mode [ 245.235210][ T56] hsr_slave_1: left promiscuous mode [ 245.245450][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.253040][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.261182][T10277] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 245.290621][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.298373][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.324114][ T56] veth1_macvtap: left promiscuous mode [ 245.329819][ T56] veth0_macvtap: left promiscuous mode [ 245.335586][ T56] veth1_vlan: left promiscuous mode [ 245.341570][ T56] veth0_vlan: left promiscuous mode [ 245.837537][ T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.902944][ T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.943719][ T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.983329][ T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.059063][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.094072][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.152649][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.222530][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.289183][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.352428][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.393748][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.443138][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.532205][ T56] bridge_slave_1: left allmulticast mode [ 246.538022][ T56] bridge_slave_1: left promiscuous mode [ 246.543761][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.552295][ T56] bridge_slave_0: left allmulticast mode [ 246.557981][ T56] bridge_slave_0: left promiscuous mode [ 246.563874][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.572590][ T56] bridge_slave_1: left allmulticast mode [ 246.578299][ T56] bridge_slave_1: left promiscuous mode [ 246.584011][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.593590][ T56] bridge_slave_0: left allmulticast mode [ 246.599931][ T56] bridge_slave_0: left promiscuous mode [ 246.606295][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.615832][ T56] bridge_slave_1: left allmulticast mode [ 246.621655][ T56] bridge_slave_1: left promiscuous mode [ 246.627445][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.635249][ T56] bridge_slave_0: left allmulticast mode [ 246.640959][ T56] bridge_slave_0: left promiscuous mode [ 246.646700][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.812400][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.822437][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.831920][ T56] bond0 (unregistering): Released all slaves [ 246.942245][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.951976][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.961755][ T56] bond0 (unregistering): Released all slaves [ 247.043736][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.053502][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.062891][ T56] bond0 (unregistering): Released all slaves [ 247.121570][ T56] hsr_slave_0: left promiscuous mode [ 247.127242][ T56] hsr_slave_1: left promiscuous mode [ 247.132969][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.140873][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.148402][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.155840][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.164870][ T56] hsr_slave_0: left promiscuous mode [ 247.170631][ T56] hsr_slave_1: left promiscuous mode [ 247.176278][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.183698][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.192972][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.201934][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.211743][ T56] hsr_slave_0: left promiscuous mode [ 247.217445][ T56] hsr_slave_1: left promiscuous mode [ 247.223056][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.230483][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.238262][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.245681][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.259697][ T56] veth1_macvtap: left promiscuous mode [ 247.265541][ T56] veth0_macvtap: left promiscuous mode [ 247.271220][ T56] veth1_vlan: left promiscuous mode [ 247.276576][ T56] veth0_vlan: left promiscuous mode [ 247.282322][ T56] veth1_macvtap: left promiscuous mode [ 247.287840][ T56] veth0_macvtap: left promiscuous mode [ 247.294636][ T56] veth1_vlan: left promiscuous mode [ 247.300420][ T56] veth0_vlan: left promiscuous mode [ 247.306416][ T56] veth1_macvtap: left promiscuous mode [ 247.312124][ T56] veth0_macvtap: left promiscuous mode [ 247.317689][ T56] veth1_vlan: left promiscuous mode [ 247.322950][ T56] veth0_vlan: left promiscuous mode [ 247.610486][T10348] chnl_net:caif_netlink_parms(): no params data found [ 247.642991][T10348] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.650160][T10348] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.657274][T10348] bridge_slave_0: entered allmulticast mode [ 247.663872][T10348] bridge_slave_0: entered promiscuous mode [ 247.670589][T10348] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.677667][T10348] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.684876][T10348] bridge_slave_1: entered allmulticast mode [ 247.691629][T10348] bridge_slave_1: entered promiscuous mode [ 247.709672][T10348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.719927][T10348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.739377][T10348] team0: Port device team_slave_0 added [ 247.745778][T10348] team0: Port device team_slave_1 added [ 247.760719][T10348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.767737][T10348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.794248][T10348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.806190][T10348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.813331][T10348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.839486][T10348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.865259][T10348] hsr_slave_0: entered promiscuous mode [ 247.871240][T10348] hsr_slave_1: entered promiscuous mode [ 247.936203][T10348] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 247.945095][T10348] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 247.954055][T10348] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 247.962769][T10348] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 247.976965][T10348] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.984169][T10348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.993425][T10348] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.002541][T10348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.029080][T10348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.041675][ T3337] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.049317][ T3337] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.061203][T10348] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.071519][ T3337] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.078632][ T3337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.089191][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.096662][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.158156][T10348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.218930][T10382] loop3: detected capacity change from 0 to 164 [ 248.242468][T10382] syz.3.1897: attempt to access beyond end of device [ 248.242468][T10382] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 248.277541][T10382] syz.3.1897: attempt to access beyond end of device [ 248.277541][T10382] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 248.377296][T10348] veth0_vlan: entered promiscuous mode [ 248.391718][T10348] veth1_vlan: entered promiscuous mode [ 248.412201][T10348] veth0_macvtap: entered promiscuous mode [ 248.420014][T10348] veth1_macvtap: entered promiscuous mode [ 248.453872][T10348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.465424][T10348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.488458][T10348] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.498815][T10348] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.508749][T10348] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.517598][T10348] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.605953][T10388] chnl_net:caif_netlink_parms(): no params data found [ 248.621131][T10387] chnl_net:caif_netlink_parms(): no params data found [ 248.681121][T10388] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.688328][T10388] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.696876][T10388] bridge_slave_0: entered allmulticast mode [ 248.704869][T10388] bridge_slave_0: entered promiscuous mode [ 248.712568][T10387] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.719655][T10387] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.726935][T10387] bridge_slave_0: entered allmulticast mode [ 248.733327][T10387] bridge_slave_0: entered promiscuous mode [ 248.739870][T10388] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.746993][T10388] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.754235][T10388] bridge_slave_1: entered allmulticast mode [ 248.760774][T10388] bridge_slave_1: entered promiscuous mode [ 248.767424][T10387] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.774571][T10387] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.781712][T10387] bridge_slave_1: entered allmulticast mode [ 248.788329][T10387] bridge_slave_1: entered promiscuous mode [ 248.817450][T10387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.827894][T10388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.838225][T10387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.858378][T10388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.868292][T10387] team0: Port device team_slave_0 added [ 248.879549][T10387] team0: Port device team_slave_1 added [ 248.904568][T10388] team0: Port device team_slave_0 added [ 248.913032][T10387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.920021][T10387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.946150][T10387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.957648][T10388] team0: Port device team_slave_1 added [ 248.968996][T10387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.975998][T10387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.003568][T10387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.023949][T10388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.030997][T10388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.056966][T10388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.074047][T10388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.081031][T10388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.113266][T10388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.134359][T10387] hsr_slave_0: entered promiscuous mode [ 249.140513][T10387] hsr_slave_1: entered promiscuous mode [ 249.146387][T10387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.153977][T10387] Cannot create hsr debugfs directory [ 249.179586][T10388] hsr_slave_0: entered promiscuous mode [ 249.187253][T10388] hsr_slave_1: entered promiscuous mode [ 249.193634][T10388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.202419][T10388] Cannot create hsr debugfs directory [ 249.446365][T10387] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 249.455356][T10387] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 249.464161][T10387] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 249.475413][T10387] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 249.499872][T10388] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 249.509677][T10388] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 249.519000][T10388] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 