last executing test programs: 1m41.840553013s ago: executing program 32 (id=153): unshare(0x4020480) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, 0x0) 1m26.788022606s ago: executing program 33 (id=410): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_page_alloc\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000200)={0x800006dc, 0x5, 0xfffffff9, 0xffff, 0xb, "10f720db7cd997451fa550e401630d00"}) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000040)=0xa) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000480)={0x0, 0x20000800, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) getsockname(r9, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x80) 1m8.551446308s ago: executing program 34 (id=737): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00) 1m6.148497233s ago: executing program 0 (id=774): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0x1, 0x2, {0x0, 0x0, 0x4}, {0x2, 0x2, 0x3}, 0x1, 0x2}], 0x20) sendmsg$nl_route_sched(r0, 0x0, 0x90) 1m6.015615384s ago: executing program 0 (id=775): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000380)="$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") (fail_nth: 4) 1m6.009949995s ago: executing program 1 (id=776): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x94, 0x0}, 0x5}], 0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) 1m5.70502247s ago: executing program 0 (id=777): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000580)="b8a2", 0x2}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000000880)="8714", 0x2}, {&(0x7f0000000900)="11", 0x1}], 0x3}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, 0x0, 0x0) 1m5.652768223s ago: executing program 6 (id=780): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) unshare(0x60400) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x20}, 0x3) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="198c000030000000000000000026000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000009500000000000000b7020000000000007b9af8ff00000000b5090000fcffffffdbaaf8ffa0000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x5d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x28, 0x76, 0x61, 0x40, 0x0, 0x6, 0x2059a, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x5, 0xe}, 0xa00, 0x1, 0x6, 0x2, 0x711, 0x6, 0x7, 0x0, 0x80, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b530800000000000000012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbdfd56f1375461caaa2f19935e6996030000000000000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x81, 0xffffffff, 0x2241d13d}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') setns(r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r10, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x86, 0xae}) fcntl$lock(r10, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0xfc, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m5.100374989s ago: executing program 1 (id=783): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x40}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x5, 0x5, 0x5e, &(0x7f0000000540)="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"}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r8 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}}}, 0x24}}, 0x0) 1m5.070223581s ago: executing program 1 (id=784): close(0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_setup(0x3e76, &(0x7f0000000000)) pipe(&(0x7f0000000000)) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 1m5.051276802s ago: executing program 1 (id=785): setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='wchan\x00') sendto$packet(r0, &(0x7f00000003c0)="bc43a9dc6b58f0e301d5f1b1d9af5db1ffa29e29df25b0660914acfe512abfa44bc5f73c9905fa005404a7f9b03e920c7410a4411ec7ecd5b85cda406042ea2e3d6042455ca61325dce4c9f8baf732d8964392deb1", 0x55, 0x44050, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/13], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x7fffffffffffffff, 0xfffffffffffff288}, 0x0, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x4000000, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7, 0x0], 0x0, 0x0, 0x2}}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) clock_getres(0xfffffffffffffff5, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10, 0x0, 0x10000}, 0x18) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b80)=ANY=[@ANYBLOB="0500ecfe641e189fafc0ff045acecb5b9c6707ce465605dc6692f20a5516e0d002005379598dcac32ca576f8424b615c700fd4ef8d982f644739878d9d19c648e8f5e413b5543234894b4518e5a1d708f7b62e59ec6be14458e3ba279fdd5512756abcda141529477c9656db8415efdc857f9fd4", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40080d4}, 0x0) 1m4.844249289s ago: executing program 1 (id=786): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0x1, 0x2, {0x0, 0x0, 0x4}, {0x2, 0x2, 0x3}, 0x1, 0x2}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x90) 1m4.758494566s ago: executing program 0 (id=787): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x10008, 0x8, 0x1, 0x8, 0xa0002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$eJzs3d9rZFcdAPDvvcmkyW5qpiqyFmyLrewW3ZmksRpF2gqiTwW1vq8xmYSQSSZkJnUTiqb4BwgiKvgH+CL44KMg/RNEWNB3UVFEd/VR98qdudH8mEnGZJJZJ58PnMw598f5nnPJ3Lk/DvcGcG29EBFvRMRYRLwcETPF9LRIsd9J+XKPHr6zlKcksuytvyaRFNMO6srL4xFxs1htMiK++qWIbyQn4zZ399YX6/XadlGutja2qs3dvbtrG4urtdXa5vz83M8j4tWF2axwoX6WI+K1L/zxB9/9yRdf++Unvvm7e3++8628WZ/7UKfdEbF0oQA9dOoutbfFgXwbbV9GsCHJ+1MaG3YrAADoR36M//6I+Gj7+H8mxtpHcwAAAMAoyV6fjn8mERkAAAAwstKImI4krRRjAaYjTSuVzhjeD8aNtN5otj6+0tjZXM7nRZSjlK6s1WuzxVjhcpSSvDxXjLE9KL9yrDwfEc9ExPdnptrlylKjvjzsix8AAABwTdx8/uj5/z9m0nYeAAAAGDHlngUAAABgVDjlBwAAgNHn/B8AAABG2pfffDNP2cF7vJff3t1Zb7x9d7nWXK9s7CxVlhrbW5XVRmO1/cy+jbPqqzcaW5+MzZ371Vat2ao2d/fubTR2Nlv31o68AhsAAAC4Qs88/95vk4jY/+xUO0XxHECAI/4w7AYAgzQ27AYAQzM+7AYAQ1M6cwl7CBh1yRnzTw7e6VwrjF9dTnsAAIDBu/3hk/f/J4p5Z18bAP6fGesDANfP0bt7U0NrB3D1SucdAXhr0C0BhuV9nY+nes3v+fCOPu7/d64xZNm5GgYAAAzMdDslaaU4Tp+ONK1UIp6Ox1k5SsnKWr02W5wf/Gam9FRenmuvmZw5ZhgAAAAAAAAAAAAAAAAAAAAAAAAA6MiyJDIAAABgpEWkf0raT/OPuD3z0vTRqwPH3vr147d+eH+x1dqei5hI/jaTT5qIiNaPiumvZF4JAAAAAMM1lf/pnKcXn3PDbhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+bRw3eWDtJVxv3L5yOi3C3+eEy2PyejFBE3/p7E+KH1kogYG0D8/Xcj4la3+Ek8zrKsXLSiW/ypS45fbm+a7vHTiLg5gPhwnb2X73/e6Pb9S+OF9mf37994kS6q9/4v/c/+b6zH/ufpY+Venn3ws2rP+O9GPDveff9zED/pxD8SIi+82Gcfv/61vb2uMw5V2S3+4VjV1sZWtbm7d3dtY3G1tlrbnJ+f+9TCpxdeXZitrqzVa8XfrmG+95FfPD6t/zd6xC8f7f+J7f9SX73P4l8P7j/8QKdQ6hb/zovdf39v9YifFr99Hyvy+fzbB/n9Tv6w53766+dO6/9yj/5PntH/O331Pz7z8le+8/uuc05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERet5/WBtudJyMTZy0w+IU29jEz27c7/48XqueDqJzLZRVYfjwE0Y+LE93QszlthErGf19XnPyQAADBi/nvQf9odJAAAAAAAAAAAAAAAAAAAAOAynfOxZJMR0ffCx2PuD6erAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn+ncAAAD//+8b0g8=") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='wchan\x00') sendto$packet(r0, &(0x7f00000003c0)="bc43a9dc6b58f0e301d5f1b1d9af5db1ffa29e29df25b0660914acfe512abfa44bc5f73c9905fa005404a7f9b03e920c7410a4411ec7ecd5b85cda406042ea2e3d6042455ca61325dce4c9f8baf732d8964392deb1", 0x55, 0x44050, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/13], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x7fffffffffffffff, 0xfffffffffffff288}, 0x0, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x4000000, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7, 0x0], 0x0, 0x0, 0x2}}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) clock_getres(0xfffffffffffffff5, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10, 0x0, 0x10000}, 0x18) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b80)=ANY=[@ANYBLOB="0500ecfe641e189fafc0ff045acecb5b9c6707ce465605dc6692f20a5516e0d002005379598dcac32ca576f8424b615c700fd4ef8d982f644739878d9d19c648e8f5e413b5543234894b4518e5a1d708f7b62e59ec6be14458e3ba279fdd5512756abcda141529477c9656db8415efdc857f9fd4", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40080d4}, 0x0) 1m4.743446357s ago: executing program 6 (id=789): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x60, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m4.253265507s ago: executing program 6 (id=793): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x401, 0x70bd2c, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0xffffff}]}}}]}, 0x3c}}, 0x0) 1m4.140306117s ago: executing program 6 (id=796): setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='wchan\x00') sendto$packet(r0, &(0x7f00000003c0)="bc43a9dc6b58f0e301d5f1b1d9af5db1ffa29e29df25b0660914acfe512abfa44bc5f73c9905fa005404a7f9b03e920c7410a4411ec7ecd5b85cda406042ea2e3d6042455ca61325dce4c9f8baf732d8964392deb1", 0x55, 0x44050, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/13], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x7fffffffffffffff, 0xfffffffffffff288}, 0x0, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x4000000, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7, 0x0], 0x0, 0x0, 0x2}}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) clock_getres(0xfffffffffffffff5, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10, 0x0, 0x10000}, 0x18) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b80)=ANY=[@ANYBLOB="0500ecfe641e189fafc0ff045acecb5b9c6707ce465605dc6692f20a5516e0d002005379598dcac32ca576f8424b615c700fd4ef8d982f644739878d9d19c648e8f5e413b5543234894b4518e5a1d708f7b62e59ec6be14458e3ba279fdd5512756abcda141529477c9656db8415efdc857f9fd4", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40080d4}, 0x0) 1m3.946358382s ago: executing program 0 (id=799): shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000900)={0xf, 0x8, 0xfa00, {r2, 0x2}}, 0x10) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) wait4(r3, 0x0, 0x40000000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_clone3(&(0x7f00000002c0)={0x240200300, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x23}, &(0x7f0000000100)=""/118, 0x76, &(0x7f0000000180)=""/251, &(0x7f0000000280)=[r3], 0x1}, 0x58) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}]}}}]}, 0x40}}, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f00000003c0)={0x464, 0x10, 0x2, 0x5, 0x70bd2a, 0x25dfdbfc, {0x7, 0x0, 0x6}, [@nested={0xd7, 0x85, 0x0, 0x1, [@typed={0x8, 0x14d, 0x0, 0x0, @u32=0xab}, @generic="e3b04ed8c882886a0277e2956c5a01087cb1027f5b9b0e105c96034d3d6e7188a9f10b32e65d79dfd06ae12491e682bdb445275e8e2c953b2395ce582b064dcb98f5a3dca9b95181d5d22befdbefbfc532911e165e02e27a1a701350227d131d0a83e23e3a2dc936873b6666bc56d6d9b6063c71899eea4f013f825cd421e247daec91bb07b7206472bd8abf997733d9192ef091c30e8cdf291cbf88f8c5516bc311a77fdd0e4a7ded4275156c66f034db85398b9641f1", @typed={0x8, 0x3f, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0xa, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x122}]}, @nested={0x32a, 0x65, 0x0, 0x1, [@nested={0x4, 0x94}, @nested={0x4, 0x3c}, @generic="5bf3daa45e74dcaf0d51b403fda0758d669b8b5bd8bf08d0aa9ea9c5f20cb9a9aad9ec35c9088d6d7c55b04e037d727931f23b18a418cc557b", @typed={0x8, 0x86, 0x0, 0x0, @ipv4=@loopback}, @generic="d5ecf9f1bb9cee22cacaf8cd7887b425834cc8fbb0ddbc2533587bf55152e70cbdd0c2963e2900a608ba529285418b3b01c701ced2c0b8b592a6e8ec40d1dcedf388b20b19546336c4ef446e3714c0be96e41bb294c2dae2d278cde4c925d905a787ddcc069ccd3fd027e6fd998dd0", @generic="ccc10de8fbc83fbf4fe73a107860d34f5d1807a4bb720b1d4ba1348dcec48d1b242c708fb882660df4630b092a7db0ac989635bb7ae98b670f084f634292fa232640e7d76a60a6eb970673a8bd1b5f750d75e8b26b2f9deb59b70df788589f753ac90a1d4ce0ee14f03729c5f58aa667eac49c59f8b1b5b7527290e55eeb1ca80485ee2a337197b3b32929ec7f1f5e844185f4b603f9a2b5b4b2a517aa4d01bb6eb7a601c34cb0f66033f00e550c51899a9394a68098cfecaafcca247ed7e7ad9088c9cf4716040a9dccadf654db5d7fda1fd956a3f6f0bf6f1f737c3842a94a5f8cc2", @generic="bf62da937076971c93b7c7638d815395ea8a99325686b0999e1ebab7e5358d5e03deb4c527b64c5995733437851e8f7ba64e09cdd47c858dcd3a3f92f48cde46094d0e044a99ba912e39f7b022cce541a75215ebb01c18c4968a89a27cbed0c5df085591789708bd544d687c9e2d6305994196d5bd215a9e9fa930dff05e36672f66c3fe1268687d2e22c5ccdd12881e9f1f647938a35d73bb7abd816bbb616d558f492837bbd4916fc9b978dfff0cd81cf00c2405ff93a6fe07717be0e890a858169163bff6ccad4ba231fb1e418c1e2570ff30", @generic="1bfe5e42433e6d93b662d77a18781fd4ccdb651f09b9bc0b5fbb1dd6f2487f176aac5aca9f17a011fa31c3951de79dec0d2ea33b1a28b0425c9fb72f521a249c1a685bb3784049a786ee657fea843e926e6a61b5f8e0e6db951955713a06b2f14d20964207f83dd321218e3a4a9eb06a7916804659e757c2a2354dbb45190a58507649eb8c73fcafb8b97436df108921bf4b73568f3e4afea1edc506ee1f4934b6a1210e75659af6a3c5e829d0e535822eedfcc23884ac"]}, @typed={0x8, 0x7d, 0x0, 0x0, @uid=r6}, @nested={0x43, 0x125, 0x0, 0x1, [@typed={0x8, 0x8e, 0x0, 0x0, @fd=r7}, @nested={0x4, 0x137}, @nested={0x4, 0x5d}, @typed={0xc, 0x7c, 0x0, 0x0, @u64=0x51fc}, @nested={0x4, 0x136}, @generic="eaf2123e46c556a2107aee1e72179ade9e041f041a94fb1d6bf3471c93ecfa"]}]}, 0x464}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) 1m3.85096229s ago: executing program 6 (id=800): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095", @ANYBLOB="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", @ANYRESHEX], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="210025bd7000144529bf01"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8d0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000010}, 0x4001) 1m3.640967287s ago: executing program 1 (id=801): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r3, 0x400, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x23, &(0x7f0000000040)=""/24, &(0x7f0000000080)=0x18) (async) lsetxattr$security_selinux(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)='system_u:object_r:utempter_exec_t:s0\x00', 0x25, 0x1) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 32) fdatasync(r0) 1m3.640781768s ago: executing program 35 (id=801): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r3, 0x400, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x23, &(0x7f0000000040)=""/24, &(0x7f0000000080)=0x18) (async) lsetxattr$security_selinux(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)='system_u:object_r:utempter_exec_t:s0\x00', 0x25, 0x1) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 32) fdatasync(r0) 1m3.134126008s ago: executing program 0 (id=807): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x40}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x5, 0x5, 0x5e, &(0x7f0000000540)="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"}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r8 = socket(0x10, 0x803, 0x4) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}}}, 0x24}}, 0x0) 1m3.095468411s ago: executing program 36 (id=807): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x40}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x5, 0x5, 0x5e, &(0x7f0000000540)="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"}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r8 = socket(0x10, 0x803, 0x4) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}}}, 0x24}}, 0x0) 1m2.961200802s ago: executing program 6 (id=810): setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='wchan\x00') sendto$packet(r0, &(0x7f00000003c0)="bc43a9dc6b58f0e301d5f1b1d9af5db1ffa29e29df25b0660914acfe512abfa44bc5f73c9905fa005404a7f9b03e920c7410a4411ec7ecd5b85cda406042ea2e3d6042455ca61325dce4c9f8baf732d8964392deb1", 0x55, 0x44050, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/13], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x7fffffffffffffff, 0xfffffffffffff288}, 0x0, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x4000000, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7, 0x0], 0x0, 0x0, 0x2}}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) clock_getres(0xfffffffffffffff5, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10, 0x0, 0x10000}, 0x18) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b80)=ANY=[@ANYBLOB="0500ecfe641e189fafc0ff045acecb5b9c6707ce465605dc6692f20a5516e0d002005379598dcac32ca576f8424b615c700fd4ef8d982f644739878d9d19c648e8f5e413b5543234894b4518e5a1d708f7b62e59ec6be14458e3ba279fdd5512756abcda141529477c9656db8415efdc857f9fd4", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40080d4}, 0x0) 1m2.924677655s ago: executing program 37 (id=810): setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='wchan\x00') sendto$packet(r0, &(0x7f00000003c0)="bc43a9dc6b58f0e301d5f1b1d9af5db1ffa29e29df25b0660914acfe512abfa44bc5f73c9905fa005404a7f9b03e920c7410a4411ec7ecd5b85cda406042ea2e3d6042455ca61325dce4c9f8baf732d8964392deb1", 0x55, 0x44050, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/13], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x7fffffffffffffff, 0xfffffffffffff288}, 0x0, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x4000000, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7, 0x0], 0x0, 0x0, 0x2}}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) clock_getres(0xfffffffffffffff5, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10, 0x0, 0x10000}, 0x18) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b80)=ANY=[@ANYBLOB="0500ecfe641e189fafc0ff045acecb5b9c6707ce465605dc6692f20a5516e0d002005379598dcac32ca576f8424b615c700fd4ef8d982f644739878d9d19c648e8f5e413b5543234894b4518e5a1d708f7b62e59ec6be14458e3ba279fdd5512756abcda141529477c9656db8415efdc857f9fd4", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40080d4}, 0x0) 1m0.085686466s ago: executing program 8 (id=802): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000200"/48], 0x60}, 0x1, 0x7}, 0x0) 1m0.020522232s ago: executing program 8 (id=824): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x10008, 0x8, 0x1, 0x8, 0xa0002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='wchan\x00') sendto$packet(r0, &(0x7f00000003c0)="bc43a9dc6b58f0e301d5f1b1d9af5db1ffa29e29df25b0660914acfe512abfa44bc5f73c9905fa005404a7f9b03e920c7410a4411ec7ecd5b85cda406042ea2e3d6042455ca61325dce4c9f8baf732d8964392deb1", 0x55, 0x44050, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/13], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x7fffffffffffffff, 0xfffffffffffff288}, 0x0, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x4000000, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7, 0x0], 0x0, 0x0, 0x2}}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) clock_getres(0xfffffffffffffff5, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10, 0x0, 0x10000}, 0x18) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b80)=ANY=[@ANYBLOB="0500ecfe641e189fafc0ff045acecb5b9c6707ce465605dc6692f20a5516e0d002005379598dcac32ca576f8424b615c700fd4ef8d982f644739878d9d19c648e8f5e413b5543234894b4518e5a1d708f7b62e59ec6be14458e3ba279fdd5512756abcda141529477c9656db8415efdc857f9fd4", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40080d4}, 0x0) 59.742052244s ago: executing program 8 (id=825): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) recvmmsg(r2, &(0x7f0000000fc0)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000580)=""/198, 0xc6}, 0xd73}, {{&(0x7f0000000680)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000700)=""/184, 0xb8}, {&(0x7f00000007c0)=""/223, 0xdf}, {&(0x7f00000001c0)}, {&(0x7f0000000900)=""/111, 0x6f}, {&(0x7f0000000c40)=""/121, 0x79}, {&(0x7f0000000cc0)=""/242, 0xf2}, {&(0x7f0000000dc0)=""/254, 0xfe}], 0x7, &(0x7f0000000f40)=""/115, 0x73}, 0x7fffffff}], 0x2, 0x220, 0x0) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 58.302561461s ago: executing program 8 (id=842): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x18}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00'}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) 58.278777453s ago: executing program 38 (id=842): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x18}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00'}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) 6.713378464s ago: executing program 2 (id=2089): fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) unshare(0x22000400) socket(0x2, 0x80805, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b00000000000000000300000000000000080001"], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r3, 0x3, 0x3, &(0x7f00000010c0)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x989680}) time(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61129f00000000006113bb0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa7664012d42961e1445ce83def332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5bb6f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a976774"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x8000, 0x8000, 0x2, 0xfffffffe, {{0x1d, 0x4, 0x1, 0x2, 0x74, 0x66, 0x0, 0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@rr={0x7, 0x13, 0x81, [@loopback, @broadcast, @multicast2, @multicast2]}, @timestamp={0x44, 0x14, 0x8b, 0x0, 0x6, [0x7, 0xf, 0x8, 0x8]}, @timestamp={0x44, 0x1c, 0xd0, 0x0, 0x5, [0x7, 0xc, 0x1, 0x0, 0x63, 0x2]}, @timestamp_prespec={0x44, 0x1c, 0x86, 0x3, 0x9, [{@remote, 0xa}, {@private=0xa010100, 0xf7b}, {@rand_addr=0x64010101, 0x8001}]}, @end]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) 6.51587533s ago: executing program 2 (id=2094): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r1, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4082, 0xff2}], 0x1, 0x73, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 6.477352013s ago: executing program 2 (id=2097): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) iopl(0x3) 6.39045631s ago: executing program 2 (id=2098): bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd79) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast1, 0x4}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="55b6d09f9a75a82eeb64331fd0f68258", 0x10}, {&(0x7f0000000340)="bcdbab04245ace088e8fde2bb990d9d929f27eaf7b54d017b8cd158c382ce8f920c7d9bb426b50ebf826a1df2f292ba21db796cb51d17a266aee427eb5944c9337d74af05347f7d72537b3699b3e008dd14ba036715783e7f851186864d8a4fc0096e40dcfcf45c082faf035979ecd706105dea1c4faa998a8dc9b0a48713576163d5c54401ad707755c7285ab8839e4643c0587ba95c5c92dc5c2ed0ccaceac2eddd8be4f92836b0654ae80f277f55854c2fbd005175223a6b82fd3f0d623bf83433e2efa188e72b4e09d3159c24e9e3698f7db0c5e5896ccbcb816955f05ad061cb0f69f0508430673c8b5353c9965dd5ecebb", 0xf4}, {&(0x7f0000000440)="919341707a742fed2c6d5b2abb2492a4985b8355c26d0323786c54cf60e8d8cbe42a1226b25b5b7a1fbac55264dee7ec07e42713c053d73eb328927292933bbfda3687553b479bc9598ee2286b0a307467474ced60faaa006757d4a2916794d6df9720829f4f7dd2a1722135866145d42a873a230b63f6839009651027829150c213823f84969343b7f675066c6584ddc5ae7cb32f97ef7f005f6000f3ad9c1b72ad39ee1776f442cfecb5135a431baddab728f125857dfa0513bae039", 0xbd}], 0x3, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3e}, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x50}, 0xf311696f95c6a0c3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000100)=0x1f, 0x4) timerfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) write$binfmt_register(r7, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0db7) fchown(r8, 0x0, 0xee01) fchown(r8, 0xffffffffffffffff, 0xee01) 6.290749738s ago: executing program 2 (id=2099): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x18000, &(0x7f0000000200)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6e6f646f74732c6e6f646f74732c646f74732c646f74732c646f74732c00009191ba4a9b6388d54828a3c3830c42987338a9190197eb172a21b7cfa7523e2b311d1f21fe773c1a557203941edefa8945730f6addf5d620d186e7a427df2c849c4743dde508a71789e24605df9a7108223b334f24b6ef3973fd06e3c8d4d12c"], 0x1, 0x1ba, &(0x7f00000002c0)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/19], 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) 6.031835019s ago: executing program 2 (id=2108): r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x80c2, 0x13a) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffff9c, &(0x7f0000000200)='./file1\x00', 0x46102, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x3df4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r3, 0x0, 0x100a}, 0x18) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000740), 0x301000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000a00)={0x1, 0x4, 0x1, 'queue0\x00', 0xffffffff}) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@noprefix}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r6 = socket$phonet(0x23, 0x2, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x938, 0xffffffff}) ioctl$SIOCPNDELRESOURCE(r6, 0x89ef, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = dup(r7) sendmsg$tipc(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)="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", 0x801, 0x4000}, 0x4080) r9 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r9, &(0x7f0000000700)={&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/65, 0x41}], 0x1, &(0x7f00000008c0)=[@cswp={0x58, 0x114, 0x7, {{0x401, 0x3}, &(0x7f0000000280)=0x6, &(0x7f0000000500)=0x1, 0x7, 0x4, 0x4, 0x3, 0x7f603e36b622d1cb, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x0, 0x8}, &(0x7f0000000540)=0x13, &(0x7f0000000580)=0x5, 0x3, 0x0, 0x1, 0x7, 0x70, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x4, 0x3}, &(0x7f0000000680)=0x6, &(0x7f00000006c0)=0x22, 0x1, 0x1000, 0x8, 0x3, 0x14, 0xf1}}], 0x108, 0x20008010}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$can_j1939(0x1d, 0x2, 0x7) 6.012236141s ago: executing program 39 (id=2108): r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x80c2, 0x13a) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffff9c, &(0x7f0000000200)='./file1\x00', 0x46102, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x3df4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r3, 0x0, 0x100a}, 0x18) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000740), 0x301000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000a00)={0x1, 0x4, 0x1, 'queue0\x00', 0xffffffff}) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@noprefix}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r6 = socket$phonet(0x23, 0x2, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x938, 0xffffffff}) ioctl$SIOCPNDELRESOURCE(r6, 0x89ef, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = dup(r7) sendmsg$tipc(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)="61115165c9d556e2b2a5ca22d3352727857e8d462562102c230fd798f201cd609a9422c0bd10510f8f38e27021f43532eb10699f4b6cba6f00c748a4499d4aca7dfc3a2c6c5a21007c6bf114ea076793d91b9d8b38af3b64ee1f6b785af24bd6f74b6ccaced2c42f61ef97b3ae7114f27cd8f8e54e6ccec99ad0e152e474f541ff08b4053f779030645d88949d4a73fb68deecc32ca530dad862ed63950178b1ab88ad44af34fc2c2145b51e658f003169691aa64b40c7c4bd05c13774800cf04f9a970eb9fa95a409aca291fcba17b2beca7da372f7eae2d4f6dbcb98c1b5d1d5786060e215ba8298abedba590d1d62fa8ef5af88c4b0ca33ec6d6b221708c32637d3e01acdab97c3b68570adfb626ebc0ae398bf7e8ef68eb428fcf488b8255e9ebf07c96e39716552a1e3cd9f6d5fe39fa9ca7609be20ae16e469ce48eec12ec1fae186e6b8d0c87539839a4f5a8d8b62ad0ef2199075798bee5cb554ab2f481be47b8384f61f925f6e33c84e2e6e7faca595f92c2236bcf83816cee672df5fdcd37959da3cf556eb94439fdfacb70c70ae78ad3f5f9af1eaf050ad2e04f4ba88d2ad31eab87df22d363fc2a155c20134f00fdfb2323b2747463251d3ce9b19efbeb4d172c7c468778a9ba5d9aabcadfeca12c53a33c7dbd90d231e79ffcf5644e542a455e2aee74b364495c0f95965241d9b5d138f89da562bc0b7405a947b66f66cc26449fe8e31d5e5a498abe32ee27f82a99d64567997e7da216447d82639fce1f6b8a374f9db69bae03062d05b8bec5b1f1fcfbb7d20ff8d75c1ba173497997c7860e48c9d2ee3b77ee2435c98a1cbb303089f5f97a23f770b1e22bb9fddc876e449fb431b43aec192dd7b30add66109de93b0192f6af8613596afc802a16d62a64a3cb26f9e695a0b03185eefc87b1ee513493dbc9e8fdde0eaaa2ab4469c1ad3ce40db05e2fedb5814c2dd1058130b5d6d4ea69c5ea591320e784c0e6efebfe2a3e1942bbffbf5a465c64b7312d40d209f3c61944ac96e109a1aa9c462030a89556a9725636dab6d927567ad430811e8d42fbb11d4afcc450e71a5e11269cccf5940b1ce8f75914fb772c4fe950d41ac8a2806044f694965b089fa7ec5f1397c3e426e021b28e494381706a3a4dd6fd9e09a786bd5a7027b96023849bcecce71daa268676ada599b9224b5a629472140282b17780a9906ce86a669946b81e681aea063151c13ec726e8cdfc6827587f473408af8433fa24a4a02d9ce6ddd2a771705166cd04ec500a2f59268ab6ce46c646aeac8530838a2f9c4461feaa902059de412b2f6212a2d3b78368c61558f336444b967f33fb42f03440bf8f4d4968f538de1060b916edf607cf7f9b303f7ec05da9e8d64d6c9db16442527468b2de85d95934d298d694ebc52261a73dab049e9f05c8216b41bd9728730ef80f139fca05222e84714716e9bd172d9d222497f029568f814c1c6641e528bb3bc4adeb4734f917e8eea0f220f6d37f849d7b773af061e47103f475d93076e4a88e681c4bc8f82c4a2193dc275ef675d665749e201637cbe922b9199f6269f1c9c9609868a27b9494df03e9f7a6ad44c13ed2b84e60419fafdf63451ba47b319c3646b4098e8396562fd20d2ad1a5e64bbc8fd4a47d282366c5ec387bbb9292a0128e54450f00819ac0a861ae5555de8eb9eac0ba4fd7bb4f16d2d484ff6171355d83ad92fa75ffc15b5d191aa33f2e159feb22a406cbc4cfe6dc6048f297f996715a94228b84a3df6bee1cdf37434eda3657141319a5231dd076e54f9e6066db78eae7f89c4f53f80f20c2f9b4f9788038b4ea64a47ef808ed8477fe6e7dfe0d89105ec6097c028f40a662c2b69c69d87ca6b7ef1d5e3db47fcfaa93db9319afc53610dde472b81b5bbacd9d3fbb5b2529acf56f478a057736e5f4b331ad07ac63327a222b2310b34247a490cba25352add4294af912b08b29755ef2974e89a3e4c6a69c654073523e18b6d69c0ea57f6323e4cdb10530f0d6479b6d4e5631a508a3ad7ecaf39ed11c5f956ab7160537123680e70686812b3b2d90dc14fe9c969d11f5bab081298c8dde09cd52fbd9988ddccad19b9a0a33cb7ff1c9484025fbe8376c93056d98c9ac36d69fa22912a054b820dad13809d462e61da913a941f96a56a0f25444c49530734a9cc2f7368c347c112c3432be97f35210f74a6478c5c9a1ba1332c4dfa11fdb8a8fcdde192e3d07e0ac7ff2525febde57c7150910d29b5b2c81484230d68b14bb7fc64d4a575ac9d4afd3ac94235d0951e6103eb36a38b966fa81660e86ce4dcfa1ca5f4a39d0fb229378bab46cdfb89999b976de27f0892b6e3400fbaf3c1ba655c606d3172f5c01a6fe49c17746b3f1f75d80a723e77f7fadb5ed4f5284a26eea63c42ca72996c3b3b696ecc18a25fef7c4a8dfce97baaf33529b1b603f2525377969cfdb794560660c403108ffc2f9ae3884880fef31d6596531f02a05d8aad36f3e8bd28bccdbd9bb28d45ea5d4b2922234c9352eb90d3feb52c2da8cc494630ef227fbd43b00f0ca1f93db7814f84a0e343c940fe20f1ba2240419f51c7cc436788a18a0ec55b0eef784b68d80247d17b7748a88d13a6c3113d1be4df8ad8f1a53d35729af6e46366b60014d705449e03d28c33232b260ff3794a344200306ef98cefc2f132e1b79796efc0b364c3e2fc86cd35a2fc13c1f8b39f503327b4036235f5aceb87838cc71c57b7ee6bf71f8efb6984d3039e619b6651d32144121b2b8a5d0d0dcdeb727cb548648896590977b609fe993b8fee6c74a2f193eb6baaa280b8da2c0f59846132644d59e17bc86030da4a21fe1d5a67fa27f21a69995acddf3eb33c3ff975e9622c661a135f939a0d39", 0x801, 0x4000}, 0x4080) r9 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r9, &(0x7f0000000700)={&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/65, 0x41}], 0x1, &(0x7f00000008c0)=[@cswp={0x58, 0x114, 0x7, {{0x401, 0x3}, &(0x7f0000000280)=0x6, &(0x7f0000000500)=0x1, 0x7, 0x4, 0x4, 0x3, 0x7f603e36b622d1cb, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x0, 0x8}, &(0x7f0000000540)=0x13, &(0x7f0000000580)=0x5, 0x3, 0x0, 0x1, 0x7, 0x70, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x4, 0x3}, &(0x7f0000000680)=0x6, &(0x7f00000006c0)=0x22, 0x1, 0x1000, 0x8, 0x3, 0x14, 0xf1}}], 0x108, 0x20008010}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$can_j1939(0x1d, 0x2, 0x7) 2.508681015s ago: executing program 3 (id=2172): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioprio_set$pid(0x2, 0x0, 0x0) 2.495024977s ago: executing program 3 (id=2174): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xafbeec54da1e82f}, 0x40) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x5c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x303}, "92d5bb844f7e0ec5", "6fc0832ba9110129fd858ff54ad0e78d9ed663cd89239e6ddcfe5d07c3cef315", "57cedc03", "3c0dc7657ac10d56"}, 0x38) write$binfmt_script(r5, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r4, r5, 0x0) preadv(r3, 0x0, 0x0, 0x4, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000000240)={0xa, 0x0, 0x8, @remote, 0x0, 0x1}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r9, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, '802.15.4 MAC\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x44c5}, 0x40040) 1.444394332s ago: executing program 3 (id=2193): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r2, 0x11, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x4c}}, 0x0) 1.352243039s ago: executing program 3 (id=2200): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x1, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x4}, 0xfd}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1.237184309s ago: executing program 4 (id=2207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0xc, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040064}, 0x800) 1.176356354s ago: executing program 4 (id=2209): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001780)={0x0, 0x9005}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 1.148576186s ago: executing program 4 (id=2210): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r2 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) syz_open_procfs(0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read$msr(r3, &(0x7f00000002c0)=""/195, 0xc3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 867.840139ms ago: executing program 9 (id=2216): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xf0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) 846.105151ms ago: executing program 9 (id=2217): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 784.643975ms ago: executing program 9 (id=2218): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x44, 0xc}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10"], 0x10}}], 0x1, 0x4000000) 784.477286ms ago: executing program 9 (id=2219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 678.538554ms ago: executing program 9 (id=2222): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 678.258945ms ago: executing program 9 (id=2223): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = io_uring_setup(0x773c, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x10002, 0x3bc}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) close_range(r2, r3, 0x0) r4 = syz_io_uring_setup(0x83b, &(0x7f00000000c0)={0x0, 0x11e, 0x80, 0x3, 0x319}, &(0x7f0000000140)=0x0, &(0x7f0000000400)=0x0) r7 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @remote}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x7f, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000400)=[{&(0x7f00000001c0)}, {0x0}], 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @multicast2}, 0xc) r9 = socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r9, 0x0, 0x0, 0x0, 0x80800}) sendmsg$AUDIT_ADD_RULE(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x42c}, 0x1, 0x0, 0x0, 0x40000}, 0x8) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 678.024595ms ago: executing program 7 (id=2224): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x4}, 0x8) 637.796788ms ago: executing program 7 (id=2226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 637.625518ms ago: executing program 7 (id=2228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x30, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) 416.435645ms ago: executing program 7 (id=2231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010003000000000000000a00000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x48881}, 0x50) 390.086938ms ago: executing program 7 (id=2233): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 344.174512ms ago: executing program 7 (id=2234): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x802) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 256.504299ms ago: executing program 5 (id=2237): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x4008099) r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000380)=ANY=[]) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 218.826342ms ago: executing program 4 (id=2238): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x4}, 0x8) 213.820552ms ago: executing program 5 (id=2239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 151.819937ms ago: executing program 5 (id=2240): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0), 0x2, 0x0) sendfile(r2, r2, 0x0, 0x6) 151.684987ms ago: executing program 4 (id=2241): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @local, 'team_slave_1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) 151.619957ms ago: executing program 4 (id=2242): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 95.682562ms ago: executing program 5 (id=2243): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1) 16.346428ms ago: executing program 5 (id=2244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 0s ago: executing program 5 (id=2245): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) kernel console output (not intermixed with test programs): sed our address fe80::aa on syz_tun! [ 117.985993][ T8001] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 117.995094][ T8001] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 118.004367][ T8001] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 118.013327][ T8001] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 118.022466][ T8001] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 118.031994][ T8001] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 118.041042][ T8001] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 118.050618][ T8001] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 118.059740][ T8001] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 118.162672][ T8009] random: crng reseeded on system resumption [ 118.202681][ T8014] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 118.215692][ T8014] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1394'. [ 118.256323][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 118.256340][ T29] audit: type=1326 audit(1754179039.750:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8016 comm="syz.9.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19a0feb69 code=0x7ffc0000 [ 118.262619][ T29] audit: type=1326 audit(1754179039.769:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8016 comm="syz.9.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fd19a0feb69 code=0x7ffc0000 [ 118.262664][ T29] audit: type=1326 audit(1754179039.769:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8016 comm="syz.9.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19a0feb69 code=0x7ffc0000 [ 118.262753][ T29] audit: type=1326 audit(1754179039.769:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8016 comm="syz.9.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19a0feb69 code=0x7ffc0000 [ 118.407408][ T8023] FAULT_INJECTION: forcing a failure. [ 118.407408][ T8023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.420597][ T8023] CPU: 1 UID: 0 PID: 8023 Comm: syz.9.1399 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 118.420634][ T8023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.420647][ T8023] Call Trace: [ 118.420655][ T8023] [ 118.420664][ T8023] __dump_stack+0x1d/0x30 [ 118.420761][ T8023] dump_stack_lvl+0xe8/0x140 [ 118.420786][ T8023] dump_stack+0x15/0x1b [ 118.420807][ T8023] should_fail_ex+0x265/0x280 [ 118.420841][ T8023] should_fail+0xb/0x20 [ 118.420869][ T8023] should_fail_usercopy+0x1a/0x20 [ 118.420970][ T8023] _copy_from_user+0x1c/0xb0 [ 118.421002][ T8023] kstrtouint_from_user+0x69/0xf0 [ 118.421028][ T8023] ? 