249.527970][T10387] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.535060][T10387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.542502][T10387] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.549612][T10387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.558419][T10388] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 249.584665][T10388] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.595400][T10388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.603468][T10388] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.611310][T10388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.651920][T10387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.671734][ T3337] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.684674][ T3337] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.693910][ T3337] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.703218][ T3337] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.737127][T10387] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.752425][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.759569][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.779704][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.787793][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.867231][T10388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.905656][T10387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.938062][T10388] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.953731][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.960890][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.975866][T10451] loop3: detected capacity change from 0 to 512 [ 249.993658][T10451] EXT4-fs: Ignoring removed i_version option [ 250.003177][T10451] EXT4-fs: Ignoring removed mblk_io_submit option [ 250.036384][T10451] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 250.038231][ T3337] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.053581][ T3337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.058466][T10451] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 250.116448][T10387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.285311][T10438] chnl_net:caif_netlink_parms(): no params data found [ 250.364909][T10388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.411220][T10438] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.418357][T10438] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.427197][T10438] bridge_slave_0: entered allmulticast mode [ 250.434067][T10438] bridge_slave_0: entered promiscuous mode [ 250.444929][T10438] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.452401][T10438] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.459920][T10438] bridge_slave_1: entered allmulticast mode [ 250.467040][T10438] bridge_slave_1: entered promiscuous mode [ 250.482238][T10387] veth0_vlan: entered promiscuous mode [ 250.503586][T10438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.514441][T10438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.536156][T10438] team0: Port device team_slave_0 added [ 250.542647][T10387] veth1_vlan: entered promiscuous mode [ 250.552046][T10438] team0: Port device team_slave_1 added [ 250.569017][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 250.569032][ T29] audit: type=1400 audit(1749774779.241:15979): avc: denied { write } for pid=10500 comm="syz.3.1907" name="config" dev="proc" ino=4026532938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 250.605586][T10501] macvlan2: entered allmulticast mode [ 250.611445][T10501] veth1_vlan: entered allmulticast mode [ 250.618656][T10501] veth1_vlan: left allmulticast mode [ 250.627545][T10438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.634592][T10438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.660658][T10438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.672425][T10438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.679423][T10438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.707626][T10438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.753745][T10438] hsr_slave_0: entered promiscuous mode [ 250.759860][T10438] hsr_slave_1: entered promiscuous mode [ 250.766450][T10438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.775147][T10438] Cannot create hsr debugfs directory [ 250.792513][T10387] veth0_macvtap: entered promiscuous mode [ 250.832862][ T29] audit: type=1400 audit(1749774779.511:15980): avc: denied { shutdown } for pid=10509 comm="syz.3.1908" lport=39288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 250.876967][T10388] veth0_vlan: entered promiscuous mode [ 250.887940][T10388] veth1_vlan: entered promiscuous mode [ 250.906090][T10515] FAULT_INJECTION: forcing a failure. [ 250.906090][T10515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.915966][T10388] veth0_macvtap: entered promiscuous mode [ 250.919714][T10515] CPU: 0 UID: 0 PID: 10515 Comm: syz.3.1909 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 250.919753][T10515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.919777][T10515] Call Trace: [ 250.919786][T10515] [ 250.919836][T10515] __dump_stack+0x1d/0x30 [ 250.919864][T10515] dump_stack_lvl+0xe8/0x140 [ 250.919889][T10515] dump_stack+0x15/0x1b [ 250.919942][T10515] should_fail_ex+0x265/0x280 [ 250.919987][T10515] should_fail+0xb/0x20 [ 250.920028][T10515] should_fail_usercopy+0x1a/0x20 [ 250.920067][T10515] _copy_to_user+0x20/0xa0 [ 250.920097][T10515] simple_read_from_buffer+0xb5/0x130 [ 250.920188][T10515] proc_fail_nth_read+0x100/0x140 [ 250.920251][T10515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.920327][T10515] vfs_read+0x19d/0x6f0 [ 250.920349][T10515] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 250.920386][T10515] ? __rcu_read_unlock+0x4f/0x70 [ 250.920493][T10515] ? __fget_files+0x184/0x1c0 [ 250.920595][T10515] ? do_arch_prctl_64+0x13b/0x420 [ 250.920642][T10515] ksys_read+0xda/0x1a0 [ 250.920667][T10515] __x64_sys_read+0x40/0x50 [ 250.920722][T10515] x64_sys_call+0x2d77/0x2fb0 [ 250.920747][T10515] do_syscall_64+0xd2/0x200 [ 250.920790][T10515] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 250.920827][T10515] ? clear_bhb_loop+0x40/0x90 [ 250.920857][T10515] ? clear_bhb_loop+0x40/0x90 [ 250.920899][T10515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.921002][T10515] RIP: 0033:0x7f2d6cd5d33c [ 250.921039][T10515] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 250.921066][T10515] RSP: 002b:00007f2d6b3c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.921151][T10515] RAX: ffffffffffffffda RBX: 00007f2d6cf85fa0 RCX: 00007f2d6cd5d33c [ 250.921169][T10515] RDX: 000000000000000f RSI: 00007f2d6b3c70a0 RDI: 0000000000000003 [ 250.921185][T10515] RBP: 00007f2d6b3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 250.921204][T10515] R10: 0000000000005002 R11: 0000000000000246 R12: 0000000000000001 [ 250.921222][T10515] R13: 0000000000000000 R14: 00007f2d6cf85fa0 R15: 00007fff3126d298 [ 250.921272][T10515] [ 251.042922][T10519] loop3: detected capacity change from 0 to 1024 [ 251.048846][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1910'. [ 251.056465][T10387] veth1_macvtap: entered promiscuous mode [ 251.057375][T10520] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1910'. [ 251.084999][T10387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.153265][T10519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.167829][T10387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.209378][T10388] veth1_macvtap: entered promiscuous mode [ 251.212201][ T29] audit: type=1326 audit(1749774779.881:15981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 251.238768][ T29] audit: type=1326 audit(1749774779.881:15982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 251.262417][ T29] audit: type=1326 audit(1749774779.881:15983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 251.285975][ T29] audit: type=1326 audit(1749774779.881:15984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 251.310702][ T29] audit: type=1326 audit(1749774779.881:15985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 251.334400][ T29] audit: type=1326 audit(1749774779.881:15986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 251.358075][ T29] audit: type=1326 audit(1749774779.881:15987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 251.381722][ T29] audit: type=1326 audit(1749774779.881:15988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 251.421224][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.428176][T10525] Falling back ldisc for ptm0. [ 251.450789][T10388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.458713][T10387] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.467565][T10387] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.476453][T10387] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.476477][T10525] loop9: detected capacity change from 0 to 1024 [ 251.491978][T10387] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.523636][T10388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.533381][T10530] FAULT_INJECTION: forcing a failure. [ 251.533381][T10530] name failslab, interval 1, probability 0, space 0, times 0 [ 251.546116][T10530] CPU: 1 UID: 0 PID: 10530 Comm: syz.3.1913 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 251.546147][T10530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 251.546161][T10530] Call Trace: [ 251.546168][T10530] [ 251.546177][T10530] __dump_stack+0x1d/0x30 [ 251.546275][T10530] dump_stack_lvl+0xe8/0x140 [ 251.546294][T10530] dump_stack+0x15/0x1b [ 251.546310][T10530] should_fail_ex+0x265/0x280 [ 251.546410][T10530] should_failslab+0x8c/0xb0 [ 251.546433][T10530] kmem_cache_alloc_noprof+0x50/0x310 [ 251.546483][T10530] ? audit_log_start+0x365/0x6c0 [ 251.546521][T10530] audit_log_start+0x365/0x6c0 [ 251.546575][T10530] audit_seccomp+0x48/0x100 [ 251.546610][T10530] ? __seccomp_filter+0x68c/0x10d0 [ 251.546656][T10530] __seccomp_filter+0x69d/0x10d0 [ 251.546688][T10530] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 251.546710][T10530] ? vfs_write+0x75e/0x8e0 [ 251.546728][T10530] ? kmem_cache_free+0xdf/0x300 [ 251.546810][T10530] __secure_computing+0x82/0x150 [ 251.546839][T10530] syscall_trace_enter+0xcf/0x1e0 [ 251.546865][T10530] do_syscall_64+0xac/0x200 [ 251.546920][T10530] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 251.546954][T10530] ? clear_bhb_loop+0x40/0x90 [ 251.546982][T10530] ? clear_bhb_loop+0x40/0x90 [ 251.547011][T10530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.547072][T10530] RIP: 0033:0x7f2d6cd5e929 [ 251.547087][T10530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.547108][T10530] RSP: 002b:00007f2d6b3a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 251.547132][T10530] RAX: ffffffffffffffda RBX: 00007f2d6cf86080 RCX: 00007f2d6cd5e929 [ 251.547149][T10530] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000200000000300 [ 251.547208][T10530] RBP: 00007f2d6b3a6090 R08: 0000000000000000 R09: 0000000000000000 [ 251.547220][T10530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.547233][T10530] R13: 0000000000000000 R14: 00007f2d6cf86080 R15: 00007fff3126d298 [ 251.547253][T10530] [ 251.782426][T10388] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.793235][T10388] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.804720][T10388] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.814160][T10388] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.977918][T10438] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 251.999660][T10438] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 252.024205][T10438] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 252.053670][T10438] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 252.057105][T10539] loop8: detected capacity change from 0 to 512 [ 252.068478][T10539] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 252.160263][T10539] EXT4-fs (loop8): 1 truncate cleaned up [ 252.166583][T10543] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1915'. [ 