0xffffffff81000000 [ 118.421046][ T8023] ? selinux_file_permission+0x1e4/0x320 [ 118.421092][ T8023] proc_fail_nth_write+0x50/0x160 [ 118.421127][ T8023] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 118.421233][ T8023] vfs_write+0x269/0x8e0 [ 118.421269][ T8023] ? vfs_read+0x47f/0x6f0 [ 118.421288][ T8023] ? __rcu_read_unlock+0x4f/0x70 [ 118.421309][ T8023] ? __fget_files+0x184/0x1c0 [ 118.421337][ T8023] ksys_write+0xda/0x1a0 [ 118.421433][ T8023] __x64_sys_write+0x40/0x50 [ 118.421536][ T8023] x64_sys_call+0x27fe/0x2ff0 [ 118.421563][ T8023] do_syscall_64+0xd2/0x200 [ 118.421593][ T8023] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 118.421639][ T8023] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 118.421667][ T8023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.421688][ T8023] RIP: 0033:0x7fd19a0fd61f [ 118.421702][ T8023] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 118.421736][ T8023] RSP: 002b:00007fd19875f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 118.421760][ T8023] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd19a0fd61f [ 118.421776][ T8023] RDX: 0000000000000001 RSI: 00007fd19875f0a0 RDI: 0000000000000004 [ 118.421791][ T8023] RBP: 00007fd19875f090 R08: 0000000000000000 R09: 0000000000000000 [ 118.421806][ T8023] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 118.421821][ T8023] R13: 0000000000000000 R14: 00007fd19a325fa0 R15: 00007ffeba34f2c8 [ 118.421846][ T8023] [ 118.425489][ T29] audit: type=1326 audit(1754179039.919:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 118.487649][ T5248] IPVS: starting estimator thread 0... [ 118.547640][ T29] audit: type=1326 audit(1754179039.919:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 118.694143][ T29] audit: type=1326 audit(1754179039.919:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 118.696563][ T8027] IPVS: using max 2160 ests per chain, 108000 per kthread [ 118.717623][ T29] audit: type=1326 audit(1754179039.919:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 118.736978][ T8032] loop9: detected capacity change from 0 to 512 [ 118.748142][ T29] audit: type=1326 audit(1754179039.919:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 118.777864][ T29] audit: type=1326 audit(1754179039.919:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 118.819425][ T8032] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.843874][ T8036] random: crng reseeded on system resumption [ 118.865638][ T7984] can0 (unregistered): slcan off ttyS3. [ 118.868051][ T8032] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.942089][ T6111] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.972549][ T5248] Process accounting resumed [ 119.001879][ T8045] can0: slcan on ttyS3. [ 119.047559][ T8044] can0 (unregistered): slcan off ttyS3. [ 119.057269][ T8051] FAULT_INJECTION: forcing a failure. [ 119.057269][ T8051] name failslab, interval 1, probability 0, space 0, times 0 [ 119.070001][ T8051] CPU: 0 UID: 0 PID: 8051 Comm: syz.7.1412 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 119.070029][ T8051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.070109][ T8051] Call Trace: [ 119.070114][ T8051] [ 119.070121][ T8051] __dump_stack+0x1d/0x30 [ 119.070155][ T8051] dump_stack_lvl+0xe8/0x140 [ 119.070179][ T8051] dump_stack+0x15/0x1b [ 119.070265][ T8051] should_fail_ex+0x265/0x280 [ 119.070381][ T8051] ? netlbl_mgmt_add_common+0x3cd/0x960 [ 119.070422][ T8051] should_failslab+0x8c/0xb0 [ 119.070448][ T8051] __kmalloc_cache_noprof+0x4c/0x320 [ 119.070498][ T8051] netlbl_mgmt_add_common+0x3cd/0x960 [ 119.070533][ T8051] netlbl_mgmt_add+0x1a2/0x1d0 [ 119.070619][ T8051] genl_family_rcv_msg_doit+0x143/0x1b0 [ 119.070650][ T8051] genl_rcv_msg+0x422/0x460 [ 119.070671][ T8051] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 119.070736][ T8051] netlink_rcv_skb+0x120/0x220 [ 119.070764][ T8051] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.070791][ T8051] genl_rcv+0x28/0x40 [ 119.070811][ T8051] netlink_unicast+0x5c0/0x690 [ 119.070901][ T8051] netlink_sendmsg+0x58b/0x6b0 [ 119.070940][ T8051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.070971][ T8051] __sock_sendmsg+0x142/0x180 [ 119.071059][ T8051] ____sys_sendmsg+0x31e/0x4e0 [ 119.071101][ T8051] ___sys_sendmsg+0x17b/0x1d0 [ 119.071152][ T8051] __x64_sys_sendmsg+0xd4/0x160 [ 119.071223][ T8051] x64_sys_call+0x191e/0x2ff0 [ 119.071303][ T8051] do_syscall_64+0xd2/0x200 [ 119.071329][ T8051] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 119.071352][ T8051] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 119.071378][ T8051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.071401][ T8051] RIP: 0033:0x7fddc657eb69 [ 119.071490][ T8051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.071507][ T8051] RSP: 002b:00007fddc4bdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.071529][ T8051] RAX: ffffffffffffffda RBX: 00007fddc67a5fa0 RCX: 00007fddc657eb69 [ 119.071543][ T8051] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000004 [ 119.071558][ T8051] RBP: 00007fddc4bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 119.071646][ T8051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.071657][ T8051] R13: 0000000000000000 R14: 00007fddc67a5fa0 R15: 00007ffc1ffb2468 [ 119.071675][ T8051] [ 119.356408][ T8053] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1411'. [ 119.478299][ T8068] loop5: detected capacity change from 0 to 512 [ 119.556460][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'. [ 119.571294][ T8068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.586153][ T8068] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.603370][ T8073] FAULT_INJECTION: forcing a failure. [ 119.603370][ T8073] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 119.616649][ T8073] CPU: 1 UID: 0 PID: 8073 Comm: syz.4.1419 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 119.616722][ T8073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.616738][ T8073] Call Trace: [ 119.616746][ T8073] [ 119.616756][ T8073] __dump_stack+0x1d/0x30 [ 119.616777][ T8073] dump_stack_lvl+0xe8/0x140 [ 119.616864][ T8073] dump_stack+0x15/0x1b [ 119.616885][ T8073] should_fail_ex+0x265/0x280 [ 119.616926][ T8073] should_fail_alloc_page+0xf2/0x100 [ 119.616965][ T8073] __alloc_frozen_pages_noprof+0xff/0x360 [ 119.617030][ T8073] alloc_pages_mpol+0xb3/0x250 [ 119.617129][ T8073] vma_alloc_folio_noprof+0x1aa/0x300 [ 119.617189][ T8073] do_wp_page+0x5db/0x24e0 [ 119.617218][ T8073] ? css_rstat_updated+0xb7/0x240 [ 119.617295][ T8073] ? __rcu_read_lock+0x37/0x50 [ 119.617324][ T8073] handle_mm_fault+0x77d/0x2c20 [ 119.617368][ T8073] do_user_addr_fault+0x636/0x1090 [ 119.617646][ T8073] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 119.617677][ T8073] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 119.617716][ T8073] exc_page_fault+0x62/0xa0 [ 119.617740][ T8073] asm_exc_page_fault+0x26/0x30 [ 119.617784][ T8073] RIP: 0033:0x7fb40d4f0d90 [ 119.617799][ T8073] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 119.617867][ T8073] RSP: 002b:00007fb40bc8e4a0 EFLAGS: 00010202 [ 119.617939][ T8073] RAX: 0000000000007005 RBX: 00007fb40bc8e540 RCX: 0000000000000101 [ 119.617955][ T8073] RDX: 00000000000003ff RSI: 0000000000001000 RDI: 00007fb40bc8e5e0 [ 119.617971][ T8073] RBP: 0000000000000102 R08: 00007fb40386f000 R09: 0000000000000010 [ 119.618044][ T8073] R10: 0000200000000642 R11: 000000000000052f R12: 0000000000000c01 [ 119.618105][ T8073] R13: 00007fb40d6cd940 R14: 0000000000000017 R15: 00007fb40bc8e5e0 [ 119.618130][ T8073] [ 119.618142][ T8073] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 119.819448][ T23] hid_parser_main: 17 callbacks suppressed [ 119.819493][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.832970][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.840421][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.847848][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.855364][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.862775][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.870258][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.877703][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4 [ 119.885127][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.892566][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.900165][ T8073] loop4: detected capacity change from 0 to 512 [ 119.901969][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 119.929303][ T6305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.962977][ T8073] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 120.017941][ T8079] loop7: detected capacity change from 0 to 256 [ 120.041827][ T8083] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 120.048385][ T8083] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 120.056012][ T8083] vhci_hcd vhci_hcd.0: Device attached [ 120.077680][ T8079] FAT-fs (loop7): bogus number of FAT sectors [ 120.083804][ T8079] FAT-fs (loop7): Can't find a valid FAT filesystem [ 120.092300][ T8090] vhci_hcd: connection closed [ 120.092702][ T5044] vhci_hcd: stop threads [ 120.101963][ T5044] vhci_hcd: release socket [ 120.106431][ T5044] vhci_hcd: disconnect device [ 120.135340][ T8093] can0: slcan on ttyS3. [ 120.197015][ T8102] random: crng reseeded on system resumption [ 120.329275][ T8112] loop4: detected capacity change from 0 to 512 [ 120.351769][ T8066] can0 (unregistered): slcan off ttyS3. [ 120.354213][ T8114] loop5: detected capacity change from 0 to 512 [ 120.382523][ T8112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.397396][ T8117] batadv_slave_0: entered promiscuous mode [ 120.406868][ T8117] batadv_slave_0: left promiscuous mode [ 120.415902][ T8114] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 120.457167][ T8112] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.500320][ T8123] FAULT_INJECTION: forcing a failure. [ 120.500320][ T8123] name failslab, interval 1, probability 0, space 0, times 0 [ 120.513106][ T8123] CPU: 0 UID: 0 PID: 8123 Comm: syz.2.1436 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 120.513211][ T8123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.513223][ T8123] Call Trace: [ 120.513229][ T8123] [ 120.513237][ T8123] __dump_stack+0x1d/0x30 [ 120.513263][ T8123] dump_stack_lvl+0xe8/0x140 [ 120.513287][ T8123] dump_stack+0x15/0x1b [ 120.513320][ T8123] should_fail_ex+0x265/0x280 [ 120.513385][ T8123] should_failslab+0x8c/0xb0 [ 120.513412][ T8123] kmem_cache_alloc_noprof+0x50/0x310 [ 120.513442][ T8123] ? skb_clone+0x151/0x1f0 [ 120.513461][ T8123] skb_clone+0x151/0x1f0 [ 120.513483][ T8123] __netlink_deliver_tap+0x2c9/0x500 [ 120.513569][ T8123] ? netlink_attachskb+0x2d1/0x610 [ 120.513673][ T8123] netlink_sendskb+0x126/0x150 [ 120.513762][ T8123] netlink_unicast+0x2a2/0x690 [ 120.513794][ T8123] netlink_ack+0x4c8/0x500 [ 120.513882][ T8123] netlink_rcv_skb+0x192/0x220 [ 120.513916][ T8123] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.513949][ T8123] rtnetlink_rcv+0x1c/0x30 [ 120.514045][ T8123] netlink_unicast+0x5c0/0x690 [ 120.514083][ T8123] netlink_sendmsg+0x58b/0x6b0 [ 120.514182][ T8123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.514267][ T8123] __sock_sendmsg+0x142/0x180 [ 120.514297][ T8123] ____sys_sendmsg+0x31e/0x4e0 [ 120.514378][ T8123] ___sys_sendmsg+0x17b/0x1d0 [ 120.514433][ T8123] __x64_sys_sendmsg+0xd4/0x160 [ 120.514468][ T8123] x64_sys_call+0x191e/0x2ff0 [ 120.514494][ T8123] do_syscall_64+0xd2/0x200 [ 120.514578][ T8123] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 120.514603][ T8123] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 120.514632][ T8123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.514665][ T8123] RIP: 0033:0x7fb9270deb69 [ 120.514684][ T8123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.514707][ T8123] RSP: 002b:00007fb92573f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.514728][ T8123] RAX: ffffffffffffffda RBX: 00007fb927305fa0 RCX: 00007fb9270deb69 [ 120.514798][ T8123] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 120.514846][ T8123] RBP: 00007fb92573f090 R08: 0000000000000000 R09: 0000000000000000 [ 120.514862][ T8123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.514876][ T8123] R13: 0000000000000000 R14: 00007fb927305fa0 R15: 00007fffcd034118 [ 120.514900][ T8123] [ 120.825001][ T8114] EXT4-fs (loop5): 1 truncate cleaned up [ 120.834630][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.844345][ T8114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.862089][ T8130] random: crng reseeded on system resumption [ 121.002571][ T6305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.002926][ T8138] FAULT_INJECTION: forcing a failure. [ 121.002926][ T8138] name failslab, interval 1, probability 0, space 0, times 0 [ 121.024372][ T8138] CPU: 0 UID: 0 PID: 8138 Comm: syz.2.1443 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 121.024408][ T8138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.024423][ T8138] Call Trace: [ 121.024430][ T8138] [ 121.024471][ T8138] __dump_stack+0x1d/0x30 [ 121.024533][ T8138] dump_stack_lvl+0xe8/0x140 [ 121.024582][ T8138] dump_stack+0x15/0x1b [ 121.024598][ T8138] should_fail_ex+0x265/0x280 [ 121.024633][ T8138] should_failslab+0x8c/0xb0 [ 121.024658][ T8138] kmem_cache_alloc_noprof+0x50/0x310 [ 121.024713][ T8138] ? skb_clone+0x151/0x1f0 [ 121.024731][ T8138] ? consume_skb+0x49/0x150 [ 121.024761][ T8138] skb_clone+0x151/0x1f0 [ 121.024779][ T8138] dev_queue_xmit_nit+0x146/0x680 [ 121.024847][ T8138] ? put_dec_trunc8+0x119/0x140 [ 121.024883][ T8138] dev_hard_start_xmit+0xd3/0x3e0 [ 121.024961][ T8138] ? validate_xmit_skb+0x746/0x910 [ 121.024995][ T8138] __dev_queue_xmit+0x10f9/0x2000 [ 121.025032][ T8138] ? __dev_queue_xmit+0x182/0x2000 [ 121.025075][ T8138] ? __skb_clone+0x2a6/0x2d0 [ 121.025180][ T8138] __netlink_deliver_tap+0x3c3/0x500 [ 121.025221][ T8138] netlink_unicast+0x66b/0x690 [ 121.025320][ T8138] netlink_sendmsg+0x58b/0x6b0 [ 121.025423][ T8138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.025462][ T8138] __sock_sendmsg+0x142/0x180 [ 121.025487][ T8138] ____sys_sendmsg+0x31e/0x4e0 [ 121.025578][ T8138] ___sys_sendmsg+0x17b/0x1d0 [ 121.025711][ T8138] __x64_sys_sendmsg+0xd4/0x160 [ 121.025835][ T8138] x64_sys_call+0x191e/0x2ff0 [ 121.025856][ T8138] do_syscall_64+0xd2/0x200 [ 121.025879][ T8138] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 121.025903][ T8138] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 121.025988][ T8138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.026010][ T8138] RIP: 0033:0x7fb9270deb69 [ 121.026025][ T8138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.026043][ T8138] RSP: 002b:00007fb92573f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.026095][ T8138] RAX: ffffffffffffffda RBX: 00007fb927305fa0 RCX: 00007fb9270deb69 [ 121.026107][ T8138] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000010 [ 121.026159][ T8138] RBP: 00007fb92573f090 R08: 0000000000000000 R09: 0000000000000000 [ 121.026171][ T8138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.026182][ T8138] R13: 0000000000000000 R14: 00007fb927305fa0 R15: 00007fffcd034118 [ 121.026201][ T8138] [ 121.344769][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1444'. [ 121.392737][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1448'. [ 121.428444][ T8151] loop2: detected capacity change from 0 to 512 [ 121.438470][ T8151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.453063][ T8151] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.495962][ T6122] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.588013][ T8165] random: crng reseeded on system resumption [ 121.619277][ T8169] loop7: detected capacity change from 0 to 512 [ 121.641093][ T8169] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 121.652717][ T8169] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 121.662875][ T8169] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1456: Corrupt directory, running e2fsck is recommended [ 121.677276][ T8169] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 121.677414][ T8169] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.1456: corrupted in-inode xattr: invalid ea_ino [ 121.677570][ T8169] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1456: couldn't read orphan inode 15 (err -117) [ 121.678135][ T8169] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.687455][ T8169] EXT4-fs error (device loop7): __ext4_remount:6736: comm syz.7.1456: Abort forced by user [ 121.687620][ T8169] EXT4-fs (loop7): Remounting filesystem read-only [ 121.687695][ T8169] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 121.714992][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1441'. [ 121.728132][ T8174] loop5: detected capacity change from 0 to 512 [ 121.800813][ T8174] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 121.812403][ T8174] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 121.822537][ T8174] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1458: Corrupt directory, running e2fsck is recommended [ 121.871459][ T8174] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 121.910536][ T8174] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.1458: corrupted in-inode xattr: invalid ea_ino [ 121.929909][ T8174] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1458: couldn't read orphan inode 15 (err -117) [ 121.943081][ T8174] FAULT_INJECTION: forcing a failure. [ 121.943081][ T8174] name failslab, interval 1, probability 0, space 0, times 0 [ 121.956522][ T8174] CPU: 1 UID: 0 PID: 8174 Comm: syz.5.1458 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 121.956566][ T8174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.956588][ T8174] Call Trace: [ 121.956595][ T8174] [ 121.956603][ T8174] __dump_stack+0x1d/0x30 [ 121.956629][ T8174] dump_stack_lvl+0xe8/0x140 [ 121.956652][ T8174] dump_stack+0x15/0x1b [ 121.956673][ T8174] should_fail_ex+0x265/0x280 [ 121.956744][ T8174] should_failslab+0x8c/0xb0 [ 121.956773][ T8174] kmem_cache_alloc_noprof+0x50/0x310 [ 121.956805][ T8174] ? getname_flags+0x80/0x3b0 [ 121.956840][ T8174] getname_flags+0x80/0x3b0 [ 121.956909][ T8174] user_path_at+0x28/0x130 [ 121.956946][ T8174] __se_sys_mount+0x25b/0x2e0 [ 121.956972][ T8174] ? fput+0x8f/0xc0 [ 121.957007][ T8174] __x64_sys_mount+0x67/0x80 [ 121.957046][ T8174] x64_sys_call+0x2b4d/0x2ff0 [ 121.957071][ T8174] do_syscall_64+0xd2/0x200 [ 121.957098][ T8174] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 121.957128][ T8174] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 121.957153][ T8174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.957177][ T8174] RIP: 0033:0x7f8536ffeb69 [ 121.957251][ T8174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.957279][ T8174] RSP: 002b:00007f853565f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 121.957365][ T8174] RAX: ffffffffffffffda RBX: 00007f8537225fa0 RCX: 00007f8536ffeb69 [ 121.957379][ T8174] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 121.957394][ T8174] RBP: 00007f853565f090 R08: 0000000000000000 R09: 0000000000000000 [ 121.957408][ T8174] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 121.957423][ T8174] R13: 0000000000000000 R14: 00007f8537225fa0 R15: 00007ffd896a1688 [ 121.957465][ T8174] [ 122.154067][ T8181] loop2: detected capacity change from 0 to 4096 [ 122.260099][ T8202] random: crng reseeded on system resumption [ 122.317382][ T8206] sd 0:0:1:0: device reset [ 122.364477][ T8215] FAULT_INJECTION: forcing a failure. [ 122.364477][ T8215] name failslab, interval 1, probability 0, space 0, times 0 [ 122.377875][ T8215] CPU: 1 UID: 0 PID: 8215 Comm: syz.2.1473 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 122.377908][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.377970][ T8215] Call Trace: [ 122.377977][ T8215] [ 122.377984][ T8215] __dump_stack+0x1d/0x30 [ 122.378005][ T8215] dump_stack_lvl+0xe8/0x140 [ 122.378023][ T8215] dump_stack+0x15/0x1b [ 122.378048][ T8215] should_fail_ex+0x265/0x280 [ 122.378089][ T8215] ? sg_read+0x3ce/0xcb0 [ 122.378121][ T8215] should_failslab+0x8c/0xb0 [ 122.378178][ T8215] __kmalloc_cache_noprof+0x4c/0x320 [ 122.378206][ T8215] ? kstrtouint+0x76/0xc0 [ 122.378238][ T8215] sg_read+0x3ce/0xcb0 [ 122.378311][ T8215] ? __pfx_sg_read+0x10/0x10 [ 122.378345][ T8215] vfs_read+0x1a0/0x6f0 [ 122.378416][ T8215] ? __rcu_read_unlock+0x4f/0x70 [ 122.378443][ T8215] ? __fget_files+0x184/0x1c0 [ 122.378472][ T8215] ksys_read+0xda/0x1a0 [ 122.378499][ T8215] __x64_sys_read+0x40/0x50 [ 122.378531][ T8215] x64_sys_call+0x27bc/0x2ff0 [ 122.378551][ T8215] do_syscall_64+0xd2/0x200 [ 122.378574][ T8215] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 122.378596][ T8215] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 122.378624][ T8215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.378707][ T8215] RIP: 0033:0x7fb9270deb69 [ 122.378726][ T8215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.378750][ T8215] RSP: 002b:00007fb92573f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.378806][ T8215] RAX: ffffffffffffffda RBX: 00007fb927305fa0 RCX: 00007fb9270deb69 [ 122.378818][ T8215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 122.378830][ T8215] RBP: 00007fb92573f090 R08: 0000000000000000 R09: 0000000000000000 [ 122.378843][ T8215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.378858][ T8215] R13: 0000000000000000 R14: 00007fb927305fa0 R15: 00007fffcd034118 [ 122.378882][ T8215] [ 122.591042][ T8225] loop9: detected capacity change from 0 to 512 [ 122.603718][ T8224] FAULT_INJECTION: forcing a failure. [ 122.603718][ T8224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.616954][ T8224] CPU: 0 UID: 0 PID: 8224 Comm: syz.7.1478 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 122.617014][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.617029][ T8224] Call Trace: [ 122.617038][ T8224] [ 122.617047][ T8224] __dump_stack+0x1d/0x30 [ 122.617079][ T8224] dump_stack_lvl+0xe8/0x140 [ 122.617098][ T8224] dump_stack+0x15/0x1b [ 122.617199][ T8224] should_fail_ex+0x265/0x280 [ 122.617233][ T8224] should_fail+0xb/0x20 [ 122.617272][ T8224] should_fail_usercopy+0x1a/0x20 [ 122.617291][ T8224] strncpy_from_user+0x25/0x230 [ 122.617318][ T8224] ? __fget_files+0x184/0x1c0 [ 122.617407][ T8224] __se_sys_add_key+0x86/0x350 [ 122.617430][ T8224] __x64_sys_add_key+0x67/0x80 [ 122.617450][ T8224] x64_sys_call+0x28c4/0x2ff0 [ 122.617472][ T8224] do_syscall_64+0xd2/0x200 [ 122.617516][ T8224] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 122.617541][ T8224] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 122.617562][ T8224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.617643][ T8224] RIP: 0033:0x7fddc657eb69 [ 122.617658][ T8224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.617678][ T8224] RSP: 002b:00007fddc4bdf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 122.617766][ T8224] RAX: ffffffffffffffda RBX: 00007fddc67a5fa0 RCX: 00007fddc657eb69 [ 122.617779][ T8224] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 00002000000002c0 [ 122.617791][ T8224] RBP: 00007fddc4bdf090 R08: 00000000220b579f R09: 0000000000000000 [ 122.617804][ T8224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.617816][ T8224] R13: 0000000000000000 R14: 00007fddc67a5fa0 R15: 00007ffc1ffb2468 [ 122.617835][ T8224] [ 122.815504][ T8225] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.866308][ T8238] random: crng reseeded on system resumption [ 122.882887][ T8239] loop5: detected capacity change from 0 to 512 [ 122.901707][ T8240] loop2: detected capacity change from 0 to 2048 [ 122.943318][ T8239] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.954284][ T8240] loop2: p1 < > p4 [ 122.961220][ T8240] loop2: p4 size 8388608 extends beyond EOD, truncated [ 122.984160][ T8239] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters [ 123.006099][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1489'. [ 123.044737][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1489'. [ 123.061827][ T8239] EXT4-fs (loop5): Remounting filesystem read-only [ 123.082423][ T8260] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1484'. [ 123.172460][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1484'. [ 123.172905][ T8265] FAULT_INJECTION: forcing a failure. [ 123.172905][ T8265] name failslab, interval 1, probability 0, space 0, times 0 [ 123.194081][ T8265] CPU: 1 UID: 0 PID: 8265 Comm: syz.4.1494 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 123.194114][ T8265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.194129][ T8265] Call Trace: [ 123.194136][ T8265] [ 123.194144][ T8265] __dump_stack+0x1d/0x30 [ 123.194221][ T8265] dump_stack_lvl+0xe8/0x140 [ 123.194244][ T8265] dump_stack+0x15/0x1b [ 123.194260][ T8265] should_fail_ex+0x265/0x280 [ 123.194296][ T8265] ? alloc_pipe_info+0xae/0x350 [ 123.194367][ T8265] should_failslab+0x8c/0xb0 [ 123.194393][ T8265] __kmalloc_cache_noprof+0x4c/0x320 [ 123.194437][ T8265] alloc_pipe_info+0xae/0x350 [ 123.194463][ T8265] splice_direct_to_actor+0x592/0x680 [ 123.194519][ T8265] ? kstrtouint_from_user+0x9f/0xf0 [ 123.194540][ T8265] ? __pfx_direct_splice_actor+0x10/0x10 [ 123.194561][ T8265] ? __rcu_read_unlock+0x4f/0x70 [ 123.194657][ T8265] ? get_pid_task+0x96/0xd0 [ 123.194677][ T8265] ? avc_policy_seqno+0x15/0x30 [ 123.194781][ T8265] ? selinux_file_permission+0x1e4/0x320 [ 123.194853][ T8265] do_splice_direct+0xda/0x150 [ 123.194872][ T8265] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 123.194920][ T8265] do_sendfile+0x380/0x650 [ 123.194959][ T8265] __x64_sys_sendfile64+0x105/0x150 [ 123.195052][ T8265] x64_sys_call+0x2bb0/0x2ff0 [ 123.195112][ T8265] do_syscall_64+0xd2/0x200 [ 123.195142][ T8265] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 123.195173][ T8265] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 123.195200][ T8265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.195231][ T8265] RIP: 0033:0x7fb40d62eb69 [ 123.195306][ T8265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.195343][ T8265] RSP: 002b:00007fb40bc8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 123.195364][ T8265] RAX: ffffffffffffffda RBX: 00007fb40d855fa0 RCX: 00007fb40d62eb69 [ 123.195377][ T8265] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000008 [ 123.195407][ T8265] RBP: 00007fb40bc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 123.195419][ T8265] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 123.195512][ T8265] R13: 0000000000000000 R14: 00007fb40d855fa0 R15: 00007ffde1479858 [ 123.195531][ T8265] [ 123.375783][ T8267] sd 0:0:1:0: device reset [ 123.448340][ T8269] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 123.482281][ T8269] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1496'. [ 123.636405][ T29] kauditd_printk_skb: 456 callbacks suppressed [ 123.636482][ T29] audit: type=1400 audit(1754179044.792:5129): avc: denied { setopt } for pid=8281 comm="syz.4.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.719292][ T29] audit: type=1400 audit(1754179044.867:5130): avc: denied { write } for pid=8286 comm="syz.4.1504" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 123.781305][ T29] audit: type=1400 audit(1754179044.923:5131): avc: denied { create } for pid=8293 comm="syz.7.1507" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 123.802125][ T29] audit: type=1400 audit(1754179044.923:5132): avc: denied { write } for pid=8293 comm="syz.7.1507" name="file0" dev="tmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 123.824578][ T29] audit: type=1400 audit(1754179044.923:5133): avc: denied { open } for pid=8293 comm="syz.7.1507" path="/139/file0" dev="tmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 123.847305][ T29] audit: type=1400 audit(1754179044.923:5134): avc: denied { read write } for pid=8293 comm="syz.7.1507" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 123.871535][ T29] audit: type=1400 audit(1754179044.923:5135): avc: denied { open } for pid=8293 comm="syz.7.1507" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 123.884855][ T8294] loop7: detected capacity change from 0 to 512 [ 123.977326][ T8299] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 123.988269][ T8299] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1508'. [ 123.998936][ T8294] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.009850][ T29] audit: type=1400 audit(1754179044.942:5136): avc: denied { setopt } for pid=8286 comm="syz.4.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 124.030343][ T29] audit: type=1400 audit(1754179045.082:5137): avc: denied { mounton } for pid=8293 comm="syz.7.1507" path="/139/bus" dev="tmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 124.052805][ T29] audit: type=1400 audit(1754179045.138:5138): avc: denied { mount } for pid=8293 comm="syz.7.1507" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 124.275873][ T8318] FAULT_INJECTION: forcing a failure. [ 124.275873][ T8318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.289107][ T8318] CPU: 1 UID: 0 PID: 8318 Comm: syz.7.1516 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 124.289145][ T8318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.289235][ T8318] Call Trace: [ 124.289242][ T8318] [ 124.289302][ T8318] __dump_stack+0x1d/0x30 [ 124.289330][ T8318] dump_stack_lvl+0xe8/0x140 [ 124.289349][ T8318] dump_stack+0x15/0x1b [ 124.289421][ T8318] should_fail_ex+0x265/0x280 [ 124.289454][ T8318] should_fail+0xb/0x20 [ 124.289558][ T8318] should_fail_usercopy+0x1a/0x20 [ 124.289577][ T8318] _copy_from_user+0x1c/0xb0 [ 124.289604][ T8318] __sys_bpf+0x178/0x7b0 [ 124.289638][ T8318] __x64_sys_bpf+0x41/0x50 [ 124.289678][ T8318] x64_sys_call+0x2aea/0x2ff0 [ 124.289699][ T8318] do_syscall_64+0xd2/0x200 [ 124.289722][ T8318] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 124.289824][ T8318] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 124.289845][ T8318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.289866][ T8318] RIP: 0033:0x7fddc657eb69 [ 124.289881][ T8318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.289899][ T8318] RSP: 002b:00007fddc4bdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.289994][ T8318] RAX: ffffffffffffffda RBX: 00007fddc67a5fa0 RCX: 00007fddc657eb69 [ 124.290006][ T8318] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 124.290019][ T8318] RBP: 00007fddc4bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 124.290030][ T8318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.290053][ T8318] R13: 0000000000000000 R14: 00007fddc67a5fa0 R15: 00007ffc1ffb2468 [ 124.290096][ T8318] [ 124.560388][ T8332] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 124.571320][ T8332] netlink: 92 bytes leftover after parsing attributes in process `syz.9.1521'. [ 124.647214][ T8345] FAULT_INJECTION: forcing a failure. [ 124.647214][ T8345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.661202][ T8345] CPU: 1 UID: 0 PID: 8345 Comm: syz.9.1527 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 124.661239][ T8345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.661255][ T8345] Call Trace: [ 124.661310][ T8345] [ 124.661319][ T8345] __dump_stack+0x1d/0x30 [ 124.661345][ T8345] dump_stack_lvl+0xe8/0x140 [ 124.661363][ T8345] dump_stack+0x15/0x1b [ 124.661378][ T8345] should_fail_ex+0x265/0x280 [ 124.661489][ T8345] should_fail+0xb/0x20 [ 124.661526][ T8345] should_fail_usercopy+0x1a/0x20 [ 124.661590][ T8345] _copy_from_user+0x1c/0xb0 [ 124.661622][ T8345] ___sys_sendmsg+0xc1/0x1d0 [ 124.661681][ T8345] __x64_sys_sendmsg+0xd4/0x160 [ 124.661777][ T8345] x64_sys_call+0x191e/0x2ff0 [ 124.661876][ T8345] do_syscall_64+0xd2/0x200 [ 124.661906][ T8345] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 124.661932][ T8345] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 124.661959][ T8345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.662053][ T8345] RIP: 0033:0x7fd19a0feb69 [ 124.662068][ T8345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.662088][ T8345] RSP: 002b:00007fd19875f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.662130][ T8345] RAX: ffffffffffffffda RBX: 00007fd19a325fa0 RCX: 00007fd19a0feb69 [ 124.662141][ T8345] RDX: 0000000004048814 RSI: 0000200000000380 RDI: 0000000000000004 [ 124.662153][ T8345] RBP: 00007fd19875f090 R08: 0000000000000000 R09: 0000000000000000 [ 124.662164][ T8345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.662176][ T8345] R13: 0000000000000000 R14: 00007fd19a325fa0 R15: 00007ffeba34f2c8 [ 124.662193][ T8345] [ 124.873625][ T8349] random: crng reseeded on system resumption [ 124.914361][ T8359] loop4: detected capacity change from 0 to 512 [ 124.939573][ T8359] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.008768][ T8380] FAULT_INJECTION: forcing a failure. [ 125.008768][ T8380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.021919][ T8380] CPU: 1 UID: 0 PID: 8380 Comm: syz.2.1542 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 125.021950][ T8380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.021963][ T8380] Call Trace: [ 125.021969][ T8380] [ 125.021976][ T8380] __dump_stack+0x1d/0x30 [ 125.021998][ T8380] dump_stack_lvl+0xe8/0x140 [ 125.022031][ T8380] dump_stack+0x15/0x1b [ 125.022047][ T8380] should_fail_ex+0x265/0x280 [ 125.022133][ T8380] should_fail+0xb/0x20 [ 125.022163][ T8380] should_fail_usercopy+0x1a/0x20 [ 125.022183][ T8380] _copy_from_user+0x1c/0xb0 [ 125.022208][ T8380] ___sys_recvmsg+0xaa/0x370 [ 125.022228][ T8380] ? _parse_integer+0x27/0x40 [ 125.022348][ T8380] do_recvmmsg+0x1ef/0x540 [ 125.022372][ T8380] ? fput+0x8f/0xc0 [ 125.022483][ T8380] __x64_sys_recvmmsg+0xe5/0x170 [ 125.022504][ T8380] x64_sys_call+0x27a6/0x2ff0 [ 125.022531][ T8380] do_syscall_64+0xd2/0x200 [ 125.022554][ T8380] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 125.022579][ T8380] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 125.022600][ T8380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.022621][ T8380] RIP: 0033:0x7fb9270deb69 [ 125.022695][ T8380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.022716][ T8380] RSP: 002b:00007fb92573f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 125.022736][ T8380] RAX: ffffffffffffffda RBX: 00007fb927305fa0 RCX: 00007fb9270deb69 [ 125.022749][ T8380] RDX: 0000000000000001 RSI: 000020000000a400 RDI: 0000000000000003 [ 125.022778][ T8380] RBP: 00007fb92573f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.022790][ T8380] R10: 0000000000010120 R11: 0000000000000246 R12: 0000000000000001 [ 125.022803][ T8380] R13: 0000000000000000 R14: 00007fb927305fa0 R15: 00007fffcd034118 [ 125.022821][ T8380] [ 125.313096][ T8397] random: crng reseeded on system resumption [ 125.334194][ T8386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=8386 comm=syz.9.1543 [ 125.383097][ T8398] loop5: detected capacity change from 0 to 4096 [ 125.407652][ T8389] loop7: detected capacity change from 0 to 512 [ 125.414879][ T8389] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.455489][ T8389] ext4: Unknown parameter 'uid>00000000000000000000' [ 125.516077][ T8416] bond1: entered promiscuous mode [ 125.521160][ T8416] bond1: entered allmulticast mode [ 125.526882][ T8416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.540541][ T8416] bond1 (unregistering): Released all slaves [ 125.562642][ T8420] loop4: detected capacity change from 0 to 4096 [ 125.792643][ T8449] loop5: detected capacity change from 0 to 4096 [ 125.940127][ T8472] loop2: detected capacity change from 0 to 4096 [ 125.956483][ T8483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8483 comm=syz.7.1572 [ 126.314207][ T8549] loop7: detected capacity change from 0 to 4096 [ 126.420953][ T8569] loop7: detected capacity change from 0 to 512 [ 126.430335][ T8569] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.634319][ T8613] random: crng reseeded on system resumption [ 126.720244][ T8626] loop4: detected capacity change from 0 to 512 [ 126.730077][ T8626] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.808371][ T8644] __nla_validate_parse: 8 callbacks suppressed [ 126.808389][ T8644] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1615'. [ 126.808422][ T8644] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1615'. [ 126.842023][ T8644] loop9: detected capacity change from 0 to 2048 [ 126.919554][ T8661] loop9: detected capacity change from 0 to 512 [ 126.933851][ T8663] loop4: detected capacity change from 0 to 512 [ 126.945485][ T8661] EXT4-fs (loop9): 1 orphan inode deleted [ 126.952540][ T8661] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.965857][ T5021] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:26: Failed to release dquot type 1 [ 126.979290][ T8663] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.993298][ T8661] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 127.057409][ T8661] FAULT_INJECTION: forcing a failure. [ 127.057409][ T8661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.071146][ T8661] CPU: 1 UID: 0 PID: 8661 Comm: syz.9.1621 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 127.071172][ T8661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.071183][ T8661] Call Trace: [ 127.071188][ T8661] [ 127.071240][ T8661] __dump_stack+0x1d/0x30 [ 127.071258][ T8661] dump_stack_lvl+0xe8/0x140 [ 127.071275][ T8661] dump_stack+0x15/0x1b [ 127.071340][ T8661] should_fail_ex+0x265/0x280 [ 127.071369][ T8661] should_fail+0xb/0x20 [ 127.071394][ T8661] should_fail_usercopy+0x1a/0x20 [ 127.071452][ T8661] copy_fpstate_to_sigframe+0x628/0x7d0 [ 127.071550][ T8661] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 127.071581][ T8661] ? x86_task_fpu+0x36/0x60 [ 127.071670][ T8661] get_sigframe+0x34d/0x490 [ 127.071685][ T8661] ? get_signal+0xdc8/0xf70 [ 127.071735][ T8661] x64_setup_rt_frame+0xa8/0x580 [ 127.071778][ T8661] arch_do_signal_or_restart+0x27c/0x480 [ 127.071863][ T8661] exit_to_user_mode_loop+0x7a/0x100 [ 127.071882][ T8661] do_syscall_64+0x1d6/0x200 [ 127.071904][ T8661] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 127.071925][ T8661] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 127.071943][ T8661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.072014][ T8661] RIP: 0033:0x7fd19a0feb67 [ 127.072027][ T8661] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 127.072049][ T8661] RSP: 002b:00007fd19875f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 127.072065][ T8661] RAX: 0000000000000013 RBX: 00007fd19a325fa0 RCX: 00007fd19a0feb69 [ 127.072085][ T8661] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000008 [ 127.072096][ T8661] RBP: 00007fd19875f090 R08: 0000000000000000 R09: 0000000000000000 [ 127.072106][ T8661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.072116][ T8661] R13: 0000000000000000 R14: 00007fd19a325fa0 R15: 00007ffeba34f2c8 [ 127.072133][ T8661] [ 127.288348][ T8685] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.296414][ T8685] IPv6: Can't replace route, no match found [ 127.387589][ T8697] loop9: detected capacity change from 0 to 512 [ 127.408511][ T5261] hid_parser_main: 32 callbacks suppressed [ 127.408531][ T5261] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 127.421925][ T5261] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 127.430165][ T5261] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 127.437610][ T5261] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 127.445136][ T5261] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 127.452679][ T5261] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 127.460104][ T5261] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 127.468220][ T5261] hid-generic 0000:0000:0000.0004: unknown main item tag 0x4 [ 127.475870][ T5261] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 127.483318][ T5261] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 127.495551][ T8716] FAULT_INJECTION: forcing a failure. [ 127.495551][ T8716] name failslab, interval 1, probability 0, space 0, times 0 [ 127.508307][ T8716] CPU: 1 UID: 0 PID: 8716 Comm: syz.7.1644 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 127.508411][ T8716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.508426][ T8716] Call Trace: [ 127.508435][ T8716] [ 127.508443][ T8716] __dump_stack+0x1d/0x30 [ 127.508529][ T8716] dump_stack_lvl+0xe8/0x140 [ 127.508555][ T8716] dump_stack+0x15/0x1b [ 127.508575][ T8716] should_fail_ex+0x265/0x280 [ 127.508664][ T8716] ? audit_log_d_path+0x8d/0x150 [ 127.508703][ T8716] should_failslab+0x8c/0xb0 [ 127.508743][ T8716] __kmalloc_cache_noprof+0x4c/0x320 [ 127.508826][ T8716] audit_log_d_path+0x8d/0x150 [ 127.508862][ T8716] audit_log_d_path_exe+0x42/0x70 [ 127.508928][ T8716] audit_log_task+0x1e9/0x250 [ 127.508966][ T8716] audit_seccomp+0x61/0x100 [ 127.508995][ T8716] ? __seccomp_filter+0x68c/0x10d0 [ 127.509025][ T8716] __seccomp_filter+0x69d/0x10d0 [ 127.509055][ T8716] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 127.509100][ T8716] ? vfs_write+0x75e/0x8e0 [ 127.509186][ T8716] ? __rcu_read_unlock+0x4f/0x70 [ 127.509214][ T8716] ? __fget_files+0x184/0x1c0 [ 127.509252][ T8716] __secure_computing+0x82/0x150 [ 127.509347][ T8716] syscall_trace_enter+0xcf/0x1e0 [ 127.509376][ T8716] do_syscall_64+0xac/0x200 [ 127.509401][ T8716] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 127.509431][ T8716] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 127.509456][ T8716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.509708][ T8716] RIP: 0033:0x7fddc657eb69 [ 127.509747][ T8716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.509771][ T8716] RSP: 002b:00007fddc4bdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 127.509802][ T8716] RAX: ffffffffffffffda RBX: 00007fddc67a5fa0 RCX: 00007fddc657eb69 [ 127.509816][ T8716] RDX: 0000000000600002 RSI: 0000000000600002 RDI: 0000200000000000 [ 127.509832][ T8716] RBP: 00007fddc4bdf090 R08: 0000200000a00000 R09: 0000000000000000 [ 127.509926][ T8716] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 127.509939][ T8716] R13: 0000000000000000 R14: 00007fddc67a5fa0 R15: 00007ffc1ffb2468 [ 127.509961][ T8716] [ 127.747755][ T8697] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.806595][ T8723] loop5: detected capacity change from 0 to 256 [ 127.840725][ T5261] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 127.862201][ T8723] FAT-fs (loop5): bogus number of FAT sectors [ 127.868479][ T8723] FAT-fs (loop5): Can't find a valid FAT filesystem [ 127.883428][ T8730] loop4: detected capacity change from 0 to 4096 [ 128.010379][ T8746] FAULT_INJECTION: forcing a failure. [ 128.010379][ T8746] name failslab, interval 1, probability 0, space 0, times 0 [ 128.023718][ T8746] CPU: 0 UID: 0 PID: 8746 Comm: syz.5.1658 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 128.023754][ T8746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.023770][ T8746] Call Trace: [ 128.023781][ T8746] [ 128.023790][ T8746] __dump_stack+0x1d/0x30 [ 128.023818][ T8746] dump_stack_lvl+0xe8/0x140 [ 128.023843][ T8746] dump_stack+0x15/0x1b [ 128.023910][ T8746] should_fail_ex+0x265/0x280 [ 128.023952][ T8746] ? __tcf_chain_get+0x91/0x280 [ 128.023986][ T8746] should_failslab+0x8c/0xb0 [ 128.024169][ T8746] __kmalloc_cache_noprof+0x4c/0x320 [ 128.024210][ T8746] __tcf_chain_get+0x91/0x280 [ 128.024244][ T8746] ? __tcf_block_find+0x11a/0x1a0 [ 128.024269][ T8746] tc_new_tfilter+0x5ac/0x10a0 [ 128.024353][ T8746] ? __rcu_read_unlock+0x4f/0x70 [ 128.024435][ T8746] ? avc_has_perm_noaudit+0x1b1/0x200 [ 128.024472][ T8746] ? ns_capable+0x7d/0xb0 [ 128.024490][ T8746] ? __pfx_tc_new_tfilter+0x10/0x10 [ 128.024534][ T8746] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 128.024588][ T8746] netlink_rcv_skb+0x120/0x220 [ 128.024627][ T8746] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 128.024659][ T8746] rtnetlink_rcv+0x1c/0x30 [ 128.024694][ T8746] netlink_unicast+0x5c0/0x690 [ 128.024809][ T8746] netlink_sendmsg+0x58b/0x6b0 [ 128.024843][ T8746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.024879][ T8746] __sock_sendmsg+0x142/0x180 [ 128.024910][ T8746] ____sys_sendmsg+0x31e/0x4e0 [ 128.024975][ T8746] ___sys_sendmsg+0x17b/0x1d0 [ 128.025033][ T8746] __x64_sys_sendmsg+0xd4/0x160 [ 128.025156][ T8746] x64_sys_call+0x191e/0x2ff0 [ 128.025184][ T8746] do_syscall_64+0xd2/0x200 [ 128.025212][ T8746] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 128.025235][ T8746] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 128.025266][ T8746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.025290][ T8746] RIP: 0033:0x7f8536ffeb69 [ 128.025316][ T8746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.025481][ T8746] RSP: 002b:00007f853565f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.025501][ T8746] RAX: ffffffffffffffda RBX: 00007f8537225fa0 RCX: 00007f8536ffeb69 [ 128.025534][ T8746] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000007 [ 128.025551][ T8746] RBP: 00007f853565f090 R08: 0000000000000000 R09: 0000000000000000 [ 128.025567][ T8746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.025674][ T8746] R13: 0000000000000000 R14: 00007f8537225fa0 R15: 00007ffd896a1688 [ 128.025705][ T8746] [ 128.310947][ T8749] loop2: detected capacity change from 0 to 512 [ 128.351082][ T8749] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.398932][ T8756] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1661'. [ 128.408028][ T8756] 0ªX¹¦À: renamed from caif0 [ 128.487091][ T8768] FAULT_INJECTION: forcing a failure. [ 128.487091][ T8768] name failslab, interval 1, probability 0, space 0, times 0 [ 128.500531][ T8768] CPU: 1 UID: 0 PID: 8768 Comm: syz.2.1665 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 128.500565][ T8768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.500578][ T8768] Call Trace: [ 128.500583][ T8768] [ 128.500590][ T8768] __dump_stack+0x1d/0x30 [ 128.500610][ T8768] dump_stack_lvl+0xe8/0x140 [ 128.500628][ T8768] dump_stack+0x15/0x1b [ 128.500649][ T8768] should_fail_ex+0x265/0x280 [ 128.500690][ T8768] should_failslab+0x8c/0xb0 [ 128.500721][ T8768] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 128.500825][ T8768] ? llcp_sock_bind+0x1c9/0x320 [ 128.500886][ T8768] kmemdup_noprof+0x2b/0x70 [ 128.500983][ T8768] llcp_sock_bind+0x1c9/0x320 [ 128.501014][ T8768] __sys_bind+0x1d1/0x2a0 [ 128.501055][ T8768] __x64_sys_bind+0x3f/0x50 [ 128.501088][ T8768] x64_sys_call+0x2b6e/0x2ff0 [ 128.501109][ T8768] do_syscall_64+0xd2/0x200 [ 128.501211][ T8768] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 128.501236][ T8768] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 128.501256][ T8768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.501331][ T8768] RIP: 0033:0x7fb9270deb69 [ 128.501349][ T8768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.501366][ T8768] RSP: 002b:00007fb92573f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 128.501441][ T8768] RAX: ffffffffffffffda RBX: 00007fb927305fa0 RCX: 00007fb9270deb69 [ 128.501457][ T8768] RDX: 0000000000000060 RSI: 0000200000000240 RDI: 0000000000000008 [ 128.501473][ T8768] RBP: 00007fb92573f090 R08: 0000000000000000 R09: 0000000000000000 [ 128.501488][ T8768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.501503][ T8768] R13: 0000000000000000 R14: 00007fb927305fa0 R15: 00007fffcd034118 [ 128.501527][ T8768] [ 128.688876][ T8756] 0ªX¹¦À: entered allmulticast mode [ 128.694812][ T8756] net_ratelimit: 24 callbacks suppressed [ 128.694896][ T8756] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 128.810189][ T3396] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 128.882388][ T8780] FAULT_INJECTION: forcing a failure. [ 128.882388][ T8780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.896409][ T8780] CPU: 0 UID: 0 PID: 8780 Comm: syz.2.1669 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 128.896454][ T8780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.896517][ T8780] Call Trace: [ 128.896524][ T8780] [ 128.896533][ T8780] __dump_stack+0x1d/0x30 [ 128.896574][ T8780] dump_stack_lvl+0xe8/0x140 [ 128.896681][ T8780] dump_stack+0x15/0x1b [ 128.896702][ T8780] should_fail_ex+0x265/0x280 [ 128.896799][ T8780] should_fail+0xb/0x20 [ 128.896905][ T8780] should_fail_usercopy+0x1a/0x20 [ 128.896938][ T8780] _copy_from_user+0x1c/0xb0 [ 128.897007][ T8780] sctp_setsockopt+0x154/0xe30 [ 128.897034][ T8780] sock_common_setsockopt+0x66/0x80 [ 128.897073][ T8780] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 128.897106][ T8780] __sys_setsockopt+0x181/0x200 [ 128.897242][ T8780] __x64_sys_setsockopt+0x64/0x80 [ 128.897338][ T8780] x64_sys_call+0x20ec/0x2ff0 [ 128.897365][ T8780] do_syscall_64+0xd2/0x200 [ 128.897398][ T8780] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 128.897423][ T8780] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 128.897458][ T8780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.897484][ T8780] RIP: 0033:0x7fb9270deb69 [ 128.897503][ T8780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.897541][ T8780] RSP: 002b:00007fb92573f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 128.897565][ T8780] RAX: ffffffffffffffda RBX: 00007fb927305fa0 RCX: 00007fb9270deb69 [ 128.897603][ T8780] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 128.897618][ T8780] RBP: 00007fb92573f090 R08: 0000000000000098 R09: 0000000000000000 [ 128.897632][ T8780] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 128.897646][ T8780] R13: 0000000000000000 R14: 00007fb927305fa0 R15: 00007fffcd034118 [ 128.897665][ T8780] [ 128.901400][ T8738] Set syz1 is full, maxelem 65536 reached [ 128.929729][ T8778] loop5: detected capacity change from 0 to 256 [ 128.963110][ T8781] loop7: detected capacity change from 0 to 4096 [ 129.043627][ T8778] FAT-fs (loop5): bogus number of FAT sectors [ 129.120413][ T8778] FAT-fs (loop5): Can't find a valid FAT filesystem [ 129.132693][ T8788] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1672'. [ 129.140800][ T29] kauditd_printk_skb: 556 callbacks suppressed [ 129.140819][ T29] audit: type=1326 audit(1754179049.937:5694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.2.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9270deb69 code=0x7ffc0000 [ 129.172016][ T29] audit: type=1326 audit(1754179049.937:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.2.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb9270deb69 code=0x7ffc0000 [ 129.195468][ T29] audit: type=1326 audit(1754179049.937:5696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.2.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9270deb69 code=0x7ffc0000 [ 129.228392][ T29] audit: type=1326 audit(1754179049.946:5697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.4.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 129.252561][ T29] audit: type=1326 audit(1754179049.946:5698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.4.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 129.276113][ T29] audit: type=1326 audit(1754179049.946:5699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.4.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 129.300489][ T29] audit: type=1326 audit(1754179049.946:5700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.4.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 129.303070][ T8794] loop4: detected capacity change from 0 to 512 [ 129.324094][ T29] audit: type=1326 audit(1754179049.946:5701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.4.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 129.324133][ T29] audit: type=1326 audit(1754179049.946:5702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.4.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 129.324170][ T29] audit: type=1326 audit(1754179050.012:5703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.2.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fb9270deb69 code=0x7ffc0000 [ 129.430925][ T8794] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.456439][ T8807] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1678'. [ 129.682265][ T8830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1688'. [ 129.713829][ T8830] loop4: detected capacity change from 0 to 512 [ 129.741000][ T8830] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.753714][ T8830] ext3: Unknown parameter 'noacl' [ 129.764463][ T8839] loop7: detected capacity change from 0 to 512 [ 129.797231][ T8839] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.819530][ T8841] loop2: detected capacity change from 0 to 4096 [ 129.874303][ T8842] loop5: detected capacity change from 0 to 4096 [ 129.923103][ T8849] bridge0: port 1(syz_tun) entered blocking state [ 129.929615][ T8849] bridge0: port 1(syz_tun) entered disabled state [ 129.941973][ T8849] syz_tun: entered allmulticast mode [ 129.985907][ T8849] syz_tun: entered promiscuous mode [ 129.991870][ T8849] bridge0: port 1(syz_tun) entered blocking state [ 129.998377][ T8849] bridge0: port 1(syz_tun) entered forwarding state [ 130.145256][ T8861] FAULT_INJECTION: forcing a failure. [ 130.145256][ T8861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.158398][ T8861] CPU: 0 UID: 0 PID: 8861 Comm: syz.2.1698 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 130.158461][ T8861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.158477][ T8861] Call Trace: [ 130.158486][ T8861] [ 130.158497][ T8861] __dump_stack+0x1d/0x30 [ 130.158523][ T8861] dump_stack_lvl+0xe8/0x140 [ 130.158634][ T8861] dump_stack+0x15/0x1b [ 130.158656][ T8861] should_fail_ex+0x265/0x280 [ 130.158731][ T8861] should_fail+0xb/0x20 [ 130.158762][ T8861] should_fail_usercopy+0x1a/0x20 [ 130.158794][ T8861] _copy_to_user+0x20/0xa0 [ 130.158856][ T8861] simple_read_from_buffer+0xb5/0x130 [ 130.158892][ T8861] proc_fail_nth_read+0x10e/0x150 [ 130.158924][ T8861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.158971][ T8861] vfs_read+0x1a0/0x6f0 [ 130.158996][ T8861] ? __rcu_read_unlock+0x4f/0x70 [ 130.159024][ T8861] ? __fget_files+0x184/0x1c0 [ 130.159058][ T8861] ksys_read+0xda/0x1a0 [ 130.159146][ T8861] __x64_sys_read+0x40/0x50 [ 130.159168][ T8861] x64_sys_call+0x27bc/0x2ff0 [ 130.159188][ T8861] do_syscall_64+0xd2/0x200 [ 130.159218][ T8861] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 130.159249][ T8861] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 130.159348][ T8861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.159392][ T8861] RIP: 0033:0x7fb9270dd57c [ 130.159431][ T8861] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 130.159522][ T8861] RSP: 002b:00007fb92573f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.159543][ T8861] RAX: ffffffffffffffda RBX: 00007fb927305fa0 RCX: 00007fb9270dd57c [ 130.159556][ T8861] RDX: 000000000000000f RSI: 00007fb92573f0a0 RDI: 000000000000000b [ 130.159572][ T8861] RBP: 00007fb92573f090 R08: 0000000000000000 R09: 0000000000000000 [ 130.159588][ T8861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.159604][ T8861] R13: 0000000000000000 R14: 00007fb927305fa0 R15: 00007fffcd034118 [ 130.159627][ T8861] [ 130.516842][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1701'. [ 130.526205][ T8868] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 130.535041][ T8868] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (133) [ 130.794524][ T8886] loop9: detected capacity change from 0 to 4096 [ 130.813665][ T8888] loop5: detected capacity change from 0 to 512 [ 130.850687][ T8888] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.150052][ T8922] netlink: 'syz.5.1723': attribute type 3 has an invalid length. [ 131.189449][ T8891] netlink: 'syz.2.1709': attribute type 21 has an invalid length. [ 131.306943][ T8939] loop7: detected capacity change from 0 to 512 [ 131.314133][ T8941] FAULT_INJECTION: forcing a failure. [ 131.314133][ T8941] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 131.328164][ T8941] CPU: 1 UID: 0 PID: 8941 Comm: syz.9.1730 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 131.328269][ T8941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.328302][ T8941] Call Trace: [ 131.328310][ T8941] [ 131.328320][ T8941] __dump_stack+0x1d/0x30 [ 131.328345][ T8941] dump_stack_lvl+0xe8/0x140 [ 131.328369][ T8941] dump_stack+0x15/0x1b [ 131.328385][ T8941] should_fail_ex+0x265/0x280 [ 131.328439][ T8941] should_fail_alloc_page+0xf2/0x100 [ 131.328602][ T8941] __alloc_frozen_pages_noprof+0xff/0x360 [ 131.328719][ T8941] alloc_pages_mpol+0xb3/0x250 [ 131.328761][ T8941] vma_alloc_folio_noprof+0x1aa/0x300 [ 131.328805][ T8941] handle_mm_fault+0xec2/0x2c20 [ 131.328883][ T8941] do_user_addr_fault+0x636/0x1090 [ 131.328970][ T8941] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 131.329171][ T8941] exc_page_fault+0x62/0xa0 [ 131.329270][ T8941] asm_exc_page_fault+0x26/0x30 [ 131.329293][ T8941] RIP: 0033:0x7fd199fc0ce3 [ 131.329312][ T8941] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 131.329336][ T8941] RSP: 002b:00007fd19875e4a0 EFLAGS: 00010206 [ 131.329370][ T8941] RAX: 0000000000008000 RBX: 00007fd19875e540 RCX: 00007fd19033f000 [ 131.329385][ T8941] RDX: 00007fd19875e6e0 RSI: 000000000000006f RDI: 00007fd19875e5e0 [ 131.329397][ T8941] RBP: 00000000000000dd R08: 000000000000000b R09: 0000000000000791 [ 131.329409][ T8941] R10: 00000000000007be R11: 00007fd19875e540 R12: 0000000000000001 [ 131.329425][ T8941] R13: 00007fd19a19d940 R14: 0000000000000050 R15: 00007fd19875e5e0 [ 131.329449][ T8941] [ 131.329460][ T8941] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 131.366091][ T8939] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.512195][ T8941] loop9: detected capacity change from 0 to 512 [ 131.563836][ T8941] EXT4-fs (loop9): 1 orphan inode deleted [ 131.573892][ T8941] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.598825][ T5019] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:24: Failed to release dquot type 1 [ 131.624428][ T8956] FAULT_INJECTION: forcing a failure. [ 131.624428][ T8956] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 131.637794][ T8956] CPU: 1 UID: 0 PID: 8956 Comm: syz.4.1737 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 131.637868][ T8956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.637883][ T8956] Call Trace: [ 131.637891][ T8956] [ 131.637900][ T8956] __dump_stack+0x1d/0x30 [ 131.637982][ T8956] dump_stack_lvl+0xe8/0x140 [ 131.638006][ T8956] dump_stack+0x15/0x1b [ 131.638027][ T8956] should_fail_ex+0x265/0x280 [ 131.638070][ T8956] should_fail_alloc_page+0xf2/0x100 [ 131.638158][ T8956] __alloc_frozen_pages_noprof+0xff/0x360 [ 131.638202][ T8956] alloc_pages_mpol+0xb3/0x250 [ 131.638250][ T8956] vma_alloc_folio_noprof+0x1aa/0x300 [ 131.638328][ T8956] handle_mm_fault+0xec2/0x2c20 [ 131.638360][ T8956] do_user_addr_fault+0x636/0x1090 [ 131.638424][ T8956] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 131.638459][ T8956] exc_page_fault+0x62/0xa0 [ 131.638478][ T8956] asm_exc_page_fault+0x26/0x30 [ 131.638514][ T8956] RIP: 0033:0x7fb40d4f0ce3 [ 131.638532][ T8956] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 131.638555][ T8956] RSP: 002b:00007fb40bc8e4a0 EFLAGS: 00010206 [ 131.638574][ T8956] RAX: 0000000000008000 RBX: 00007fb40bc8e540 RCX: 00007fb40386f000 [ 131.638604][ T8956] RDX: 00007fb40bc8e6e0 RSI: 000000000000002f RDI: 00007fb40bc8e5e0 [ 131.638620][ T8956] RBP: 00000000000000dd R08: 000000000000000b R09: 0000000000000796 [ 131.638632][ T8956] R10: 00000000000007c2 R11: 00007fb40bc8e540 R12: 0000000000000001 [ 131.638655][ T8956] R13: 00007fb40d6cd940 R14: 0000000000000050 R15: 00007fb40bc8e5e0 [ 131.638675][ T8956] [ 131.638730][ T8956] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 131.727777][ T8956] loop4: detected capacity change from 0 to 512 [ 131.836417][ T8956] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 131.855378][ T8957] loop8: detected capacity change from 512 to 0 [ 131.870369][ T8956] EXT4-fs (loop4): mount failed [ 131.886940][ T8963] loop8: detected capacity change from 0 to 511 [ 131.894459][ T8971] FAULT_INJECTION: forcing a failure. [ 131.894459][ T8971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.907626][ T8971] CPU: 1 UID: 0 PID: 8971 Comm: syz.2.1741 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 131.907665][ T8971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.907681][ T8971] Call Trace: [ 131.907688][ T8971] [ 131.907744][ T8971] __dump_stack+0x1d/0x30 [ 131.907771][ T8971] dump_stack_lvl+0xe8/0x140 [ 131.907796][ T8971] dump_stack+0x15/0x1b [ 131.907894][ T8971] should_fail_ex+0x265/0x280 [ 131.907995][ T8971] should_fail+0xb/0x20 [ 131.908033][ T8971] should_fail_usercopy+0x1a/0x20 [ 131.908058][ T8971] _copy_from_user+0x1c/0xb0 [ 131.908118][ T8971] ___sys_sendmsg+0xc1/0x1d0 [ 131.908251][ T8971] __x64_sys_sendmsg+0xd4/0x160 [ 131.908315][ T8971] x64_sys_call+0x191e/0x2ff0 [ 131.908343][ T8971] do_syscall_64+0xd2/0x200 [ 131.908372][ T8971] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 131.908399][ T8971] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 131.908471][ T8971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.908498][ T8971] RIP: 0033:0x7fb9270deb69 [ 131.908517][ T8971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.908537][ T8971] RSP: 002b:00007fb92573f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.908561][ T8971] RAX: ffffffffffffffda RBX: 00007fb927305fa0 RCX: 00007fb9270deb69 [ 131.908637][ T8971] RDX: 0000000000008840 RSI: 0000200000000240 RDI: 0000000000000006 [ 131.908652][ T8971] RBP: 00007fb92573f090 R08: 0000000000000000 R09: 0000000000000000 [ 131.908668][ T8971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.908684][ T8971] R13: 0000000000000000 R14: 00007fb927305fa0 R15: 00007fffcd034118 [ 131.908706][ T8971] [ 132.098444][ T8969] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1740'. [ 132.125296][ T8981] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 132.141918][ T8981] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1744'. [ 132.248071][ T8990] loop9: detected capacity change from 0 to 512 [ 132.254467][ T8990] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.354316][ T8997] random: crng reseeded on system resumption [ 132.432330][ T8976] netlink: 'syz.4.1743': attribute type 21 has an invalid length. [ 132.502009][ T9008] loop9: detected capacity change from 0 to 4096 [ 132.543253][ T9014] loop2: detected capacity change from 0 to 4096 [ 132.702778][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1764'. [ 132.784192][ T9043] random: crng reseeded on system resumption [ 132.910036][ T9054] netlink: 'syz.9.1776': attribute type 3 has an invalid length. [ 132.925960][ T9053] loop5: detected capacity change from 0 to 4096 [ 132.926027][ T9058] syz.2.1778 (9058): /proc/9056/oom_adj is deprecated, please use /proc/9056/oom_score_adj instead. [ 133.100456][ T9073] random: crng reseeded on system resumption [ 133.145615][ T9083] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 133.161924][ T9083] netlink: 92 bytes leftover after parsing attributes in process `syz.9.1789'. [ 133.362273][ T9098] loop5: detected capacity change from 0 to 4096 [ 133.382664][ T9099] loop7: detected capacity change from 0 to 4096 [ 133.522894][ T9116] random: crng reseeded on system resumption [ 133.795715][ T9143] random: crng reseeded on system resumption [ 133.861546][ T9153] random: crng reseeded on system resumption [ 133.880298][ T9149] loop5: detected capacity change from 0 to 4096 [ 133.889931][ T9150] loop7: detected capacity change from 0 to 4096 [ 133.929214][ T9155] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.1809'. [ 133.981581][ T9169] loop7: detected capacity change from 0 to 512 [ 133.995821][ T9169] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.129849][ T9195] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 134.140835][ T9195] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1833'. [ 134.278697][ T9217] random: crng reseeded on system resumption [ 134.355410][ T9233] FAULT_INJECTION: forcing a failure. [ 134.355410][ T9233] name failslab, interval 1, probability 0, space 0, times 0 [ 134.368842][ T9233] CPU: 0 UID: 0 PID: 9233 Comm: syz.4.1850 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 134.368878][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.368891][ T9233] Call Trace: [ 134.368897][ T9233] [ 134.368904][ T9233] __dump_stack+0x1d/0x30 [ 134.368924][ T9233] dump_stack_lvl+0xe8/0x140 [ 134.368948][ T9233] dump_stack+0x15/0x1b [ 134.368968][ T9233] should_fail_ex+0x265/0x280 [ 134.369008][ T9233] should_failslab+0x8c/0xb0 [ 134.369038][ T9233] kmem_cache_alloc_noprof+0x50/0x310 [ 134.369072][ T9233] ? vm_area_alloc+0x2c/0xb0 [ 134.369111][ T9233] vm_area_alloc+0x2c/0xb0 [ 134.369156][ T9233] mmap_region+0xaa2/0x1630 [ 134.369211][ T9233] do_mmap+0x9b3/0xbe0 [ 134.369255][ T9233] vm_mmap_pgoff+0x17a/0x2e0 [ 134.369296][ T9233] ksys_mmap_pgoff+0xc2/0x310 [ 134.369346][ T9233] ? __x64_sys_mmap+0x49/0x70 [ 134.369375][ T9233] x64_sys_call+0x14a3/0x2ff0 [ 134.369402][ T9233] do_syscall_64+0xd2/0x200 [ 134.369432][ T9233] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.369462][ T9233] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 134.369489][ T9233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.369516][ T9233] RIP: 0033:0x7fb40d62eba3 [ 134.369536][ T9233] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 134.369560][ T9233] RSP: 002b:00007fb40bc8ee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 134.369584][ T9233] RAX: ffffffffffffffda RBX: 0000000000000514 RCX: 00007fb40d62eba3 [ 134.369599][ T9233] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 134.369615][ T9233] RBP: 0000200000000742 R08: 00000000ffffffff R09: 0000000000000000 [ 134.369631][ T9233] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 134.369646][ T9233] R13: 00007fb40bc8eef0 R14: 00007fb40bc8eeb0 R15: 0000200000000000 [ 134.369670][ T9233] [ 134.414353][ T9233] lo speed is unknown, defaulting to 1000 [ 134.414376][ T9233] lo speed is unknown, defaulting to 1000 [ 134.414550][ T9233] lo speed is unknown, defaulting to 1000 [ 134.416946][ T9233] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 134.420625][ T9233] lo speed is unknown, defaulting to 1000 [ 134.420879][ T9233] lo speed is unknown, defaulting to 1000 [ 134.421179][ T9233] lo speed is unknown, defaulting to 1000 [ 134.421433][ T9233] lo speed is unknown, defaulting to 1000 [ 134.421750][ T9233] lo speed is unknown, defaulting to 1000 [ 134.422144][ T9233] lo speed is unknown, defaulting to 1000 [ 134.422387][ T9233] lo speed is unknown, defaulting to 1000 [ 134.425811][ T9233] loop4: detected capacity change from 0 to 512 [ 134.426300][ T9233] EXT4-fs: Ignoring removed orlov option [ 134.426390][ T9233] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.446657][ T9241] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 134.450439][ T9233] ext4: Unknown parameter 'fsname' [ 134.689918][ T29] kauditd_printk_skb: 757 callbacks suppressed [ 134.689931][ T29] audit: type=1326 audit(1754179055.138:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb40d62d4d0 code=0x7ffc0000 [ 134.689964][ T29] audit: type=1326 audit(1754179055.138:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb40d62e76b code=0x7ffc0000 [ 134.689998][ T29] audit: type=1326 audit(1754179055.138:6461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb40d62d7ca code=0x7ffc0000 [ 134.694999][ T29] audit: type=1326 audit(1754179055.138:6462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 134.791020][ T29] audit: type=1326 audit(1754179055.138:6463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 134.791228][ T29] audit: type=1326 audit(1754179055.138:6464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 134.839435][ T29] audit: type=1326 audit(1754179055.138:6465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 134.862937][ T29] audit: type=1326 audit(1754179055.138:6466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 134.862980][ T29] audit: type=1326 audit(1754179055.138:6467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 134.863005][ T29] audit: type=1326 audit(1754179055.138:6468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 134.886997][ T9233] loop4: detected capacity change from 0 to 1024 [ 134.887475][ T9233] EXT4-fs: Ignoring removed nobh option [ 134.911762][ T9233] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 134.990432][ T9243] loop5: detected capacity change from 0 to 512 [ 135.003267][ T9243] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.007131][ T9248] loop2: detected capacity change from 0 to 512 [ 135.021389][ T9248] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.091028][ T9256] loop7: detected capacity change from 0 to 1024 [ 135.091428][ T9256] EXT4-fs: inline encryption not supported [ 135.091451][ T9256] EXT4-fs: Ignoring removed i_version option [ 135.100076][ T9256] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 135.226535][ T9276] netlink: 'syz.4.1868': attribute type 3 has an invalid length. [ 135.449280][ T9317] netlink: 'syz.7.1887': attribute type 3 has an invalid length. [ 135.461325][ T9315] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1886'. [ 135.471237][ T9315] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 135.471237][ T9315] program syz.5.1886 not setting count and/or reply_len properly [ 135.505983][ T9315] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 135.529270][ T9319] loop4: detected capacity change from 0 to 4096 [ 135.638426][ T9346] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 135.638426][ T9346] The task syz.5.1886 (9346) triggered the difference, watch for misbehavior. [ 135.717654][ T9358] netlink: 'syz.9.1903': attribute type 13 has an invalid length. [ 135.794750][ T9358] gretap0: refused to change device tx_queue_len [ 135.801228][ T9358] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 135.915800][ T9373] loop2: detected capacity change from 0 to 4096 [ 135.934882][ T9382] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1911'. [ 135.946378][ T9382] FAULT_INJECTION: forcing a failure. [ 135.946378][ T9382] name failslab, interval 1, probability 0, space 0, times 0 [ 135.959105][ T9382] CPU: 1 UID: 0 PID: 9382 Comm: syz.4.1911 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 135.959139][ T9382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.959153][ T9382] Call Trace: [ 135.959159][ T9382] [ 135.959166][ T9382] __dump_stack+0x1d/0x30 [ 135.959238][ T9382] dump_stack_lvl+0xe8/0x140 [ 135.959258][ T9382] dump_stack+0x15/0x1b [ 135.959277][ T9382] should_fail_ex+0x265/0x280 [ 135.959330][ T9382] ? __request_module+0x1c4/0x3e0 [ 135.959355][ T9382] should_failslab+0x8c/0xb0 [ 135.959381][ T9382] ? tcp_ca_find_autoload+0x80/0xe0 [ 135.959435][ T9382] __kmalloc_cache_noprof+0x4c/0x320 [ 135.959469][ T9382] ? tcp_ca_find_autoload+0x80/0xe0 [ 135.959491][ T9382] __request_module+0x1c4/0x3e0 [ 135.959513][ T9382] ? capable+0x7c/0xb0 [ 135.959595][ T9382] ? security_capable+0x83/0x90 [ 135.959692][ T9382] tcp_ca_find_autoload+0x80/0xe0 [ 135.959711][ T9382] tcp_ca_get_key_by_name+0x25/0x90 [ 135.959730][ T9382] ip_fib_metrics_init+0x172/0x470 [ 135.959756][ T9382] fib_create_info+0xbe3/0x1980 [ 135.959804][ T9382] fib_table_insert+0x60/0xeb0 [ 135.959841][ T9382] ? fib_trie_table+0xd0/0xf0 [ 135.959868][ T9382] ? fib_new_table+0x1ac/0x1c0 [ 135.959898][ T9382] inet_rtm_newroute+0xab/0x140 [ 135.959947][ T9382] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 135.960031][ T9382] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 135.960061][ T9382] netlink_rcv_skb+0x120/0x220 [ 135.960100][ T9382] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.960182][ T9382] rtnetlink_rcv+0x1c/0x30 [ 135.960241][ T9382] netlink_unicast+0x5c0/0x690 [ 135.960278][ T9382] netlink_sendmsg+0x58b/0x6b0 [ 135.960321][ T9382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.960383][ T9382] __sock_sendmsg+0x142/0x180 [ 135.960410][ T9382] __sys_sendto+0x268/0x330 [ 135.960457][ T9382] __x64_sys_sendto+0x76/0x90 [ 135.960493][ T9382] x64_sys_call+0x2d05/0x2ff0 [ 135.960575][ T9382] do_syscall_64+0xd2/0x200 [ 135.960603][ T9382] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 135.960750][ T9382] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 135.960778][ T9382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.960805][ T9382] RIP: 0033:0x7fb40d62eb69 [ 135.960824][ T9382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.960849][ T9382] RSP: 002b:00007fb40bc8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 135.960878][ T9382] RAX: ffffffffffffffda RBX: 00007fb40d855fa0 RCX: 00007fb40d62eb69 [ 135.960892][ T9382] RDX: 0000000000000078 RSI: 0000200000000000 RDI: 0000000000000003 [ 135.960904][ T9382] RBP: 00007fb40bc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 135.960917][ T9382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.960931][ T9382] R13: 0000000000000000 R14: 00007fb40d855fa0 R15: 00007ffde1479858 [ 135.960994][ T9382] [ 136.421074][ T9398] loop9: detected capacity change from 0 to 4096 [ 136.467360][ T9404] team0: Port device team_slave_0 removed [ 136.488082][ T9411] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 136.519035][ T9416] random: crng reseeded on system resumption [ 136.631737][ T9429] loop5: detected capacity change from 0 to 128 [ 136.669495][ T9429] netlink: 'syz.5.1926': attribute type 11 has an invalid length. [ 136.677619][ T9429] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1926'. [ 136.714403][ T9420] lo speed is unknown, defaulting to 1000 [ 136.728736][ T9429] syz.5.1926 (9429): attempted to duplicate a private mapping with mremap. This is not supported. [ 136.742458][ T9438] loop2: detected capacity change from 0 to 4096 [ 136.753786][ T9440] FAULT_INJECTION: forcing a failure. [ 136.753786][ T9440] name failslab, interval 1, probability 0, space 0, times 0 [ 136.755337][ T9438] EXT4-fs mount: 85 callbacks suppressed [ 136.755358][ T9438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.766698][ T9440] CPU: 0 UID: 0 PID: 9440 Comm: syz.7.1935 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 136.766749][ T9440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.766767][ T9440] Call Trace: [ 136.766773][ T9440] [ 136.766782][ T9440] __dump_stack+0x1d/0x30 [ 136.766813][ T9440] dump_stack_lvl+0xe8/0x140 [ 136.766840][ T9440] dump_stack+0x15/0x1b [ 136.766873][ T9440] should_fail_ex+0x265/0x280 [ 136.766918][ T9440] should_failslab+0x8c/0xb0 [ 136.767024][ T9440] kmem_cache_alloc_noprof+0x50/0x310 [ 136.767062][ T9440] ? security_inode_alloc+0x37/0x100 [ 136.767099][ T9440] security_inode_alloc+0x37/0x100 [ 136.767164][ T9440] inode_init_always_gfp+0x4b7/0x500 [ 136.767198][ T9440] ? __pfx_sock_alloc_inode+0x10/0x10 [ 136.767298][ T9440] alloc_inode+0x58/0x170 [ 136.767330][ T9440] do_accept+0xa0/0x3a0 [ 136.767365][ T9440] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 136.767459][ T9440] __sys_accept4+0xbf/0x140 [ 136.767498][ T9440] __x64_sys_accept4+0x51/0x60 [ 136.767535][ T9440] x64_sys_call+0x2ed3/0x2ff0 [ 136.767566][ T9440] do_syscall_64+0xd2/0x200 [ 136.767661][ T9440] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 136.767695][ T9440] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 136.767724][ T9440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.767799][ T9440] RIP: 0033:0x7fddc657eb69 [ 136.767819][ T9440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.767846][ T9440] RSP: 002b:00007fddc4bdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 136.767872][ T9440] RAX: ffffffffffffffda RBX: 00007fddc67a5fa0 RCX: 00007fddc657eb69 [ 136.767889][ T9440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 136.767980][ T9440] RBP: 00007fddc4bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 136.767998][ T9440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.768013][ T9440] R13: 0000000000000000 R14: 00007fddc67a5fa0 R15: 00007ffc1ffb2468 [ 136.768039][ T9440] [ 136.832796][ T9443] loop4: detected capacity change from 0 to 4096 [ 136.839088][ T9438] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.950593][ T9443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.040915][ T9443] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.097024][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1939'. [ 137.112439][ T9451] loop2: detected capacity change from 0 to 512 [ 137.119924][ T9451] ext3: Unknown parameter 'subj_user' [ 137.127477][ T9451] sch_fq: defrate 0 ignored. [ 137.163769][ T9457] FAULT_INJECTION: forcing a failure. [ 137.163769][ T9457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.176912][ T9457] CPU: 0 UID: 0 PID: 9457 Comm: syz.9.1940 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 137.176942][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 137.177032][ T9457] Call Trace: [ 137.177041][ T9457] [ 137.177051][ T9457] __dump_stack+0x1d/0x30 [ 137.177078][ T9457] dump_stack_lvl+0xe8/0x140 [ 137.177103][ T9457] dump_stack+0x15/0x1b [ 137.177143][ T9457] should_fail_ex+0x265/0x280 [ 137.177237][ T9457] should_fail+0xb/0x20 [ 137.177335][ T9457] should_fail_usercopy+0x1a/0x20 [ 137.177360][ T9457] strncpy_from_user+0x25/0x230 [ 137.177485][ T9457] ? kmem_cache_alloc_noprof+0x186/0x310 [ 137.177514][ T9457] ? getname_flags+0x80/0x3b0 [ 137.177544][ T9457] getname_flags+0xae/0x3b0 [ 137.177580][ T9457] do_sys_openat2+0x60/0x110 [ 137.177665][ T9457] __x64_sys_openat+0xf2/0x120 [ 137.177714][ T9457] x64_sys_call+0x2e9c/0x2ff0 [ 137.177740][ T9457] do_syscall_64+0xd2/0x200 [ 137.177768][ T9457] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 137.177796][ T9457] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 137.177844][ T9457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.177864][ T9457] RIP: 0033:0x7fd19a0feb69 [ 137.177880][ T9457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.177902][ T9457] RSP: 002b:00007fd19875f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.177927][ T9457] RAX: ffffffffffffffda RBX: 00007fd19a325fa0 RCX: 00007fd19a0feb69 [ 137.177961][ T9457] RDX: 0000000000088240 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 137.177977][ T9457] RBP: 00007fd19875f090 R08: 0000000000000000 R09: 0000000000000000 [ 137.178016][ T9457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.178031][ T9457] R13: 0000000000000000 R14: 00007fd19a325fa0 R15: 00007ffeba34f2c8 [ 137.178055][ T9457] [ 137.375114][ T9453] loop5: detected capacity change from 0 to 512 [ 137.411032][ T9453] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1939: corrupted inode contents [ 137.460929][ T9453] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.1939: mark_inode_dirty error [ 137.484148][ T9453] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1939: corrupted inode contents [ 137.498378][ T9453] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1939: mark_inode_dirty error [ 137.513969][ T9474] loop2: detected capacity change from 0 to 512 [ 137.529942][ T9453] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1939: corrupted inode contents [ 137.547909][ T9474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.561253][ T9474] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.575967][ T9453] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 137.604491][ T9453] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1939: corrupted inode contents [ 137.616973][ T9482] loop4: detected capacity change from 0 to 4096 [ 137.617830][ T9453] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.1939: mark_inode_dirty error [ 137.623669][ T9482] /dev/loop4: Can't open blockdev [ 137.636798][ T9453] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 137.652974][ T9453] EXT4-fs (loop5): 1 truncate cleaned up [ 137.658998][ T9453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.675076][ T5004] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 1 [ 137.686902][ T9453] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.707396][ T6122] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.756630][ T6305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.862332][ T9505] loop4: detected capacity change from 0 to 4096 [ 137.878156][ T9505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.892808][ T9505] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.911966][ T9513] loop7: detected capacity change from 0 to 512 [ 137.923150][ T3356] hid_parser_main: 74 callbacks suppressed [ 137.923173][ T3356] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.936446][ T3356] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.944614][ T3356] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.952114][ T3356] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.959688][ T3356] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.967245][ T3356] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.974756][ T3356] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.982997][ T3356] hid-generic 0000:0000:0000.0006: unknown main item tag 0x4 [ 137.990485][ T3356] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.998086][ T3356] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 138.016935][ T9513] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.055371][ T9513] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.066380][ T3356] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 138.120485][ T9515] lo speed is unknown, defaulting to 1000 [ 138.167416][ T5889] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.228548][ T9519] FAULT_INJECTION: forcing a failure. [ 138.228548][ T9519] name failslab, interval 1, probability 0, space 0, times 0 [ 138.241916][ T9519] CPU: 1 UID: 0 PID: 9519 Comm: syz.2.1968 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 138.241945][ T9519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.241958][ T9519] Call Trace: [ 138.241965][ T9519] [ 138.241972][ T9519] __dump_stack+0x1d/0x30 [ 138.241997][ T9519] dump_stack_lvl+0xe8/0x140 [ 138.242020][ T9519] dump_stack+0x15/0x1b [ 138.242039][ T9519] should_fail_ex+0x265/0x280 [ 138.242085][ T9519] should_failslab+0x8c/0xb0 [ 138.242122][ T9519] kmem_cache_alloc_noprof+0x50/0x310 [ 138.242161][ T9519] ? security_file_alloc+0x32/0x100 [ 138.242204][ T9519] security_file_alloc+0x32/0x100 [ 138.242244][ T9519] init_file+0x5c/0x1d0 [ 138.242284][ T9519] alloc_empty_file+0x8b/0x200 [ 138.242325][ T9519] alloc_file_pseudo+0xc6/0x160 [ 138.242368][ T9519] __shmem_file_setup+0x1de/0x210 [ 138.242416][ T9519] shmem_zero_setup+0x63/0xd0 [ 138.242460][ T9519] mmap_region+0xf5d/0x1630 [ 138.242523][ T9519] do_mmap+0x9b3/0xbe0 [ 138.242570][ T9519] vm_mmap_pgoff+0x17a/0x2e0 [ 138.242615][ T9519] ksys_mmap_pgoff+0xc2/0x310 [ 138.242657][ T9519] ? __x64_sys_mmap+0x49/0x70 [ 138.242688][ T9519] x64_sys_call+0x14a3/0x2ff0 [ 138.242718][ T9519] do_syscall_64+0xd2/0x200 [ 138.242759][ T9519] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 138.242793][ T9519] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 138.242821][ T9519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.242852][ T9519] RIP: 0033:0x7fb9270deb69 [ 138.242873][ T9519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.242896][ T9519] RSP: 002b:00007fb92573f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 138.242922][ T9519] RAX: ffffffffffffffda RBX: 00007fb927305fa0 RCX: 00007fb9270deb69 [ 138.242939][ T9519] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 138.242956][ T9519] RBP: 00007fb92573f090 R08: ffffffffffffffff R09: 00000000ec776000 [ 138.242973][ T9519] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000001 [ 138.242989][ T9519] R13: 0000000000000000 R14: 00007fb927305fa0 R15: 00007fffcd034118 [ 138.243011][ T9519] [ 138.929451][ T9538] netlink: 'syz.9.1972': attribute type 3 has an invalid length. [ 139.057092][ T9555] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 139.070104][ T9555] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1980'. [ 139.086331][ T9553] loop9: detected capacity change from 0 to 512 [ 139.099051][ T9553] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.099197][ T9553] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.125073][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1974'. [ 139.153612][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1978'. [ 139.165624][ T6111] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.182806][ T9563] netlink: 'syz.9.1981': attribute type 6 has an invalid length. [ 139.204697][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1975'. [ 139.352753][ T9569] random: crng reseeded on system resumption [ 139.907175][ T9583] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1988'. [ 139.919625][ T9583] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 139.919625][ T9583] program syz.2.1988 not setting count and/or reply_len properly [ 139.945494][ T9583] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 140.100596][ T29] kauditd_printk_skb: 3426 callbacks suppressed [ 140.100626][ T29] audit: type=1400 audit(1754179060.189:9894): avc: denied { ioctl } for pid=9591 comm="syz.5.1992" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 140.157035][ T29] audit: type=1326 audit(1754179060.198:9895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.7.