252.178463][T10539] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.196130][T10539] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20000 [ 252.233625][T10438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.245633][T10438] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.266748][T10438] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.277251][T10438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.308667][T10388] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.401515][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1918'. [ 252.544546][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.544585][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.546431][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.546458][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.578828][T10563] loop3: detected capacity change from 0 to 764 [ 252.579828][T10563] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 252.609475][T10563] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1919'. [ 252.627712][T10563] netlink: 'syz.3.1919': attribute type 13 has an invalid length. [ 252.697543][T10568] loop8: detected capacity change from 0 to 1024 [ 252.715847][T10568] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.735070][T10438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.790027][T10388] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.828482][T10576] loop3: detected capacity change from 0 to 512 [ 252.842850][T10576] EXT4-fs: Ignoring removed nobh option [ 252.856399][T10576] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.1921: corrupted inode contents [ 252.872238][T10582] mmap: syz.8.1922 (10582) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 252.882817][T10576] EXT4-fs (loop3): Remounting filesystem read-only [ 252.895934][T10576] EXT4-fs (loop3): 1 truncate cleaned up [ 252.906035][T10576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.919185][ T1082] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 252.929857][ T1082] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 252.936450][T10576] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.978278][T10438] veth0_vlan: entered promiscuous mode [ 252.992563][ T1082] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 253.000458][T10438] veth1_vlan: entered promiscuous mode [ 253.023736][T10438] veth0_macvtap: entered promiscuous mode [ 253.031326][T10438] veth1_macvtap: entered promiscuous mode [ 253.041984][T10438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.053572][T10438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.062368][T10438] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.071179][T10438] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.079940][T10438] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.089908][T10438] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.109598][T10576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.120564][T10591] loop8: detected capacity change from 0 to 1024 [ 253.158396][T10591] ext4: Unknown parameter 'uid<00000000000000000000' [ 253.189449][T10600] loop4: detected capacity change from 0 to 1024 [ 253.209579][T10600] ext4: Unknown parameter 'uid<00000000000000000000' [ 253.308956][T10600] FAULT_INJECTION: forcing a failure. [ 253.308956][T10600] name failslab, interval 1, probability 0, space 0, times 0 [ 253.321740][T10600] CPU: 0 UID: 0 PID: 10600 Comm: syz.4.1925 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 253.321807][T10600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.321818][T10600] Call Trace: [ 253.321825][T10600] [ 253.321831][T10600] __dump_stack+0x1d/0x30 [ 253.321851][T10600] dump_stack_lvl+0xe8/0x140 [ 253.321942][T10600] dump_stack+0x15/0x1b [ 253.321958][T10600] should_fail_ex+0x265/0x280 [ 253.322001][T10600] should_failslab+0x8c/0xb0 [ 253.322036][T10600] kmem_cache_alloc_noprof+0x50/0x310 [ 253.322066][T10600] ? audit_log_start+0x365/0x6c0 [ 253.322104][T10600] audit_log_start+0x365/0x6c0 [ 253.322145][T10600] audit_seccomp+0x48/0x100 [ 253.322241][T10600] ? __seccomp_filter+0x68c/0x10d0 [ 253.322305][T10600] __seccomp_filter+0x69d/0x10d0 [ 253.322387][T10600] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 253.322415][T10600] ? vfs_write+0x75e/0x8e0 [ 253.322436][T10600] ? __rcu_read_unlock+0x4f/0x70 [ 253.322456][T10600] ? __fget_files+0x184/0x1c0 [ 253.322598][T10600] __secure_computing+0x82/0x150 [ 253.322623][T10600] syscall_trace_enter+0xcf/0x1e0 [ 253.322653][T10600] do_syscall_64+0xac/0x200 [ 253.322733][T10600] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 253.322760][T10600] ? clear_bhb_loop+0x40/0x90 [ 253.322787][T10600] ? clear_bhb_loop+0x40/0x90 [ 253.322814][T10600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.322904][T10600] RIP: 0033:0x7f4d463fe929 [ 253.322923][T10600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.323017][T10600] RSP: 002b:00007f4d44a67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 253.323035][T10600] RAX: ffffffffffffffda RBX: 00007f4d46625fa0 RCX: 00007f4d463fe929 [ 253.323131][T10600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 253.323221][T10600] RBP: 00007f4d44a67090 R08: 0000000000000000 R09: 0000000000000000 [ 253.323237][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.323253][T10600] R13: 0000000000000000 R14: 00007f4d46625fa0 R15: 00007fffc60156e8 [ 253.323277][T10600] [ 253.323606][T10591] FAULT_INJECTION: forcing a failure. [ 253.323606][T10591] name failslab, interval 1, probability 0, space 0, times 0 [ 253.557998][T10591] CPU: 0 UID: 0 PID: 10591 Comm: syz.8.1923 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 253.558031][T10591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.558048][T10591] Call Trace: [ 253.558055][T10591] [ 253.558063][T10591] __dump_stack+0x1d/0x30 [ 253.558092][T10591] dump_stack_lvl+0xe8/0x140 [ 253.558118][T10591] dump_stack+0x15/0x1b [ 253.558172][T10591] should_fail_ex+0x265/0x280 [ 253.558233][T10591] should_failslab+0x8c/0xb0 [ 253.558263][T10591] kmem_cache_alloc_noprof+0x50/0x310 [ 253.558298][T10591] ? audit_log_start+0x365/0x6c0 [ 253.558396][T10591] audit_log_start+0x365/0x6c0 [ 253.558436][T10591] audit_seccomp+0x48/0x100 [ 253.558528][T10591] ? __seccomp_filter+0x68c/0x10d0 [ 253.558551][T10591] __seccomp_filter+0x69d/0x10d0 [ 253.558629][T10591] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 253.558659][T10591] ? vfs_write+0x75e/0x8e0 [ 253.558683][T10591] ? __rcu_read_unlock+0x4f/0x70 [ 253.558712][T10591] ? __fget_files+0x184/0x1c0 [ 253.558798][T10591] __secure_computing+0x82/0x150 [ 253.558828][T10591] syscall_trace_enter+0xcf/0x1e0 [ 253.558859][T10591] do_syscall_64+0xac/0x200 [ 253.558883][T10591] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 253.559031][T10591] ? clear_bhb_loop+0x40/0x90 [ 253.559054][T10591] ? clear_bhb_loop+0x40/0x90 [ 253.559138][T10591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.559197][T10591] RIP: 0033:0x7fa803dde929 [ 253.559212][T10591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.559311][T10591] RSP: 002b:00007fa802447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 253.559336][T10591] RAX: ffffffffffffffda RBX: 00007fa804005fa0 RCX: 00007fa803dde929 [ 253.559359][T10591] RDX: 0000000000000000 RSI: 0000000024020000 RDI: 0000000000000008 [ 253.559371][T10591] RBP: 00007fa802447090 R08: 0000000000000000 R09: 0000000000000000 [ 253.559382][T10591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.559394][T10591] R13: 0000000000000000 R14: 00007fa804005fa0 R15: 00007ffe3454a648 [ 253.559415][T10591] [ 253.836516][T10623] loop8: detected capacity change from 0 to 1024 [ 253.894584][T10623] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.936131][T10605] loop7: detected capacity change from 0 to 1024 [ 253.943986][T10388] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.953673][T10605] EXT4-fs: Ignoring removed orlov option [ 253.959407][T10605] EXT4-fs: Ignoring removed nomblk_io_submit option [ 253.973989][T10635] loop9: detected capacity change from 0 to 1024 [ 253.981203][T10621] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1930'. [ 253.982463][T10635] ext4: Unknown parameter 'uid<00000000000000000000' [ 253.991303][T10621] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1930'. [ 254.007807][T10621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1930'. [ 254.016909][T10621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1930'. [ 254.026607][T10621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1930'. [ 254.057927][T10635] FAULT_INJECTION: forcing a failure. [ 254.057927][T10635] name failslab, interval 1, probability 0, space 0, times 0 [ 254.067390][T10605] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.070697][T10635] CPU: 0 UID: 0 PID: 10635 Comm: syz.9.1933 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 254.070750][T10635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.070830][T10635] Call Trace: [ 254.070839][T10635] [ 254.070850][T10635] __dump_stack+0x1d/0x30 [ 254.070945][T10635] dump_stack_lvl+0xe8/0x140 [ 254.070971][T10635] dump_stack+0x15/0x1b [ 254.070995][T10635] should_fail_ex+0x265/0x280 [ 254.071126][T10635] should_failslab+0x8c/0xb0 [ 254.071160][T10635] kmem_cache_alloc_noprof+0x50/0x310 [ 254.071197][T10635] ? audit_log_start+0x365/0x6c0 [ 254.071281][T10635] audit_log_start+0x365/0x6c0 [ 254.071400][T10635] audit_seccomp+0x48/0x100 [ 254.071437][T10635] ? __seccomp_filter+0x68c/0x10d0 [ 254.071470][T10635] __seccomp_filter+0x69d/0x10d0 [ 254.071501][T10635] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 254.071581][T10635] ? vfs_write+0x75e/0x8e0 [ 254.071615][T10635] __secure_computing+0x82/0x150 [ 254.071663][T10635] syscall_trace_enter+0xcf/0x1e0 [ 254.071698][T10635] do_syscall_64+0xac/0x200 [ 254.071742][T10635] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 254.071780][T10635] ? clear_bhb_loop+0x40/0x90 [ 254.071812][T10635] ? clear_bhb_loop+0x40/0x90 [ 254.071843][T10635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.071987][T10635] RIP: 0033:0x7fed2134e929 [ 254.072064][T10635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.072130][T10635] RSP: 002b:00007fed1f9b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 254.072157][T10635] RAX: ffffffffffffffda RBX: 00007fed21575fa0 RCX: 00007fed2134e929 [ 254.072178][T10635] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 254.072195][T10635] RBP: 00007fed1f9b7090 R08: 0000000000000000 R09: 0000000000000000 [ 254.072218][T10635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.072239][T10635] R13: 0000000000000000 R14: 00007fed21575fa0 R15: 00007ffebeec0668 [ 254.072373][T10635] [ 254.374612][T10648] loop8: detected capacity change from 0 to 1024 [ 254.389205][T10648] ext4: Unknown parameter 'uid<00000000000000000000' [ 254.407745][T10648] FAULT_INJECTION: forcing a failure. [ 254.407745][T10648] name failslab, interval 1, probability 0, space 0, times 0 [ 254.420578][T10648] CPU: 1 UID: 0 PID: 10648 Comm: syz.8.1938 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 254.420611][T10648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.420625][T10648] Call Trace: [ 254.420633][T10648] [ 254.420642][T10648] __dump_stack+0x1d/0x30 [ 254.420743][T10648] dump_stack_lvl+0xe8/0x140 [ 254.420765][T10648] dump_stack+0x15/0x1b [ 254.420784][T10648] should_fail_ex+0x265/0x280 [ 254.420817][T10648] should_failslab+0x8c/0xb0 [ 254.420890][T10648] kmem_cache_alloc_noprof+0x50/0x310 [ 254.420915][T10648] ? audit_log_start+0x365/0x6c0 [ 254.420948][T10648] audit_log_start+0x365/0x6c0 [ 254.420981][T10648] audit_seccomp+0x48/0x100 [ 254.421062][T10648] ? __seccomp_filter+0x68c/0x10d0 [ 254.421135][T10648] __seccomp_filter+0x69d/0x10d0 [ 254.421158][T10648] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 254.421179][T10648] ? vfs_write+0x75e/0x8e0 [ 254.421268][T10648] ? __rcu_read_unlock+0x4f/0x70 [ 254.421289][T10648] ? __fget_files+0x184/0x1c0 [ 254.421312][T10648] __secure_computing+0x82/0x150 [ 254.421333][T10648] syscall_trace_enter+0xcf/0x1e0 [ 254.421356][T10648] do_syscall_64+0xac/0x200 [ 254.421385][T10648] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 254.421410][T10648] ? clear_bhb_loop+0x40/0x90 [ 254.421477][T10648] ? clear_bhb_loop+0x40/0x90 [ 254.421498][T10648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.421519][T10648] RIP: 0033:0x7fa803dde929 [ 254.421534][T10648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.421551][T10648] RSP: 002b:00007fa802447038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 254.421607][T10648] RAX: ffffffffffffffda RBX: 00007fa804005fa0 RCX: 00007fa803dde929 [ 254.421619][T10648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001f [ 254.421631][T10648] RBP: 00007fa802447090 R08: 0000000000000000 R09: 0000000000000000 [ 254.421642][T10648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.421779][T10648] R13: 0000000000000000 R14: 00007fa804005fa0 R15: 00007ffe3454a648 [ 254.421796][T10648] [ 254.699887][T10653] loop4: detected capacity change from 0 to 1024 [ 254.707654][T10653] ext4: Unknown parameter 'uid<00000000000000000000' [ 254.797423][T10663] loop9: detected capacity change from 0 to 1024 [ 254.806879][T10663] ext4: Unknown parameter 'uid<00000000000000000000' [ 254.821468][T10650] loop3: detected capacity change from 0 to 1024 [ 254.877873][T10650] ext4: Unknown parameter 'uid<00000000000000000000' [ 254.895970][T10667] loop8: detected capacity change from 0 to 1024 [ 254.940894][T10667] ext4: Unknown parameter 'uid<00000000000000000000' [ 254.953043][T10438] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.989682][T10667] FAULT_INJECTION: forcing a failure. [ 254.989682][T10667] name failslab, interval 1, probability 0, space 0, times 0 [ 255.004811][T10667] CPU: 0 UID: 0 PID: 10667 Comm: syz.8.1943 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 255.004873][T10667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.004904][T10667] Call Trace: [ 255.004912][T10667] [ 255.004922][T10667] __dump_stack+0x1d/0x30 [ 255.004950][T10667] dump_stack_lvl+0xe8/0x140 [ 255.004974][T10667] dump_stack+0x15/0x1b [ 255.004994][T10667] should_fail_ex+0x265/0x280 [ 255.005075][T10667] should_failslab+0x8c/0xb0 [ 255.005104][T10667] kmem_cache_alloc_noprof+0x50/0x310 [ 255.005137][T10667] ? audit_log_start+0x365/0x6c0 [ 255.005206][T10667] audit_log_start+0x365/0x6c0 [ 255.005249][T10667] audit_seccomp+0x48/0x100 [ 255.005300][T10667] ? __seccomp_filter+0x68c/0x10d0 [ 255.005329][T10667] __seccomp_filter+0x69d/0x10d0 [ 255.005359][T10667] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 255.005387][T10667] ? vfs_write+0x75e/0x8e0 [ 255.005409][T10667] ? __rcu_read_unlock+0x4f/0x70 [ 255.005444][T10667] ? __fget_files+0x184/0x1c0 [ 255.005474][T10667] __secure_computing+0x82/0x150 [ 255.005502][T10667] syscall_trace_enter+0xcf/0x1e0 [ 255.005594][T10667] do_syscall_64+0xac/0x200 [ 255.005619][T10667] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 255.005651][T10667] ? clear_bhb_loop+0x40/0x90 [ 255.005677][T10667] ? clear_bhb_loop+0x40/0x90 [ 255.005724][T10667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.005751][T10667] RIP: 0033:0x7fa803dde929 [ 255.005777][T10667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.005825][T10667] RSP: 002b:00007fa802447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 255.005849][T10667] RAX: ffffffffffffffda RBX: 00007fa804005fa0 RCX: 00007fa803dde929 [ 255.005865][T10667] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 255.005880][T10667] RBP: 00007fa802447090 R08: 0000000000000000 R09: 0000000000000000 [ 255.005927][T10667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.005942][T10667] R13: 0000000000000000 R14: 00007fa804005fa0 R15: 00007ffe3454a648 [ 255.005965][T10667] [ 255.009228][T10675] loop7: detected capacity change from 0 to 1024 [ 255.102695][T10679] loop9: detected capacity change from 0 to 1024 [ 255.230386][T10683] loop3: detected capacity change from 0 to 1024 [ 255.269367][T10683] ext4: Unknown parameter 'uid<00000000000000000000' [ 255.282538][T10679] ext4: Unknown parameter 'uid<00000000000000000000' [ 255.291561][T10675] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.310701][T10679] FAULT_INJECTION: forcing a failure. [ 255.310701][T10679] name failslab, interval 1, probability 0, space 0, times 0 [ 255.323494][T10679] CPU: 0 UID: 0 PID: 10679 Comm: syz.9.1946 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 255.323528][T10679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.323543][T10679] Call Trace: [ 255.323550][T10679] [ 255.323559][T10679] __dump_stack+0x1d/0x30 [ 255.323622][T10679] dump_stack_lvl+0xe8/0x140 [ 255.323643][T10679] dump_stack+0x15/0x1b [ 255.323704][T10679] should_fail_ex+0x265/0x280 [ 255.323757][T10679] should_failslab+0x8c/0xb0 [ 255.323820][T10679] kmem_cache_alloc_noprof+0x50/0x310 [ 255.323850][T10679] ? audit_log_start+0x365/0x6c0 [ 255.323887][T10679] audit_log_start+0x365/0x6c0 [ 255.323936][T10679] audit_seccomp+0x48/0x100 [ 255.323965][T10679] ? __seccomp_filter+0x68c/0x10d0 [ 255.323993][T10679] __seccomp_filter+0x69d/0x10d0 [ 255.324020][T10679] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 255.324125][T10679] ? vfs_write+0x75e/0x8e0 [ 255.324145][T10679] ? __rcu_read_unlock+0x4f/0x70 [ 255.324170][T10679] ? __fget_files+0x184/0x1c0 [ 255.324199][T10679] __secure_computing+0x82/0x150 [ 255.324247][T10679] syscall_trace_enter+0xcf/0x1e0 [ 255.324275][T10679] do_syscall_64+0xac/0x200 [ 255.324327][T10679] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 255.324359][T10679] ? clear_bhb_loop+0x40/0x90 [ 255.324385][T10679] ? clear_bhb_loop+0x40/0x90 [ 255.324406][T10679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.324426][T10679] RIP: 0033:0x7fed2134e929 [ 255.324441][T10679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.324464][T10679] RSP: 002b:00007fed1f9b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 255.324486][T10679] RAX: ffffffffffffffda RBX: 00007fed21575fa0 RCX: 00007fed2134e929 [ 255.324500][T10679] RDX: 0000000003000003 RSI: 0000000000400000 RDI: 0000200000000000 [ 255.324514][T10679] RBP: 00007fed1f9b7090 R08: ffffffffffffffff R09: 0000000000000000 [ 255.324535][T10679] R10: 000200000006c832 R11: 0000000000000246 R12: 0000000000000001 [ 255.324550][T10679] R13: 0000000000000000 R14: 00007fed21575fa0 R15: 00007ffebeec0668 [ 255.324572][T10679] [ 255.557147][T10438] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.611061][T10695] loop9: detected capacity change from 0 to 1024 [ 255.619293][ T29] kauditd_printk_skb: 886 callbacks suppressed [ 255.619377][ T29] audit: type=1326 audit(1749774784.001:16855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10682 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 255.649529][ T29] audit: type=1326 audit(1749774784.001:16856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10682 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 255.673499][ T29] audit: type=1326 audit(1749774784.001:16857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10682 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 255.698730][ T29] audit: type=1326 audit(1749774784.221:16858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10682 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 255.723249][ T29] audit: type=1326 audit(1749774784.221:16859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10682 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 255.747112][ T29] audit: type=1326 audit(1749774784.221:16860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10682 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 255.770753][ T29] audit: type=1326 audit(1749774784.221:16861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10682 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 255.794889][ T29] audit: type=1326 audit(1749774784.221:16862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10682 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 255.819458][ T29] audit: type=1326 audit(1749774784.221:16863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10682 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 255.843169][ T29] audit: type=1326 audit(1749774784.221:16864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10682 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2d6cd5e929 code=0x7ffc0000 [ 255.851935][T10695] ext4: Unknown parameter 'uid<00000000000000000000' [ 255.887581][T10698] loop3: detected capacity change from 0 to 1024 [ 255.895379][T10698] ext4: Unknown parameter 'uid<00000000000000000000' [ 256.030786][T10712] FAULT_INJECTION: forcing a failure. [ 256.030786][T10712] name failslab, interval 1, probability 0, space 0, times 0 [ 256.035466][T10709] loop7: detected capacity change from 0 to 1024 [ 256.043496][T10712] CPU: 0 UID: 0 PID: 10712 Comm: syz.3.1955 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 256.043535][T10712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.043550][T10712] Call Trace: [ 256.043560][T10712] [ 256.043571][T10712] __dump_stack+0x1d/0x30 [ 256.043624][T10712] dump_stack_lvl+0xe8/0x140 [ 256.043654][T10712] dump_stack+0x15/0x1b [ 256.043681][T10712] should_fail_ex+0x265/0x280 [ 256.043736][T10712] should_failslab+0x8c/0xb0 [ 256.043846][T10712] kmem_cache_alloc_node_noprof+0x57/0x320 [ 256.043890][T10712] ? dup_task_struct+0x70/0x6a0 [ 256.043940][T10712] dup_task_struct+0x70/0x6a0 [ 256.043977][T10712] ? _parse_integer+0x27/0x40 [ 256.044074][T10712] copy_process+0x399/0x1fe0 [ 256.044111][T10712] ? kstrtouint+0x76/0xc0 [ 256.044159][T10712] ? kstrtouint_from_user+0x9f/0xf0 [ 256.044212][T10712] ? __rcu_read_unlock+0x4f/0x70 [ 256.044255][T10712] kernel_clone+0x16c/0x5b0 [ 256.044295][T10712] ? vfs_write+0x75e/0x8e0 [ 256.044328][T10712] __x64_sys_clone+0xe6/0x120 [ 256.044381][T10712] x64_sys_call+0x2c59/0x2fb0 [ 256.044442][T10712] do_syscall_64+0xd2/0x200 [ 256.044472][T10712] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 256.044510][T10712] ? clear_bhb_loop+0x40/0x90 [ 256.044613][T10712] ? clear_bhb_loop+0x40/0x90 [ 256.044645][T10712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.044756][T10712] RIP: 0033:0x7f2d6cd5e929 [ 256.044784][T10712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.044813][T10712] RSP: 002b:00007f2d6b3c6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 256.044842][T10712] RAX: ffffffffffffffda RBX: 00007f2d6cf85fa0 RCX: 00007f2d6cd5e929 [ 256.044863][T10712] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000025000000 [ 256.044882][T10712] RBP: 00007f2d6b3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 256.044956][T10712] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 256.044969][T10712] R13: 0000000000000001 R14: 00007f2d6cf85fa0 R15: 00007fff3126d298 [ 256.045000][T10712] [ 256.242259][T10712] loop3: detected capacity change from 0 to 1024 [ 256.244633][T10709] ext4: Unknown parameter 'uid<00000000000000000000' [ 256.271096][T10712] ext4: Unknown parameter 'uid<00000000000000000000' [ 256.437166][T10714] loop9: detected capacity change from 0 to 1024 [ 256.440791][T10721] loop7: detected capacity change from 0 to 1024 [ 256.457733][T10721] ext4: Unknown parameter 'uid<00000000000000000000' [ 256.468599][T10714] EXT4-fs: Ignoring removed orlov option [ 256.472134][T10721] FAULT_INJECTION: forcing a failure. [ 256.472134][T10721] name failslab, interval 1, probability 0, space 0, times 0 [ 256.474594][T10714] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.487843][T10721] CPU: 1 UID: 0 PID: 10721 Comm: syz.7.1958 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 256.487920][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.487937][T10721] Call Trace: [ 256.487944][T10721] [ 256.488029][T10721] __dump_stack+0x1d/0x30 [ 256.488091][T10721] dump_stack_lvl+0xe8/0x140 [ 256.488121][T10721] dump_stack+0x15/0x1b [ 256.488146][T10721] should_fail_ex+0x265/0x280 [ 256.488199][T10721] should_failslab+0x8c/0xb0 [ 256.488247][T10721] kmem_cache_alloc_noprof+0x50/0x310 [ 256.488337][T10721] ? audit_log_start+0x365/0x6c0 [ 256.488490][T10721] audit_log_start+0x365/0x6c0 [ 256.488554][T10721] audit_seccomp+0x48/0x100 [ 256.488669][T10721] ? __seccomp_filter+0x68c/0x10d0 [ 256.488744][T10721] __seccomp_filter+0x69d/0x10d0 [ 256.488770][T10721] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 256.488793][T10721] ? vfs_write+0x75e/0x8e0 [ 256.488819][T10721] ? __rcu_read_unlock+0x4f/0x70 [ 256.488918][T10721] ? __fget_files+0x184/0x1c0 [ 256.488950][T10721] __secure_computing+0x82/0x150 [ 256.488984][T10721] syscall_trace_enter+0xcf/0x1e0 [ 256.489019][T10721] do_syscall_64+0xac/0x200 [ 256.489129][T10721] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 256.489167][T10721] ? clear_bhb_loop+0x40/0x90 [ 256.489265][T10721] ? clear_bhb_loop+0x40/0x90 [ 256.489298][T10721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.489328][T10721] RIP: 0033:0x7f784f2de929 [ 256.489354][T10721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.489439][T10721] RSP: 002b:00007f784d946fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 256.489469][T10721] RAX: ffffffffffffffda RBX: 00007f784f505fa0 RCX: 00007f784f2de929 [ 256.489487][T10721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 256.489512][T10721] RBP: 00007f784d947090 R08: 0000000000000000 R09: 0000000000000000 [ 256.489530][T10721] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 256.489548][T10721] R13: 0000000000000000 R14: 00007f784f505fa0 R15: 00007ffcb26f5898 [ 256.489576][T10721] [ 256.494729][T10724] loop4: detected capacity change from 0 to 1024 [ 256.758734][T10735] loop7: detected capacity change from 0 to 512 [ 256.831424][T10737] loop3: detected capacity change from 0 to 512 [ 256.838268][T10737] EXT4-fs: Ignoring removed oldalloc option [ 256.881472][T10737] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 256.893963][T10737] EXT4-fs (loop3): orphan cleanup on readonly fs [ 256.902136][T10737] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1961: Failed to acquire dquot type 1 [ 256.915907][T10737] EXT4-fs (loop3): 1 truncate cleaned up [ 256.923393][T10737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 256.968491][T10737] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.1961: iget: bad i_size value: 360287970189639690 [ 257.054896][T10735] EXT4-fs: Ignoring removed i_version option [ 257.062406][T10735] EXT4-fs: Ignoring removed mblk_io_submit option [ 257.074887][T10714] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.196158][T10735] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 257.279630][T10735] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 257.415805][T10742] loop8: detected capacity change from 0 to 1024 [ 257.641145][T10742] ext4: Unknown parameter 'uid<00000000000000000000' [ 257.728032][T10724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.808416][T10348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.861888][T10387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.003744][T10735] team0 (unregistering): Port device team_slave_0 removed [ 258.012314][T10750] loop8: detected capacity change from 0 to 1024 [ 258.019353][T10750] ext4: Unknown parameter 'uid<00000000000000000000' [ 258.046202][T10735] team0 (unregistering): Port device team_slave_1 removed [ 258.232056][T10761] __nla_validate_parse: 1 callbacks suppressed [ 258.232072][T10761] netlink: 220 bytes leftover after parsing attributes in process `syz.9.1969'. [ 258.247501][T10761] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1969'. [ 258.256538][T10761] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1969'. [ 258.351772][T10765] loop7: detected capacity change from 0 to 1024 [ 258.361819][T10761] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1969'. [ 258.393286][T10765] ext4: Unknown parameter 'uid<00000000000000000000' [ 258.403652][T10761] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1969'. [ 258.450544][T10763] netlink: 220 bytes leftover after parsing attributes in process `syz.8.1970'. [ 258.459905][T10763] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1970'. [ 258.468918][T10763] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1970'. [ 258.500291][T10763] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1970'. [ 258.512931][T10763] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1970'. [ 258.513369][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.615860][T10770] loop9: detected capacity change from 0 to 1024 [ 258.687411][T10770] ext4: Unknown parameter 'uid<00000000000000000000' [ 258.828138][T10783] loop4: detected capacity change from 0 to 164 [ 258.905723][T10788] loop8: detected capacity change from 0 to 164 [ 259.020295][T10797] FAULT_INJECTION: forcing a failure. [ 259.020295][T10797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.033487][T10797] CPU: 1 UID: 0 PID: 10797 Comm: syz.4.1984 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 259.033522][T10797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 259.033537][T10797] Call Trace: [ 259.033544][T10797] [ 259.033559][T10797] __dump_stack+0x1d/0x30 [ 259.033585][T10797] dump_stack_lvl+0xe8/0x140 [ 259.033652][T10797] dump_stack+0x15/0x1b [ 259.033673][T10797] should_fail_ex+0x265/0x280 [ 259.033732][T10797] should_fail+0xb/0x20 [ 259.033806][T10797] should_fail_usercopy+0x1a/0x20 [ 259.033832][T10797] _copy_from_user+0x1c/0xb0 [ 259.033860][T10797] ___sys_sendmsg+0xc1/0x1d0 [ 259.033923][T10797] __x64_sys_sendmsg+0xd4/0x160 [ 259.034021][T10797] x64_sys_call+0x2999/0x2fb0 [ 259.034046][T10797] do_syscall_64+0xd2/0x200 [ 259.034114][T10797] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 259.034147][T10797] ? clear_bhb_loop+0x40/0x90 [ 259.034171][T10797] ? clear_bhb_loop+0x40/0x90 [ 259.034192][T10797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.034247][T10797] RIP: 0033:0x7f4d463fe929 [ 259.034265][T10797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.034308][T10797] RSP: 002b:00007f4d44a67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.034326][T10797] RAX: ffffffffffffffda RBX: 00007f4d46625fa0 RCX: 00007f4d463fe929 [ 259.034348][T10797] RDX: 0000000000000850 RSI: 0000200000000180 RDI: 0000000000000003 [ 259.034406][T10797] RBP: 00007f4d44a67090 R08: 0000000000000000 R09: 0000000000000000 [ 259.034418][T10797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.034429][T10797] R13: 0000000000000000 R14: 00007f4d46625fa0 R15: 00007fffc60156e8 [ 259.034447][T10797] [ 259.259259][T10800] loop3: detected capacity change from 0 to 1024 [ 259.308065][T10800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.495930][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.841941][T10823] loop8: detected capacity change from 0 to 164 [ 259.859452][T10828] loop3: detected capacity change from 0 to 512 [ 259.910742][T10828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.943870][T10828] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.152653][T10828] +}[@ (10828) used greatest stack depth: 9400 bytes left [ 260.335023][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.757209][T10836] loop4: detected capacity change from 0 to 1024 [ 260.808464][T10836] EXT4-fs: Ignoring removed orlov option [ 260.814269][T10836] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.898689][ T29] kauditd_printk_skb: 890 callbacks suppressed [ 260.898704][ T29] audit: type=1400 audit(1749774789.571:17751): avc: denied { read } for pid=10852 comm="syz.7.1999" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 260.928297][ T29] audit: type=1400 audit(1749774789.571:17752): avc: denied { open } for pid=10852 comm="syz.7.1999" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 260.967244][T10853] loop7: detected capacity change from 0 to 32768 [ 261.004678][T10836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.017095][ T29] audit: type=1326 audit(1749774789.661:17753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10855 comm="syz.9.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2134e929 code=0x7ffc0000 [ 261.040750][ T29] audit: type=1326 audit(1749774789.661:17754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10855 comm="syz.9.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2134e929 code=0x7ffc0000 [ 261.051934][ T3656] loop7: p1 p2 p3 < > [ 261.064371][ T29] audit: type=1326 audit(1749774789.661:17755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10855 comm="syz.9.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fed2134e929 code=0x7ffc0000 [ 261.070000][ T3656] loop7: p1 size 242222080 extends beyond EOD, [ 261.094540][ T29] audit: type=1326 audit(1749774789.661:17756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10855 comm="syz.9.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2134e929 code=0x7ffc0000 [ 261.101818][ T3656] truncated [ 261.128765][ T29] audit: type=1326 audit(1749774789.661:17757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10855 comm="syz.9.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fed2134e929 code=0x7ffc0000 [ 261.152299][ T29] audit: type=1326 audit(1749774789.681:17758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.7.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784f2de929 code=0x7ffc0000 [ 261.175948][ T29] audit: type=1326 audit(1749774789.681:17759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.7.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784f2de929 code=0x7ffc0000 [ 261.201124][ T29] audit: type=1326 audit(1749774789.681:17760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.7.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f784f2de929 code=0x7ffc0000 [ 261.211241][ T3656] loop7: p2 start 4294967295 is beyond EOD, truncated [ 261.322451][T10853] loop7: p1 p2 p3 < > [ 261.326848][T10853] loop7: p1 size 242222080 extends beyond EOD, truncated [ 261.335205][T10853] loop7: p2 start 4294967295 is beyond EOD, truncated [ 261.376928][T10869] loop3: detected capacity change from 0 to 164 [ 261.411479][T10869] syz.3.2006: attempt to access beyond end of device [ 261.411479][T10869] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 261.426345][T10869] syz.3.2006: attempt to access beyond end of device [ 261.426345][T10869] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 261.507349][T10875] uprobe: syz.8.2009:10875 failed to unregister, leaking uprobe [ 261.597812][ T3657] udevd[3657]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 261.598892][ T3656] udevd[3656]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 261.718413][T10387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.737598][ T3657] udevd[3657]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 261.741737][ T3656] udevd[3656]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 261.855377][T10888] loop8: detected capacity change from 0 to 1024 [ 261.892278][T10888] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.933710][T10892] loop4: detected capacity change from 0 to 1024 [ 261.956816][T10892] ext4: Unknown parameter 'uid<00000000000000000000' [ 261.965881][T10388] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.033813][T10890] loop9: detected capacity change from 0 to 1024 [ 262.094191][T10890] EXT4-fs: Ignoring removed i_version option [ 262.107478][T10890] ext4: Bad value for 'stripe' [ 262.320270][T10912] loop7: detected capacity change from 0 to 164 [ 262.508591][T10927] loop7: detected capacity change from 0 to 512 [ 262.567769][T10927] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.663574][T10923] loop4: detected capacity change from 0 to 2048 [ 262.876292][T10916] loop9: detected capacity change from 0 to 1024 [ 262.884757][T10916] EXT4-fs: Ignoring removed orlov