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc657eb69 code=0x7ffc0000 [ 140.182063][ T29] audit: type=1326 audit(1754179060.198:9896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.7.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc657eb69 code=0x7ffc0000 [ 140.205735][ T29] audit: type=1326 audit(1754179060.198:9897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.7.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fddc657eb69 code=0x7ffc0000 [ 140.230407][ T29] audit: type=1326 audit(1754179060.198:9898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.7.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc657eb69 code=0x7ffc0000 [ 140.253865][ T29] audit: type=1326 audit(1754179060.208:9899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.7.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc657eb69 code=0x7ffc0000 [ 140.279677][ T9603] random: crng reseeded on system resumption [ 140.326321][ T29] audit: type=1326 audit(1754179060.404:9900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9609 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 140.354331][ T9607] loop9: detected capacity change from 0 to 8192 [ 140.364298][ T29] audit: type=1326 audit(1754179060.404:9901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9609 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 140.389391][ T29] audit: type=1326 audit(1754179060.404:9902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9609 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 140.412945][ T29] audit: type=1326 audit(1754179060.404:9903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9609 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d62eb69 code=0x7ffc0000 [ 140.440009][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1998'. [ 140.494841][ T9607] IPv6: Can't replace route, no match found [ 140.542958][ T9624] netlink: 'syz.4.2005': attribute type 10 has an invalid length. [ 140.551210][ T9624] ipvlan0: entered allmulticast mode [ 140.556552][ T9624] veth0_vlan: entered allmulticast mode [ 140.564193][ T9624] team0: Device ipvlan0 failed to register rx_handler [ 140.693301][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2010'. [ 140.741152][ T9640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2013'. [ 140.779928][ T9647] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 140.788265][ T9649] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2017'. [ 140.794559][ T9647] netlink: 92 bytes leftover after parsing attributes in process `syz.9.2016'. [ 140.893130][ T9659] random: crng reseeded on system resumption [ 141.045601][ T9686] netlink: 'syz.7.2029': attribute type 1 has an invalid length. [ 141.068604][ T9686] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.076912][ T9686] bond3: (slave bond4): making interface the new active one [ 141.084659][ T9686] bond3: (slave bond4): Enslaving as an active interface with an up link [ 141.085565][ T9693] loop4: detected capacity change from 0 to 512 [ 141.100392][ T9693] ext3: Unknown parameter 'subj_user' [ 141.109976][ T9693] sch_fq: defrate 0 ignored. [ 141.122063][ T9693] smc: adding net device syzkaller1 with user defined pnetid SYZ2 [ 141.136724][ T9692] smc: removing net device syzkaller1 with user defined pnetid SYZ2 [ 141.201705][ T9702] FAULT_INJECTION: forcing a failure. [ 141.201705][ T9702] name failslab, interval 1, probability 0, space 0, times 0 [ 141.215707][ T9702] CPU: 0 UID: 0 PID: 9702 Comm: syz.4.2041 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 141.215745][ T9702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.215762][ T9702] Call Trace: [ 141.215772][ T9702] [ 141.215778][ T9702] __dump_stack+0x1d/0x30 [ 141.215798][ T9702] dump_stack_lvl+0xe8/0x140 [ 141.215862][ T9702] dump_stack+0x15/0x1b [ 141.215876][ T9702] should_fail_ex+0x265/0x280 [ 141.215905][ T9702] should_failslab+0x8c/0xb0 [ 141.215948][ T9702] kmem_cache_alloc_noprof+0x50/0x310 [ 141.215974][ T9702] ? skb_clone+0x151/0x1f0 [ 141.215990][ T9702] skb_clone+0x151/0x1f0 [ 141.216006][ T9702] __netlink_deliver_tap+0x2c9/0x500 [ 141.216067][ T9702] netlink_dump+0x836/0x8a0 [ 141.216100][ T9702] __netlink_dump_start+0x43e/0x520 [ 141.216203][ T9702] ? __pfx_neigh_dump_info+0x10/0x10 [ 141.216228][ T9702] rtnetlink_rcv_msg+0x552/0x6d0 [ 141.216253][ T9702] ? __pfx_neigh_dump_info+0x10/0x10 [ 141.216278][ T9702] ? __pfx_neigh_dump_info+0x10/0x10 [ 141.216344][ T9702] netlink_rcv_skb+0x120/0x220 [ 141.216370][ T9702] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.216395][ T9702] rtnetlink_rcv+0x1c/0x30 [ 141.216470][ T9702] netlink_unicast+0x5c0/0x690 [ 141.216498][ T9702] netlink_sendmsg+0x58b/0x6b0 [ 141.216534][ T9702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.216581][ T9702] __sock_sendmsg+0x142/0x180 [ 141.216624][ T9702] ____sys_sendmsg+0x31e/0x4e0 [ 141.216655][ T9702] ___sys_sendmsg+0x17b/0x1d0 [ 141.216741][ T9702] __x64_sys_sendmsg+0xd4/0x160 [ 141.216802][ T9702] x64_sys_call+0x191e/0x2ff0 [ 141.216822][ T9702] do_syscall_64+0xd2/0x200 [ 141.216843][ T9702] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 141.216939][ T9702] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 141.216957][ T9702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.217040][ T9702] RIP: 0033:0x7fb40d62eb69 [ 141.217054][ T9702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.217092][ T9702] RSP: 002b:00007fb40bc8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.217109][ T9702] RAX: ffffffffffffffda RBX: 00007fb40d855fa0 RCX: 00007fb40d62eb69 [ 141.217121][ T9702] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 141.217131][ T9702] RBP: 00007fb40bc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 141.217142][ T9702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.217189][ T9702] R13: 0000000000000000 R14: 00007fb40d855fa0 R15: 00007ffde1479858 [ 141.217205][ T9702] [ 141.288216][ T9700] loop5: detected capacity change from 0 to 2048 [ 141.494128][ T9700] ext4: Unknown parameter 'obj_user' [ 141.538320][ T5249] lo speed is unknown, defaulting to 1000 [ 141.546357][ T9716] syzkaller0: entered promiscuous mode [ 141.551907][ T9716] syzkaller0: entered allmulticast mode [ 141.605114][ T9703] syzkaller1: entered promiscuous mode [ 141.610653][ T9703] syzkaller1: entered allmulticast mode [ 141.813731][ T9732] loop9: detected capacity change from 0 to 512 [ 141.823749][ T9732] ext3: Unknown parameter 'subj_user' [ 141.830915][ T9732] sch_fq: defrate 0 ignored. [ 141.933258][ T5249] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 141.989234][ T9736] lo speed is unknown, defaulting to 1000 [ 142.095512][ T9744] lo speed is unknown, defaulting to 1000 [ 142.121752][ T9745] loop9: detected capacity change from 0 to 128 [ 142.134334][ T9744] netlink: 'syz.9.2056': attribute type 11 has an invalid length. [ 142.165077][ T9747] loop9: detected capacity change from 0 to 1024 [ 142.182515][ T9747] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 142.193181][ T9747] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 142.206280][ T9747] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 142.215946][ T9747] EXT4-fs (loop9): orphan cleanup on readonly fs [ 142.223214][ T9747] EXT4-fs error (device loop9): ext4_read_inode_bitmap:167: comm syz.9.2057: Inode bitmap for bg 0 marked uninitialized [ 142.249136][ T9747] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.332743][ T6111] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.368260][ T9756] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 142.593180][ T9769] loop9: detected capacity change from 0 to 512 [ 142.611848][ T9769] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.636044][ T9769] ext4 filesystem being mounted at /291/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.670027][ T5249] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 142.682115][ T9767] unsupported nlmsg_type 40 [ 142.709255][ T6111] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.733429][ T9772] lo speed is unknown, defaulting to 1000 [ 142.858351][ T9781] netem: incorrect gi model size [ 142.863418][ T9781] netem: change failed [ 142.897750][ T9793] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 142.978408][ T9796] loop4: detected capacity change from 0 to 1024 [ 142.996320][ T9796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.018020][ T9796] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2068: Allocating blocks 449-513 which overlap fs metadata [ 143.024900][ T9796] smc: adding net device syzkaller1 with user defined pnetid SYZ2 [ 143.044893][ T9796] batadv_slave_1: entered promiscuous mode [ 143.044973][ T9796] batadv_slave_1: entered allmulticast mode [ 143.057264][ T9795] smc: removing net device syzkaller1 with user defined pnetid SYZ2 [ 143.112531][ T9795] EXT4-fs (loop4): pa ffff888106e059a0: logic 48, phys. 177, len 21 [ 143.120605][ T9795] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 143.186901][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.190964][ T9361] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 143.346189][ T9815] lo speed is unknown, defaulting to 1000 [ 143.406444][ T9827] FAULT_INJECTION: forcing a failure. [ 143.406444][ T9827] name failslab, interval 1, probability 0, space 0, times 0 [ 143.419207][ T9827] CPU: 1 UID: 0 PID: 9827 Comm: syz.4.2085 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 143.419291][ T9827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.419313][ T9827] Call Trace: [ 143.419383][ T9827] [ 143.419391][ T9827] __dump_stack+0x1d/0x30 [ 143.419415][ T9827] dump_stack_lvl+0xe8/0x140 [ 143.419436][ T9827] dump_stack+0x15/0x1b [ 143.419498][ T9827] should_fail_ex+0x265/0x280 [ 143.419532][ T9827] ? legacy_init_fs_context+0x31/0x80 [ 143.419557][ T9827] should_failslab+0x8c/0xb0 [ 143.419583][ T9827] __kmalloc_cache_noprof+0x4c/0x320 [ 143.419629][ T9827] legacy_init_fs_context+0x31/0x80 [ 143.419677][ T9827] alloc_fs_context+0x3ef/0x4e0 [ 143.419725][ T9827] fs_context_for_mount+0x22/0x30 [ 143.419751][ T9827] do_new_mount+0xe9/0x5e0 [ 143.419779][ T9827] ? security_capable+0x83/0x90 [ 143.419808][ T9827] path_mount+0x4a4/0xb20 [ 143.419834][ T9827] ? user_path_at+0x109/0x130 [ 143.419942][ T9827] __se_sys_mount+0x28f/0x2e0 [ 143.419971][ T9827] ? fput+0x8f/0xc0 [ 143.420011][ T9827] __x64_sys_mount+0x67/0x80 [ 143.420039][ T9827] x64_sys_call+0x2b4d/0x2ff0 [ 143.420130][ T9827] do_syscall_64+0xd2/0x200 [ 143.420159][ T9827] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 143.420189][ T9827] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 143.420230][ T9827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.420270][ T9827] RIP: 0033:0x7fb40d62eb69 [ 143.420288][ T9827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.420311][ T9827] RSP: 002b:00007fb40bc8f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 143.420363][ T9827] RAX: ffffffffffffffda RBX: 00007fb40d855fa0 RCX: 00007fb40d62eb69 [ 143.420378][ T9827] RDX: 0000200000000100 RSI: 0000200000000500 RDI: 0000000000000000 [ 143.420393][ T9827] RBP: 00007fb40bc8f090 R08: 0000200000000a40 R09: 0000000000000000 [ 143.420407][ T9827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.420432][ T9827] R13: 0000000000000000 R14: 00007fb40d855fa0 R15: 00007ffde1479858 [ 143.420455][ T9827] [ 143.532321][ T9835] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 143.804646][ T5248] hid_parser_main: 158 callbacks suppressed [ 143.804668][ T5248] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 143.818190][ T5248] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 143.825658][ T5248] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 143.833080][ T5248] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 143.842055][ T5248] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 143.849489][ T5248] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 143.857048][ T5248] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 143.864593][ T5248] hid-generic 0000:0000:0000.000A: unknown main item tag 0x4 [ 143.873329][ T5248] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 143.880766][ T5248] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 143.898796][ T9860] loop2: detected capacity change from 0 to 1024 [ 143.908894][ T5248] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 143.924244][ T9860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.940263][ T9854] lo speed is unknown, defaulting to 1000 [ 144.196568][ T9883] loop4: detected capacity change from 0 to 4096 [ 144.205976][ T9883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.219386][ T9883] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.339869][ T9891] syzkaller0: entered promiscuous mode [ 144.345642][ T9891] syzkaller0: entered allmulticast mode [ 144.454749][ T5004] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.529288][ T9912] __nla_validate_parse: 12 callbacks suppressed [ 144.529306][ T9912] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2117'. [ 144.549595][ T5004] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.562807][ T9892] lo speed is unknown, defaulting to 1000 [ 144.631935][ T9892] chnl_net:caif_netlink_parms(): no params data found [ 144.714861][ T5004] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.725555][ T9928] loop7: detected capacity change from 0 to 4096 [ 144.748095][ T9928] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.779035][ T9928] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.813697][ T5004] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.892948][ T9892] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.902171][ T9892] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.911527][ T9892] bridge_slave_0: entered allmulticast mode [ 144.918511][ T9892] bridge_slave_0: entered promiscuous mode [ 144.926259][ T9892] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.934124][ T9892] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.941850][ T9892] bridge_slave_1: entered allmulticast mode [ 144.948555][ T9892] bridge_slave_1: entered promiscuous mode [ 144.968384][ T9892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.978976][ T9892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.004271][ T9892] team0: Port device team_slave_0 added [ 145.032067][ T9892] team0: Port device team_slave_1 added [ 145.094218][ T9951] loop7: detected capacity change from 0 to 512 [ 145.104038][ T9951] EXT4-fs: Invalid want_extra_isize 43 [ 145.105577][ T5004] bond0 (unregistering): Released all slaves [ 145.152804][ T9892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.160551][ T9892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.186549][ T9892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.206192][ T9892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.213524][ T9892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.239867][ T9892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.257127][ T9956] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2132'. [ 145.294242][ T5004] hsr_slave_0: left promiscuous mode [ 145.299968][ T5004] hsr_slave_1: left promiscuous mode [ 145.313360][ T5004] veth1_macvtap: left promiscuous mode [ 145.322776][ T5004] veth0_macvtap: left promiscuous mode [ 145.332770][ T5004] veth1_vlan: left promiscuous mode [ 145.338435][ T5004] veth0_vlan: left promiscuous mode [ 145.580821][ T9892] hsr_slave_0: entered promiscuous mode [ 145.594148][ T9892] hsr_slave_1: entered promiscuous mode [ 145.600755][ T9892] debugfs: 'hsr0' already exists in 'hsr' [ 145.606589][ T9892] Cannot create hsr debugfs directory [ 145.656284][ T29] kauditd_printk_skb: 718 callbacks suppressed [ 145.656302][ T29] audit: type=1400 audit(1754179065.380:10622): avc: denied { write } for pid=9969 comm="syz.4.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 145.682689][ T29] audit: type=1400 audit(1754179065.380:10623): avc: denied { setopt } for pid=9969 comm="syz.4.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 145.702363][ T29] audit: type=1400 audit(1754179065.380:10624): avc: denied { read } for pid=9969 comm="syz.4.2137" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 146.092245][ T9986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.100737][ T9986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.156392][ T9892] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.173389][ T9892] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.189237][ T9892] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 146.200223][ T9892] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 146.268053][ T9892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.283997][ T9892] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.293840][ T5004] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.300998][ T5004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.314648][ T5004] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.321760][ T5004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.403361][ T9892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.483428][ T9892] veth0_vlan: entered promiscuous mode [ 146.493776][ T9892] veth1_vlan: entered promiscuous mode [ 146.510252][ T9892] veth0_macvtap: entered promiscuous mode [ 146.520386][ T9892] veth1_macvtap: entered promiscuous mode [ 146.531550][ T9892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.546828][ T9892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.558844][ T5004] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.569605][ T5004] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.598787][ T5039] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.613647][ T5039] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.616520][ T29] audit: type=1400 audit(1754179066.288:10625): avc: denied { mounton } for pid=9892 comm="syz-executor" path="/root/syzkaller.3mq5KH/syz-tmp" dev="sda1" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 146.647671][ T29] audit: type=1400 audit(1754179066.288:10626): avc: denied { mount } for pid=9892 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 146.669945][ T29] audit: type=1400 audit(1754179066.288:10627): avc: denied { mounton } for pid=9892 comm="syz-executor" path="/root/syzkaller.3mq5KH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 146.697533][ T29] audit: type=1400 audit(1754179066.288:10628): avc: denied { mounton } for pid=9892 comm="syz-executor" path="/root/syzkaller.3mq5KH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=31436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 146.727556][ T29] audit: type=1400 audit(1754179066.391:10629): avc: denied { mounton } for pid=9892 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 146.991188][ T29] audit: type=1400 audit(1754179066.419:10630): avc: denied { mount } for pid=9892 comm="syz-executor" name="/" dev="gadgetfs" ino=4693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 147.175477][ T29] audit: type=1400 audit(1754179066.802:10631): avc: denied { mount } for pid=10036 comm="syz.7.2154" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 147.256462][T10038] lo speed is unknown, defaulting to 1000 [ 147.269647][T10043] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2110'. [ 147.276530][T10040] netlink: 'syz.7.2155': attribute type 10 has an invalid length. [ 147.298246][T10046] 9pnet_virtio: no channels available for device syz [ 147.454256][T10058] syz_tun: entered allmulticast mode [ 147.467681][T10058] dvmrp8: entered allmulticast mode [ 147.494811][T10058] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 147.503457][T10058] mroute: pending queue full, dropping entries [ 147.522292][T10055] syz_tun: left allmulticast mode [ 147.574738][T10008] Process accounting paused [ 148.420046][ T5249] IPVS: starting estimator thread 0... [ 148.522264][T10122] IPVS: using max 2592 ests per chain, 129600 per kthread [ 148.825582][T10135] tipc: Enabled bearer , priority 0 [ 148.834788][T10135] syzkaller0: entered promiscuous mode [ 148.840327][T10135] syzkaller0: entered allmulticast mode [ 148.862321][T10135] tipc: Resetting bearer [ 148.875608][T10132] tipc: Resetting bearer [ 148.886220][T10132] tipc: Disabling bearer [ 148.943876][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2200'. [ 149.063872][T10167] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2208'. [ 149.073718][T10167] ip_vti0: entered promiscuous mode [ 149.079059][T10167] ip_vti0: entered allmulticast mode [ 149.445776][T10183] lo speed is unknown, defaulting to 1000 [ 149.713769][T10218] netlink: 'syz.9.2223': attribute type 4 has an invalid length. [ 149.723412][T10218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=10218 comm=syz.9.2223 [ 149.851364][T10222] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2231'. [ 149.946334][T10232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.955060][T10232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.471461][T10255] ================================================================== [ 150.479592][T10255] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 150.486558][T10255] [ 150.488892][T10255] read-write to 0xffff88811d05906c of 4 bytes by task 10254 on cpu 1: [ 150.497051][T10255] fifo_open+0x86/0x5d0 [ 150.501270][T10255] do_dentry_open+0x646/0xa20 [ 150.505968][T10255] vfs_open+0x37/0x1e0 [ 150.510053][T10255] path_openat+0x1c5e/0x2170 [ 150.514673][T10255] do_filp_open+0x109/0x230 [ 150.519219][T10255] do_sys_openat2+0xa6/0x110 [ 150.523832][T10255] __x64_sys_openat+0xf2/0x120 [ 150.528618][T10255] x64_sys_call+0x2e9c/0x2ff0 [ 150.533342][T10255] do_syscall_64+0xd2/0x200 [ 150.537879][T10255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.543802][T10255] [ 150.546135][T10255] read to 0xffff88811d05906c of 4 bytes by task 10255 on cpu 0: [ 150.553769][T10255] wait_for_partner+0xb5/0x1c0 [ 150.558550][T10255] fifo_open+0x462/0x5d0 [ 150.562806][T10255] do_dentry_open+0x646/0xa20 [ 150.567520][T10255] vfs_open+0x37/0x1e0 [ 150.571606][T10255] path_openat+0x1c5e/0x2170 [ 150.576203][T10255] do_filp_open+0x109/0x230 [ 150.580709][T10255] do_sys_openat2+0xa6/0x110 [ 150.585314][T10255] __x64_sys_open+0xe6/0x110 [ 150.589919][T10255] x64_sys_call+0x1457/0x2ff0 [ 150.594614][T10255] do_syscall_64+0xd2/0x200 [ 150.599129][T10255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.605032][T10255] [ 150.607352][T10255] value changed: 0x00000001 -> 0x00000002 [ 150.613070][T10255] [ 150.615393][T10255] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 150.621547][T10255] CPU: 0 UID: 0 PID: 10255 Comm: syz.5.2245 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 150.633711][T10255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.643777][T10255] ================================================================== [ 150.827985][ T9726] bridge0: port 3(syz_tun) entered disabled state [ 150.837955][ T9726] syz_tun (unregistering): left allmulticast mode [ 150.844568][ T9726] syz_tun (unregistering): left promiscuous mode [ 150.850936][ T9726] bridge0: port 3(syz_tun) entered disabled state [ 150.903168][ T8874] bridge0: port 3(syz_tun) entered disabled state [ 150.911975][ T8874] syz_tun (unregistering): left allmulticast mode [ 150.918512][ T8874] syz_tun (unregistering): left promiscuous mode [ 150.924937][ T8874] bridge0: port 3(syz_tun) entered disabled state [ 150.939480][ T8064] bridge0: port 1(syz_tun) entered disabled state [ 150.947560][ T8064] syz_tun (unregistering): left allmulticast mode [ 150.954207][ T8064] syz_tun (unregistering): left promiscuous mode [ 150.961236][ T8064] bridge0: port 1(syz_tun) entered disabled state [ 150.983076][ T5042] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.090803][ T5042] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.174278][ T5042] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.227404][ T5042] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.324775][ T5042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.337411][ T5042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.347960][ T5042] bond0 (unregistering): (slave team0): Releasing backup interface [ 151.357692][ T5042] bond0 (unregistering): Released all slaves [ 151.399231][ T5042] tipc: Disabling bearer [ 151.404489][ T5042] tipc: Left network mode [ 151.426514][ T5042] hsr_slave_0: left promiscuous mode [ 151.432836][ T5042] hsr_slave_1: left promiscuous mode [ 151.438397][ T5042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.445961][ T5042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.454409][ T5042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.461901][ T5042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.473107][ T5042] veth1_macvtap: left promiscuous mode [ 151.478632][ T5042] veth0_macvtap: left promiscuous mode [ 151.484302][ T5042] veth1_vlan: left promiscuous mode [ 151.489662][ T5042] veth0_vlan: left promiscuous mode [ 151.560051][ T5042] team0 (unregistering): Port device team_slave_1 removed [ 151.571183][ T5042] team0 (unregistering): Port device team_slave_0 removed [ 151.613161][ T5266] lo speed is unknown, defaulting to 1000 [ 151.618926][ T5266] syz0: Port: 1 Link DOWN [ 151.891328][ T5042] IPVS: stop unused estimator thread 0... [ 151.958665][ T5042] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.009548][ T5042] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.073412][ T5042] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.127178][ T5042] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.215563][ T5042] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.266159][ T5042] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.341087][ T5042] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.393923][ T5042] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.461079][ T5042] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.491061][ T5042] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.555528][ T5042] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.608370][ T5042] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.685512][ T5042] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.695335][ T5042] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.735633][ T5042] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.745484][ T5042] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.810102][ T5042] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.819952][ T5042] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.863971][ T5042] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.873939][ T5042] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.941123][ T5042] bridge_slave_1: left allmulticast mode [ 152.946798][ T5042] bridge_slave_1: left promiscuous mode [ 152.952470][ T5042] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.961081][ T5042] bridge_slave_0: left allmulticast mode [ 152.966731][ T5042] bridge_slave_0: left promiscuous mode [ 152.972400][ T5042] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.981103][ T5042] bridge_slave_1: left allmulticast mode [ 152.986774][ T5042] bridge_slave_1: left promiscuous mode [ 152.993234][ T5042] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.001147][ T5042] bridge_slave_0: left allmulticast mode [ 153.006868][ T5042] bridge_slave_0: left promiscuous mode [ 153.012763][ T5042] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.021422][ T5042] bridge_slave_1: left allmulticast mode [ 153.027818][ T5042] bridge_slave_1: left promiscuous mode [ 153.033559][ T5042] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.041508][ T5042] bridge_slave_0: left allmulticast mode [ 153.047224][ T5042] bridge_slave_0: left promiscuous mode [ 153.052908][ T5042] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.182299][ T5042] dvmrp8 (unregistering): left allmulticast mode [ 153.227893][ T5042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.238606][ T5042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.248281][ T5042] bond0 (unregistering): Released all slaves [ 153.304014][ T5042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.314060][ T5042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.323844][ T5042] bond0 (unregistering): Released all slaves [ 153.332570][ T5042] bond1 (unregistering): (slave batadv1): Releasing active interface [ 153.341676][ T5042] bond1 (unregistering): Released all slaves [ 153.350238][ T5042] bond2 (unregistering): Released all slaves [ 153.358770][ T5042] bond3 (unregistering): (slave bond4): Releasing backup interface [ 153.367318][ T5042] bond3 (unregistering): Released all slaves [ 153.376364][ T5042] bond4 (unregistering): Released all slaves [ 153.527257][ T5042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.537887][ T5042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.547742][ T5042] bond0 (unregistering): Released all slaves [ 153.665245][ T5042] bond0 (unregistering): left allmulticast mode [ 153.671556][ T5042] bond_slave_0: left allmulticast mode [ 153.677061][ T5042] bond_slave_1: left allmulticast mode [ 153.682538][ T5042] bond0 (unregistering): left promiscuous mode [ 153.688743][ T5042] bond_slave_0: left promiscuous mode [ 153.694230][ T5042] bond_slave_1: left promiscuous mode [ 153.705950][ T5042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.717175][ T5042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.726669][ T5042] bond0 (unregistering): Released all slaves [ 153.808392][ T5042] tipc: Disabling bearer [ 153.813686][ T5042] tipc: Left network mode [ 153.825599][ T5042] tipc: Disabling bearer [ 153.830876][ T5042] tipc: Left network mode [ 153.954735][ T5042] hsr_slave_0: left promiscuous mode [ 153.960528][ T5042] hsr_slave_1: left promiscuous mode [ 153.966161][ T5042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.973587][ T5042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.981120][ T5042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.988559][ T5042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.998540][ T5042] hsr_slave_0: left promiscuous mode [ 154.004236][ T5042] hsr_slave_1: left promiscuous mode [ 154.009798][ T5042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.017227][ T5042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.024767][ T5042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.032277][ T5042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.041759][ T5042] hsr_slave_0: left promiscuous mode [ 154.047500][ T5042] hsr_slave_1: left promiscuous mode [ 154.053169][ T5042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.060640][ T5042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.068141][ T5042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.075682][ T5042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.085021][ T5042] hsr_slave_0: left promiscuous mode [ 154.090652][ T5042] hsr_slave_1: left promiscuous mode [ 154.096327][ T5042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.103754][ T5042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.111277][ T5042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.118715][ T5042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.135827][ T5042] veth1_macvtap: left promiscuous mode [ 154.141408][ T5042] veth0_macvtap: left promiscuous mode [ 154.146934][ T5042] veth1_vlan: left promiscuous mode [ 154.152146][ T5042] veth0_vlan: left promiscuous mode [ 154.157903][ T5042] veth1_macvtap: left promiscuous mode [ 154.163434][ T5042] veth0_macvtap: left promiscuous mode [ 154.169043][ T5042] veth1_vlan: left promiscuous mode [ 154.174269][ T5042] veth0_vlan: left promiscuous mode [ 154.180142][ T5042] veth1_macvtap: left promiscuous mode [ 154.185677][ T5042] veth0_macvtap: left promiscuous mode [ 154.191211][ T5042] veth1_vlan: left promiscuous mode [ 154.196438][ T5042] veth0_vlan: left promiscuous mode [ 154.202277][ T5042] veth1_macvtap: left promiscuous mode [ 154.207758][ T5042] veth0_macvtap: left promiscuous mode [ 154.213294][ T5042] veth1_vlan: left promiscuous mode [ 154.218565][ T5042] veth0_vlan: left promiscuous mode [ 154.382669][ T5042] team0 (unregistering): Port device team_slave_1 removed [ 154.392280][ T5042] team0 (unregistering): Port device team_slave_0 removed [ 154.446524][ T5042] team0 (unregistering): Port device team_slave_1 removed [ 154.501278][ T5042] team0 (unregistering): Port device team_slave_1 removed [ 154.511188][ T5042] team0 (unregistering): Port device team_slave_0 removed [ 154.564853][ T5042] team0 (unregistering): Port device team_slave_1 removed [ 154.574445][ T5042] team0 (unregistering): Port device team_slave_0 removed [ 155.547732][ T5042] ------------[ cut here ]------------ [ 155.553309][ T5042] WARNING: CPU: 0 PID: 5042 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x94/0x100 [ 155.563480][ T5042] Modules linked in: [ 155.567427][ T5042] CPU: 0 UID: 0 PID: 5042 Comm: kworker/u8:42 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 155.579850][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.590011][ T5042] Workqueue: netns cleanup_net [ 155.594856][ T5042] RIP: 0010:xfrm6_tunnel_net_exit+0x94/0x100 [ 155.600968][ T5042] Code: 42 a7 ab fc 4b 83 3c 3e 00 75 19 e8 d6 e0 90 fc 49 81 ff f8 07 00 00 74 1d e8 c8 e0 90 fc 49 83 c7 08 eb d7 e8 bd e0 90 fc 90 <0f> 0b 90 49 81 ff f8 07 00 00 75 e3 49 81 c6 00 08 00 00 31 db 49 [ 155.620659][ T5042] RSP: 0018:ffffc9000aa57c78 EFLAGS: 00010293 [ 155.626743][ T5042] RAX: ffffffff84c715e3 RBX: ffff8881098717c0 RCX: ffff8881201c3180 [ 155.634778][ T5042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811a0f4000 [ 155.642833][ T5042] RBP: ffffffff86c92460 R08: 0001ffff86847f7f R09: 0000000000000000 [ 155.650830][ T5042] R10: ffffc9000aa57bf8 R11: 0001c9000aa57bf8 R12: ffffffff86c92480 [ 155.658834][ T5042] R13: ffff8881098717e8 R14: ffff88811a0f4000 R15: 0000000000000000 [ 155.667020][ T5042] FS: 0000000000000000(0000) GS:ffff8882aee49000(0000) knlGS:0000000000000000 [ 155.675991][ T5042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.682659][ T5042] CR2: 00007fb40e387d60 CR3: 000000010366a000 CR4: 00000000003506f0 [ 155.690745][ T5042] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.698916][ T5042] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 155.707005][ T5042] Call Trace: [ 155.710285][ T5042] [ 155.713215][ T5042] ops_undo_list+0x27b/0x410 [ 155.717918][ T5042] cleanup_net+0x2de/0x4d0 [ 155.722441][ T5042] process_scheduled_works+0x4ce/0x9d0 [ 155.727991][ T5042] worker_thread+0x582/0x770 [ 155.732646][ T5042] kthread+0x489/0x510 [ 155.736715][ T5042] ? finish_task_switch+0xad/0x2b0 [ 155.742034][ T5042] ? __pfx_worker_thread+0x10/0x10 [ 155.747168][ T5042] ? __pfx_kthread+0x10/0x10 [ 155.751819][ T5042] ret_from_fork+0xdd/0x150 [ 155.756334][ T5042] ? __pfx_kthread+0x10/0x10 [ 155.761026][ T5042] ret_from_fork_asm+0x1a/0x30 [ 155.765892][ T5042] [ 155.768914][ T5042] ---[ end trace 0000000000000000 ]--- [ 155.775198][ T5042] ------------[ cut here ]------------ [ 155.780693][ T5042] WARNING: CPU: 0 PID: 5042 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0xd8/0x100 [ 155.790798][ T5042] Modules linked in: [ 155.794737][ T5042] CPU: 0 UID: 0 PID: 5042 Comm: kworker/u8:42 Tainted: G W 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 155.808670][ T5042] Tainted: [W]=WARN [ 155.812509][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.822607][ T5042] Workqueue: netns cleanup_net [ 155.827472][ T5042] RIP: 0010:xfrm6_tunnel_net_exit+0xd8/0x100 [ 155.833501][ T5042] Code: fe a6 ab fc 49 83 3c 1e 00 75 19 e8 92 e0 90 fc 48 81 fb f8 07 00 00 74 1d e8 84 e0 90 fc 48 83 c3 08 eb d7 e8 79 e0 90 fc 90 <0f> 0b 90 48 81 fb f8 07 00 00 75 e3 e8 67 e0 90 fc 5b 41 5e 41 5f [ 155.853258][ T5042] RSP: 0018:ffffc9000aa57c78 EFLAGS: 00010293 [ 155.859399][ T5042] RAX: ffffffff84c71627 RBX: 0000000000000008 RCX: ffff8881201c3180 [ 155.867429][ T5042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811a0f4808 [ 155.875422][ T5042] RBP: ffffffff86c92460 R08: 0001ffff86847f7f R09: 0000000000000000 [ 155.883504][ T5042] R10: ffffc9000aa57bf8 R11: 0001c9000aa57bf8 R12: ffffffff86c92480 [ 155.891544][ T5042] R13: ffff8881098717e8 R14: ffff88811a0f4800 R15: 00000000000007f8 [ 155.899627][ T5042] FS: 0000000000000000(0000) GS:ffff8882aee49000(0000) knlGS:0000000000000000 [ 155.908726][ T5042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.915399][ T5042] CR2: 00007fb40e387d60 CR3: 000000010366a000 CR4: 00000000003506f0 [ 155.923554][ T5042] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.931617][ T5042] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 155.939710][ T5042] Call Trace: [ 155.943111][ T5042] [ 155.946111][ T5042] ops_undo_list+0x27b/0x410 [ 155.950715][ T5042] cleanup_net+0x2de/0x4d0 [ 155.955218][ T5042] process_scheduled_works+0x4ce/0x9d0 [ 155.960742][ T5042] worker_thread+0x582/0x770 [ 155.965377][ T5042] kthread+0x489/0x510 [ 155.969554][ T5042] ? finish_task_switch+0xad/0x2b0 [ 155.974735][ T5042] ? __pfx_worker_thread+0x10/0x10 [ 155.979926][ T5042] ? __pfx_kthread+0x10/0x10 [ 155.984571][ T5042] ret_from_fork+0xdd/0x150 [ 155.989241][ T5042] ? __pfx_kthread+0x10/0x10 [ 155.993845][ T5042] ret_from_fork_asm+0x1a/0x30 [ 155.998685][ T5042] [ 156.001729][ T5042] ---[ end trace 0000000000000000 ]--- [ 156.010503][ T5042] IPVS: stop unused estimator thread 0... [ 156.045737][ T5042] ------------[ cut here ]------------ [ 156.051245][ T5042] WARNING: CPU: 1 PID: 5042 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x17c/0x1f0 [ 156.060883][ T5042] Modules linked in: [ 156.064852][ T5042] CPU: 1 UID: 0 PID: 5042 Comm: kworker/u8:42 Tainted: G W 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 156.078770][ T5042] Tainted: [W]=WARN [ 156.082641][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.092878][ T5042] Workqueue: netns cleanup_net [ 156.097684][ T5042] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 156.103370][ T5042] Code: 48 8d bb 30 0e 00 00 e8 52 52 bd fc 48 8b bb 30 0e 00 00 e8 e6 d0 c9 fc 5b 41 5e 41 5f 5d e9 8b 7b b3 00 cc e8 85 9f a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 77 9f a2 fc 90 0f 0b 90 4c 89 f7 e8 1b [ 156.123077][ T5042] RSP: 0018:ffffc9000aa57c60 EFLAGS: 00010293 [ 156.129210][ T5042] RAX: ffffffff84b5571b RBX: ffff8881098717c0 RCX: ffff8881201c3180 [ 156.137280][ T5042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881098725c0 [ 156.145301][ T5042] RBP: ffffffff86c8a2e0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 156.153320][ T5042] R10: ffffc9000aa57be8 R11: 0001c9000aa57be8 R12: ffffffff86c8a300 [ 156.161442][ T5042] R13: ffff8881098717e8 R14: ffff8881098725c0 R15: ffff8881098717c0 [ 156.169536][ T5042] FS: 0000000000000000(0000) GS:ffff8882aef49000(0000) knlGS:0000000000000000 [ 156.178606][ T5042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.185290][ T5042] CR2: 000056505034abb8 CR3: 0000000103668000 CR4: 00000000003506f0 [ 156.193301][ T5042] Call Trace: [ 156.196600][ T5042] [ 156.199546][ T5042] xfrm_net_exit+0x2d/0x60 [ 156.203998][ T5042] ops_undo_list+0x27b/0x410 [ 156.208695][ T5042] cleanup_net+0x2de/0x4d0 [ 156.213257][ T5042] process_scheduled_works+0x4ce/0x9d0 [ 156.218746][ T5042] worker_thread+0x582/0x770 [ 156.223355][ T5042] kthread+0x489/0x510 [ 156.227492][ T5042] ? finish_task_switch+0xad/0x2b0 [ 156.232633][ T5042] ? __pfx_worker_thread+0x10/0x10 [ 156.237768][ T5042] ? __pfx_kthread+0x10/0x10 [ 156.242401][ T5042] ret_from_fork+0xdd/0x150 [ 156.246907][ T5042] ? __pfx_kthread+0x10/0x10 [ 156.251523][ T5042] ret_from_fork_asm+0x1a/0x30 [ 156.256298][ T5042] [ 156.259314][ T5042] ---[ end trace 0000000000000000 ]---