option [ 262.890776][T10916] EXT4-fs: Ignoring removed nomblk_io_submit option [ 262.951812][T10947] IPv6: Can't replace route, no match found [ 263.328849][T10954] __nla_validate_parse: 13 callbacks suppressed [ 263.328866][T10954] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2032'. [ 263.355721][T10916] EXT4-fs mount: 2 callbacks suppressed [ 263.355739][T10916] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.420895][T10387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.435483][T10927] +}[@ (10927) used greatest stack depth: 9144 bytes left [ 263.489107][T10962] FAULT_INJECTION: forcing a failure. [ 263.489107][T10962] name failslab, interval 1, probability 0, space 0, times 0 [ 263.503094][T10962] CPU: 1 UID: 0 PID: 10962 Comm: syz.4.2034 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 263.503204][T10962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.503242][T10962] Call Trace: [ 263.503249][T10962] [ 263.503258][T10962] __dump_stack+0x1d/0x30 [ 263.503282][T10962] dump_stack_lvl+0xe8/0x140 [ 263.503304][T10962] dump_stack+0x15/0x1b [ 263.503352][T10962] should_fail_ex+0x265/0x280 [ 263.503392][T10962] should_failslab+0x8c/0xb0 [ 263.503420][T10962] kmem_cache_alloc_noprof+0x50/0x310 [ 263.503450][T10962] ? audit_log_start+0x365/0x6c0 [ 263.503511][T10962] audit_log_start+0x365/0x6c0 [ 263.503597][T10962] audit_seccomp+0x48/0x100 [ 263.503627][T10962] ? __seccomp_filter+0x68c/0x10d0 [ 263.503652][T10962] __seccomp_filter+0x69d/0x10d0 [ 263.503679][T10962] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 263.503779][T10962] ? vfs_write+0x75e/0x8e0 [ 263.503800][T10962] ? __rcu_read_unlock+0x4f/0x70 [ 263.503824][T10962] ? __fget_files+0x184/0x1c0 [ 263.503851][T10962] __secure_computing+0x82/0x150 [ 263.503903][T10962] syscall_trace_enter+0xcf/0x1e0 [ 263.503930][T10962] do_syscall_64+0xac/0x200 [ 263.503986][T10962] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 263.504015][T10962] ? clear_bhb_loop+0x40/0x90 [ 263.504038][T10962] ? clear_bhb_loop+0x40/0x90 [ 263.504085][T10962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.504108][T10962] RIP: 0033:0x7f4d463fe929 [ 263.504124][T10962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.504150][T10962] RSP: 002b:00007f4d44a67038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 263.504171][T10962] RAX: ffffffffffffffda RBX: 00007f4d46625fa0 RCX: 00007f4d463fe929 [ 263.504185][T10962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 263.504259][T10962] RBP: 00007f4d44a67090 R08: 0000000000000000 R09: 0000000000000000 [ 263.504272][T10962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.504285][T10962] R13: 0000000000000000 R14: 00007f4d46625fa0 R15: 00007fffc60156e8 [ 263.504341][T10962] [ 263.784681][T10348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.903102][T10438] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.298622][T10984] loop7: detected capacity change from 0 to 512 [ 264.317956][T10986] loop8: detected capacity change from 0 to 1024 [ 264.327666][T10984] EXT4-fs: Ignoring removed i_version option [ 264.334626][T10984] EXT4-fs: Ignoring removed mblk_io_submit option [ 264.370426][T10984] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 264.404822][T10984] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 264.582095][T10986] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.596998][T10990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2044'. [ 264.701490][T10388] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.726976][T10994] loop4: detected capacity change from 0 to 164 [ 264.784655][T10997] loop3: detected capacity change from 0 to 512 [ 264.792179][T10997] EXT4-fs: Ignoring removed oldalloc option [ 264.805157][T10997] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 264.831270][T10997] EXT4-fs (loop3): orphan cleanup on readonly fs [ 264.839304][T10997] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2046: Failed to acquire dquot type 1 [ 264.854393][T10997] EXT4-fs (loop3): 1 truncate cleaned up [ 265.673087][T10997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.955765][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 265.955784][ T29] audit: type=1326 audit(1749774794.631:18026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11008 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784f2de929 code=0x7ffc0000 [ 265.985964][ T29] audit: type=1326 audit(1749774794.631:18027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11008 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784f2de929 code=0x7ffc0000 [ 266.028899][T11001] loop9: detected capacity change from 0 to 1024 [ 266.081137][T11001] EXT4-fs: Ignoring removed orlov option [ 266.087116][T11001] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.206176][T11001] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.238743][ T29] audit: type=1400 audit(1749774794.751:18028): avc: denied { ioctl } for pid=11027 comm="syz.8.2054" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 266.264487][ T29] audit: type=1400 audit(1749774794.831:18029): avc: denied { write } for pid=11027 comm="syz.8.2054" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.498244][T11048] loop4: detected capacity change from 0 to 512 [ 266.533448][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.628742][ T29] audit: type=1400 audit(1749774795.301:18030): avc: denied { getattr } for pid=11050 comm="syz.3.2058" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 266.666025][T11048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.678701][T11048] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.711194][T11048] netlink: 'syz.4.2057': attribute type 1 has an invalid length. [ 266.719045][T11048] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2057'. [ 266.735546][T10348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.758918][T11063] loop7: detected capacity change from 0 to 164 [ 266.787740][ T29] audit: type=1326 audit(1749774795.461:18031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.9.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2134e929 code=0x7ffc0000 [ 266.811749][ T29] audit: type=1326 audit(1749774795.461:18032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.9.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fed2134e929 code=0x7ffc0000 [ 266.835376][ T29] audit: type=1326 audit(1749774795.461:18033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.9.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fed2134e963 code=0x7ffc0000 [ 266.859021][ T29] audit: type=1326 audit(1749774795.461:18034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.9.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fed2134e963 code=0x7ffc0000 [ 266.882580][ T29] audit: type=1326 audit(1749774795.461:18035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.9.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2134e929 code=0x7ffc0000 [ 266.921093][T10387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.957307][T11066] FAULT_INJECTION: forcing a failure. [ 266.957307][T11066] name failslab, interval 1, probability 0, space 0, times 0 [ 266.970027][T11066] CPU: 1 UID: 0 PID: 11066 Comm: syz.9.2062 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 266.970089][T11066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.970106][T11066] Call Trace: [ 266.970114][T11066] [ 266.970123][T11066] __dump_stack+0x1d/0x30 [ 266.970179][T11066] dump_stack_lvl+0xe8/0x140 [ 266.970256][T11066] dump_stack+0x15/0x1b [ 266.970272][T11066] should_fail_ex+0x265/0x280 [ 266.970308][T11066] should_failslab+0x8c/0xb0 [ 266.970389][T11066] kmem_cache_alloc_noprof+0x50/0x310 [ 266.970417][T11066] ? audit_log_start+0x365/0x6c0 [ 266.970493][T11066] audit_log_start+0x365/0x6c0 [ 266.970574][T11066] audit_seccomp+0x48/0x100 [ 266.970647][T11066] ? __seccomp_filter+0x68c/0x10d0 [ 266.970678][T11066] __seccomp_filter+0x69d/0x10d0 [ 266.970706][T11066] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 266.970736][T11066] ? vfs_write+0x75e/0x8e0 [ 266.970752][T11066] ? __rcu_read_unlock+0x4f/0x70 [ 266.970772][T11066] ? __fget_files+0x184/0x1c0 [ 266.970799][T11066] __secure_computing+0x82/0x150 [ 266.970866][T11066] syscall_trace_enter+0xcf/0x1e0 [ 266.970888][T11066] do_syscall_64+0xac/0x200 [ 266.970959][T11066] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 266.971059][T11066] ? clear_bhb_loop+0x40/0x90 [ 266.971142][T11066] ? clear_bhb_loop+0x40/0x90 [ 266.971168][T11066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.971193][T11066] RIP: 0033:0x7fed2134e929 [ 266.971211][T11066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.971233][T11066] RSP: 002b:00007fed1f9b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000082 [ 266.971271][T11066] RAX: ffffffffffffffda RBX: 00007fed21575fa0 RCX: 00007fed2134e929 [ 266.971286][T11066] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00002000000002c0 [ 266.971300][T11066] RBP: 00007fed1f9b7090 R08: 0000000000000000 R09: 0000000000000000 [ 266.971315][T11066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.971327][T11066] R13: 0000000000000000 R14: 00007fed21575fa0 R15: 00007ffebeec0668 [ 266.971343][T11066] [ 267.268184][T11074] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2066'. [ 267.402155][T11069] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2065'. [ 267.411357][T11069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2065'. [ 267.420377][T11069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2065'. [ 267.470033][T11069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2065'. [ 267.480024][T11069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2065'. [ 267.595857][T11081] loop3: detected capacity change from 0 to 1024 [ 267.670735][T11083] loop8: detected capacity change from 0 to 1024 [ 267.695537][T11081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.766032][T11083] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.799595][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.858142][T10388] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.902691][T11098] FAULT_INJECTION: forcing a failure. [ 267.902691][T11098] name failslab, interval 1, probability 0, space 0, times 0 [ 267.915519][T11098] CPU: 1 UID: 0 PID: 11098 Comm: syz.3.2072 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 267.915553][T11098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.915566][T11098] Call Trace: [ 267.915573][T11098] [ 267.915629][T11098] __dump_stack+0x1d/0x30 [ 267.915701][T11098] dump_stack_lvl+0xe8/0x140 [ 267.915752][T11098] dump_stack+0x15/0x1b [ 267.915768][T11098] should_fail_ex+0x265/0x280 [ 267.915899][T11098] should_failslab+0x8c/0xb0 [ 267.915922][T11098] kmem_cache_alloc_noprof+0x50/0x310 [ 267.915954][T11098] ? audit_log_start+0x365/0x6c0 [ 267.916016][T11098] audit_log_start+0x365/0x6c0 [ 267.916052][T11098] audit_seccomp+0x48/0x100 [ 267.916146][T11098] ? __seccomp_filter+0x68c/0x10d0 [ 267.916175][T11098] __seccomp_filter+0x69d/0x10d0 [ 267.916207][T11098] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 267.916236][T11098] ? vfs_write+0x75e/0x8e0 [ 267.916308][T11098] ? __rcu_read_unlock+0x4f/0x70 [ 267.916335][T11098] ? __fget_files+0x184/0x1c0 [ 267.916376][T11098] __secure_computing+0x82/0x150 [ 267.916409][T11098] syscall_trace_enter+0xcf/0x1e0 [ 267.916441][T11098] do_syscall_64+0xac/0x200 [ 267.916544][T11098] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 267.916576][T11098] ? clear_bhb_loop+0x40/0x90 [ 267.916604][T11098] ? clear_bhb_loop+0x40/0x90 [ 267.916708][T11098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.916777][T11098] RIP: 0033:0x7f2d6cd5e929 [ 267.916798][T11098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.916822][T11098] RSP: 002b:00007f2d6b3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 267.916845][T11098] RAX: ffffffffffffffda RBX: 00007f2d6cf85fa0 RCX: 00007f2d6cd5e929 [ 267.916862][T11098] RDX: 0000000000000001 RSI: 0000200000001340 RDI: 0000000000000004 [ 267.916878][T11098] RBP: 00007f2d6b3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 267.916894][T11098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.916980][T11098] R13: 0000000000000000 R14: 00007f2d6cf85fa0 R15: 00007fff3126d298 [ 267.917038][T11098] [ 268.137728][T11078] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2067'. [ 268.825658][T11122] loop4: detected capacity change from 0 to 1024 [ 268.892637][T11122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.918758][T11123] loop3: detected capacity change from 0 to 8192 [ 268.963316][T11104] loop9: detected capacity change from 0 to 1024 [ 268.995483][T10387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.007009][ T3656] loop3: p1 p3 p4 [ 269.015822][ T3656] loop3: p3 size 4294967040 extends beyond EOD, truncated [ 269.033860][T11104] EXT4-fs: Ignoring removed orlov option [ 269.039620][T11104] EXT4-fs: Ignoring removed nomblk_io_submit option [ 269.064108][T11131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.072653][ T3656] loop3: p4 start 261888 is beyond EOD, truncated [ 269.083381][T11123] loop3: p1 p3 p4 [ 269.087985][T11123] loop3: p3 size 4294967040 extends beyond EOD, truncated [ 269.095455][T11131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.121838][T11123] loop3: p4 start 261888 is beyond EOD, truncated [ 269.345717][ T3657] udevd[3657]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 269.358512][ T3656] udevd[3656]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 269.368940][T11104] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.388903][ T3657] udevd[3657]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 269.394072][ T3656] udevd[3656]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 269.693045][T11148] __nla_validate_parse: 1 callbacks suppressed [ 269.693062][T11148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2088'. [ 269.740738][T10348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.816286][T11166] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2093'. [ 269.905679][T11171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2095'. [ 270.029734][T11175] loop4: detected capacity change from 0 to 256 [ 270.104827][T11175] capability: warning: `syz.4.2095' uses 32-bit capabilities (legacy support in use) [ 270.273711][T11181] loop9: detected capacity change from 0 to 164 [ 270.306025][T11181] syz.9.2098: attempt to access beyond end of device [ 270.306025][T11181] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 270.330495][T11181] syz.9.2098: attempt to access beyond end of device [ 270.330495][T11181] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 270.355675][T11174] loop8: detected capacity change from 0 to 2048 [ 270.459004][T11174] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.591122][T11174] SELinux: Context @ is not valid (left unmapped). [ 270.762865][T11191] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 270.833939][T10388] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.060251][T11205] loop4: detected capacity change from 0 to 512 [ 271.067192][T11205] EXT4-fs: Ignoring removed oldalloc option [ 271.088443][T11205] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 271.187610][T11208] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2103'. [ 271.197483][T11208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2103'. [ 271.206502][T11208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2103'. [ 271.240886][T11205] EXT4-fs (loop4): orphan cleanup on readonly fs [ 271.248252][T11205] __quota_error: 359 callbacks suppressed [ 271.248270][T11205] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 271.263432][T11205] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 271.272846][T11205] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2105: Failed to acquire dquot type 1 [ 271.286204][T11205] EXT4-fs (loop4): 1 truncate cleaned up [ 271.632471][T11208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2103'. [ 271.734060][T11202] loop8: detected capacity change from 0 to 1024 [ 271.755963][T11202] EXT4-fs: Ignoring removed orlov option [ 271.761808][T11202] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.773482][T11208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2103'. [ 271.856783][T11202] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.949089][T11205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 272.443716][ T29] audit: type=1326 audit(1749774801.121:18391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.9.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2134e929 code=0x7ffc0000 [ 272.541321][ T29] audit: type=1326 audit(1749774801.151:18392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.9.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fed2134e929 code=0x7ffc0000 [ 272.565071][ T29] audit: type=1326 audit(1749774801.151:18393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.9.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2134e929 code=0x7ffc0000 [ 272.590791][ T29] audit: type=1326 audit(1749774801.151:18394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.9.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fed2134e929 code=0x7ffc0000 [ 272.753595][T10388] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.865894][T10387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.880310][ T29] audit: type=1326 audit(1749774801.531:18395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.9.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2134e929 code=0x7ffc0000 [ 272.905878][ T29] audit: type=1326 audit(1749774801.531:18396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.9.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2134e929 code=0x7ffc0000 [ 272.942369][T11231] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 273.016878][ T29] audit: type=1326 audit(1749774801.691:18397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.9.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fed2134e929 code=0x7ffc0000 [ 273.040646][ T29] audit: type=1326 audit(1749774801.691:18398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.9.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2134e929 code=0x7ffc0000 [ 273.068045][T11239] loop8: detected capacity change from 0 to 164 [ 273.072173][T11235] wireguard0: entered promiscuous mode [ 273.080503][T11235] wireguard0: entered allmulticast mode [ 273.117775][T11241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.155378][T11241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.171471][T11246] loop8: detected capacity change from 0 to 512 [ 273.182472][ T1082] tipc: Subscription rejected, illegal request [ 273.194307][T11241] loop4: detected capacity change from 0 to 512 [ 273.236112][T11246] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.2119: corrupted in-inode xattr: invalid ea_ino [ 273.280406][T11246] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.2119: couldn't read orphan inode 15 (err -117) [ 273.329381][T11246] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.438787][T10388] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.557691][T11263] loop9: detected capacity change from 0 to 512 [ 273.564444][T11263] EXT4-fs: Ignoring removed oldalloc option [ 273.571982][T11263] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 273.663299][T11263] EXT4-fs (loop9): orphan cleanup on readonly fs [ 273.670759][T11263] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.2124: Failed to acquire dquot type 1 [ 273.684052][T11263] EXT4-fs (loop9): 1 truncate cleaned up [ 273.691161][T11263] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 274.015022][T11268] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 274.470710][T11271] loop4: detected capacity change from 0 to 1024 [ 274.500040][T11271] EXT4-fs: Ignoring removed nobh option [ 274.505738][T11271] EXT4-fs: Ignoring removed bh option [ 274.594750][T11276] FAULT_INJECTION: forcing a failure. [ 274.594750][T11276] name failslab, interval 1, probability 0, space 0, times 0 [ 274.608438][T11276] CPU: 0 UID: 0 PID: 11276 Comm: syz.7.2129 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 274.608564][T11276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 274.608576][T11276] Call Trace: [ 274.608584][T11276] [ 274.608592][T11276] __dump_stack+0x1d/0x30 [ 274.608641][T11276] dump_stack_lvl+0xe8/0x140 [ 274.608661][T11276] dump_stack+0x15/0x1b [ 274.608677][T11276] should_fail_ex+0x265/0x280 [ 274.608731][T11276] should_failslab+0x8c/0xb0 [ 274.608761][T11276] kmem_cache_alloc_noprof+0x50/0x310 [ 274.608833][T11276] ? audit_log_start+0x365/0x6c0 [ 274.608868][T11276] audit_log_start+0x365/0x6c0 [ 274.608907][T11276] audit_seccomp+0x48/0x100 [ 274.608982][T11276] ? __seccomp_filter+0x68c/0x10d0 [ 274.609011][T11276] __seccomp_filter+0x69d/0x10d0 [ 274.609058][T11276] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 274.609138][T11276] ? vfs_write+0x75e/0x8e0 [ 274.609157][T11276] ? __rcu_read_unlock+0x4f/0x70 [ 274.609179][T11276] ? __fget_files+0x184/0x1c0 [ 274.609202][T11276] __secure_computing+0x82/0x150 [ 274.609281][T11276] syscall_trace_enter+0xcf/0x1e0 [ 274.609308][T11276] do_syscall_64+0xac/0x200 [ 274.609336][T11276] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 274.609369][T11276] ? clear_bhb_loop+0x40/0x90 [ 274.609391][T11276] ? clear_bhb_loop+0x40/0x90 [ 274.609448][T11276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.609477][T11276] RIP: 0033:0x7f784f2de929 [ 274.609496][T11276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.609598][T11276] RSP: 002b:00007f784d947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 274.609684][T11276] RAX: ffffffffffffffda RBX: 00007f784f505fa0 RCX: 00007f784f2de929 [ 274.609697][T11276] RDX: 0000000000000001 RSI: 0000200000001340 RDI: 0000000000000004 [ 274.609711][T11276] RBP: 00007f784d947090 R08: 0000000000000000 R09: 0000000000000000 [ 274.609727][T11276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.609743][T11276] R13: 0000000000000000 R14: 00007f784f505fa0 R15: 00007ffcb26f5898 [ 274.609767][T11276] [ 274.842199][T11271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.921754][T10387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.102303][T11284] pim6reg1: entered promiscuous mode [ 275.107684][T11284] pim6reg1: entered allmulticast mode [ 275.232233][T11290] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2133'. [ 275.364720][T10348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.572090][T11309] veth0_to_batadv: mtu less than device minimum [ 275.805760][T11314] loop7: detected capacity change from 0 to 1024 [ 275.815122][T11314] EXT4-fs: Ignoring removed orlov option [ 275.820908][T11314] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.843196][T11314] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.076035][T10438] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.128385][T11324] loop7: detected capacity change from 0 to 764 [ 276.139927][T11324] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 276.259479][ T29] kauditd_printk_skb: 675 callbacks suppressed [ 276.259497][ T29] audit: type=1326 audit(1749774804.931:19070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa803dd58e7 code=0x7ffc0000 [ 276.294249][ T29] audit: type=1326 audit(1749774804.931:19071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa803d7ab19 code=0x7ffc0000 [ 276.318633][ T29] audit: type=1326 audit(1749774804.931:19072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fa803dde929 code=0x7ffc0000 [ 276.350648][ T29] audit: type=1326 audit(1749774804.941:19073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa803dd58e7 code=0x7ffc0000 [ 276.375064][ T29] audit: type=1326 audit(1749774804.941:19074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa803d7ab19 code=0x7ffc0000 [ 276.387469][T11329] 9pnet: Could not find request transport: 0xffffffffffffffff [ 276.402605][ T29] audit: type=1326 audit(1749774804.941:19075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fa803dde929 code=0x7ffc0000 [ 276.402646][ T29] audit: type=1326 audit(1749774804.951:19076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa803dd58e7 code=0x7ffc0000 [ 276.457302][ T29] audit: type=1326 audit(1749774804.951:19077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa803d7ab19 code=0x7ffc0000 [ 276.468544][T11333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2144'. [ 276.484247][ T29] audit: type=1326 audit(1749774804.951:19078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fa803dde929 code=0x7ffc0000 [ 276.484293][ T29] audit: type=1326 audit(1749774804.961:19079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa803dd58e7 code=0x7ffc0000 [ 276.507076][T11334] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 276.589553][T11336] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2147'. [ 276.805138][T11346] loop8: detected capacity change from 0 to 8192 [ 276.936440][T11346] loop8: p1 p3 p4 [ 276.941103][T11346] loop8: p3 size 4294967040 extends beyond EOD, truncated [ 276.960307][T11346] loop8: p4 start 261888 is beyond EOD, truncated [ 277.142967][T11366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2159'. [ 277.181999][ T3656] udevd[3656]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 277.184869][ T3657] udevd[3657]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 277.246220][ T3656] udevd[3656]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 277.247312][T11371] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 277.265594][ T3657] udevd[3657]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 277.318086][ T3656] udevd[3656]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 277.377917][T11374] veth0_to_batadv: mtu less than device minimum [ 277.431462][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2156'. [ 277.752839][T11379] loop7: detected capacity change from 0 to 164 [ 277.762417][T11379] syz.7.2162: attempt to access beyond end of device [ 277.762417][T11379] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 277.781247][T11379] syz.7.2162: attempt to access beyond end of device [ 277.781247][T11379] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 278.023240][T11395] loop9: detected capacity change from 0 to 164 [ 278.072670][T11399] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2170'. [ 278.226716][T11406] loop7: detected capacity change from 0 to 512 [ 278.240673][T11402] netlink: 220 bytes leftover after parsing attributes in process `syz.9.2171'. [ 278.249824][T11402] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2171'. [ 278.258984][T11402] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2171'. [ 278.283955][T11406] EXT4-fs: Ignoring removed i_version option [ 278.294342][T11406] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.306441][T11402] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2171'. [ 278.353101][T11406] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 278.391387][T11406] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 278.885539][T11442] FAULT_INJECTION: forcing a failure. [ 278.885539][T11442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.900243][T11442] CPU: 1 UID: 0 PID: 11442 Comm: syz.3.2183 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 278.900278][T11442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.900331][T11442] Call Trace: [ 278.900339][T11442] [ 278.900349][T11442] __dump_stack+0x1d/0x30 [ 278.900449][T11442] dump_stack_lvl+0xe8/0x140 [ 278.900474][T11442] dump_stack+0x15/0x1b [ 278.900495][T11442] should_fail_ex+0x265/0x280 [ 278.900584][T11442] should_fail+0xb/0x20 [ 278.900654][T11442] should_fail_usercopy+0x1a/0x20 [ 278.900678][T11442] _copy_from_user+0x1c/0xb0 [ 278.900707][T11442] br_ioctl_stub+0x1f0/0x860 [ 278.900731][T11442] ? ioctl_has_perm+0x257/0x2a0 [ 278.900826][T11442] ? __pfx_br_ioctl_stub+0x10/0x10 [ 278.900844][T11442] sock_ioctl+0x39c/0x610 [ 278.900924][T11442] ? __pfx_sock_ioctl+0x10/0x10 [ 278.900957][T11442] __se_sys_ioctl+0xce/0x140 [ 278.900993][T11442] __x64_sys_ioctl+0x43/0x50 [ 278.901029][T11442] x64_sys_call+0x19a8/0x2fb0 [ 278.901100][T11442] do_syscall_64+0xd2/0x200 [ 278.901138][T11442] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 278.901166][T11442] ? clear_bhb_loop+0x40/0x90 [ 278.901259][T11442] ? clear_bhb_loop+0x40/0x90 [ 278.901305][T11442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.901331][T11442] RIP: 0033:0x7f2d6cd5e929 [ 278.901350][T11442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.901371][T11442] RSP: 002b:00007f2d6b3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.901471][T11442] RAX: ffffffffffffffda RBX: 00007f2d6cf85fa0 RCX: 00007f2d6cd5e929 [ 278.901487][T11442] RDX: 0000200000000080 RSI: 00000000000089a1 RDI: 0000000000000005 [ 278.901502][T11442] RBP: 00007f2d6b3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 278.901514][T11442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.901525][T11442] R13: 0000000000000000 R14: 00007f2d6cf85fa0 R15: 00007fff3126d298 [ 278.901543][T11442] [ 279.141702][T11445] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 279.166688][T11447] loop8: detected capacity change from 0 to 512 [ 279.231201][T11452] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 279.340876][T11454] loop3: detected capacity change from 0 to 1024 [ 279.351971][T11454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.411861][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.443297][T11462] wireguard0: entered promiscuous mode [ 279.448845][T11462] wireguard0: entered allmulticast mode [ 279.586121][T11456] loop9: detected capacity change from 0 to 1024 [ 279.596715][T11456] EXT4-fs: Ignoring removed orlov option [ 279.602492][T11456] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.674908][T11456] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.992415][T10348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.054079][T11474] loop3: detected capacity change from 0 to 1024 [ 280.122340][T11474] EXT4-fs: Ignoring removed orlov option [ 280.128095][T11474] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.148810][T11494] loop9: detected capacity change from 0 to 8192 [ 280.211574][ T3656] loop9: p1 p3 p4 [ 280.216318][ T3656] loop9: p3 size 4294967040 extends beyond EOD, truncated [ 280.224642][ T3656] loop9: p4 start 261888 is beyond EOD, truncated [ 280.225365][T11474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.245408][T11494] loop9: p1 p3 p4 [ 280.250565][T11494] loop9: p3 size 4294967040 extends beyond EOD, truncated [ 280.267032][T11505] loop4: detected capacity change from 0 to 164 [ 280.283866][T11494] loop9: p4 start 261888 is beyond EOD, truncated [ 280.303085][ T2997] loop9: p1 p3 p4 [ 280.319547][ T2997] loop9: p3 size 4294967040 extends beyond EOD, truncated [ 280.333333][ T2997] loop9: p4 start 261888 is beyond EOD, truncated [ 280.357232][T11509] loop4: detected capacity change from 0 to 164 [ 280.389341][ T3656] udevd[3656]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 280.389623][ T3657] udevd[3657]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 280.460498][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 280.486352][ T3657] udevd[3657]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 280.506867][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 280.575081][T11513] __nla_validate_parse: 21 callbacks suppressed [ 280.575098][T11513] netlink: 220 bytes leftover after parsing attributes in process `syz.8.2206'. [ 280.591922][T11513] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2206'. [ 280.601575][T11513] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2206'. [ 280.633067][T11517] loop9: detected capacity change from 0 to 8192 [ 280.636839][T11513] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2206'. [ 280.668449][T11513] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2206'. [ 280.681783][ T3656] loop9: p2 p3 p4 [ 280.685839][ T3656] loop9: p2 size 327551 extends beyond EOD, truncated [ 280.709262][ T3656] loop9: p3 size 16776960 extends beyond EOD, truncated [ 280.722644][ T3656] loop9: p4 size 3599499392 extends beyond EOD, truncated [ 280.740485][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.785047][T11532] loop8: detected capacity change from 0 to 512 [ 280.791869][T11517] loop9: p2 p3 p4 [ 280.797481][T11517] loop9: p2 size 327551 extends beyond EOD, truncated [ 280.813995][T11517] loop9: p3 size 16776960 extends beyond EOD, truncated [ 280.829892][T11531] loop7: detected capacity change from 0 to 164 [ 280.871429][T11517] loop9: p4 size 3599499392 extends beyond EOD, truncated [ 280.977641][T11534] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2213'. [ 280.986888][T11534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2213'. [ 280.996022][T11534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2213'. [ 281.018131][T11534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2213'. [ 281.033236][T11534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2213'. [ 281.143689][T11542] loop8: detected capacity change from 0 to 8192 [ 281.156465][T11553] loop3: detected capacity change from 0 to 1024 [ 281.177549][T11553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.221355][ T3656] loop8: p1 p3 p4 [ 281.233201][ T3656] loop8: p3 size 4294967040 extends beyond EOD, truncated [ 281.267690][ T3656] loop8: p4 start 261888 is beyond EOD, truncated [ 281.371711][T11542] loop8: p1 p3 p4 [ 281.377272][T11542] loop8: p3 size 4294967040 extends beyond EOD, truncated [ 281.393467][T11542] loop8: p4 start 261888 is beyond EOD, truncated [ 281.620588][T11573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.638057][T11576] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 281.654059][T11573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.854134][ T56] tipc: Subscription rejected, illegal request [ 281.891818][T11573] loop9: detected capacity change from 0 to 512 [ 281.936608][T11559] ================================================================== [ 281.944774][T11559] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 281.952915][T11559] [ 281.955256][T11559] write to 0xffff88813d2962e8 of 8 bytes by task 11553 on cpu 0: [ 281.963004][T11559] filemap_splice_read+0x47e/0x6b0 [ 281.968181][T11559] ext4_file_splice_read+0x8f/0xb0 [ 281.973560][T11559] splice_direct_to_actor+0x26c/0x680 [ 281.982112][T11559] do_splice_direct+0xda/0x150 [ 281.987322][T11559] do_sendfile+0x380/0x650 [ 281.992480][T11559] __x64_sys_sendfile64+0x105/0x150 [ 281.998165][T11559] x64_sys_call+0xb39/0x2fb0 [ 282.002788][T11559] do_syscall_64+0xd2/0x200 [ 282.007321][T11559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.013238][T11559] [ 282.015570][T11559] write to 0xffff88813d2962e8 of 8 bytes by task 11559 on cpu 1: [ 282.023310][T11559] filemap_splice_read+0x47e/0x6b0 [ 282.028447][T11559] ext4_file_splice_read+0x8f/0xb0 [ 282.033585][T11559] splice_direct_to_actor+0x26c/0x680 [ 282.038999][T11559] do_splice_direct+0xda/0x150 [ 282.043849][T11559] do_sendfile+0x380/0x650 [ 282.048289][T11559] __x64_sys_sendfile64+0x105/0x150 [ 282.053517][T11559] x64_sys_call+0xb39/0x2fb0 [ 282.058130][T11559] do_syscall_64+0xd2/0x200 [ 282.062657][T11559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.068601][T11559] [ 282.071079][T11559] value changed: 0x000000000000040b -> 0x000000000000040c [ 282.079481][T11559] [ 282.082012][T11559] Reported by Kernel Concurrency Sanitizer on: [ 282.088290][T11559] CPU: 1 UID: 0 PID: 11559 Comm: syz.3.2223 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 282.100917][T11559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.110990][T11559] ================================================================== [ 282.239756][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.