last executing test programs: 36.735427478s ago: executing program 4 (id=117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[], 0x53) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 36.423010703s ago: executing program 4 (id=119): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001a00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x30, 0x0, "8cac903d89c9b867348d36c8761a79823dd98d50abbed6f1ecec300d67ad66d8438e8c1c02962a372fcff3aafb993f2a2bff70407c91d5356c491e021331ac0ab67fac2bab50db0047d1f598b4596111"}, 0xd8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800003e0314010027bd7000ffdbdf25090001f873797a310000000008004100727865001400330076657468305f746f5f62726964676500939892e37ba43f91b28fe4b81b7a240262fc452d7131779d5068d0f50580baa4e2a82d1dbe7b1bb5ed12798928d3bc49cbe44beadb65962e91b8118c3580552b6f4ccf71892937a610ea5050cc4cf4a01e8c084ed3c5eeb5c4d1cfd0ddee19c2da00e098bd3ceceb8b7ee1edba3ec97ba43225003a1f7302344a55f2a1eba9c6de7be93138b71e932cf7d198acc6855baff89ce921e496ed81bd68e7db9527cb3249e1bbc34e9087b72d7e"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 36.325993295s ago: executing program 4 (id=121): syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x7, 0x1e1b, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7800, 0x2, 0x6}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xd) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@deltaction={0x50, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_free\x00', r6, 0x0, 0xfffffffff7fffffe}, 0xe) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 36.097964808s ago: executing program 4 (id=125): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3004000, &(0x7f0000000340)={[{@errors_remount}, {@commit={'commit', 0x3d, 0x5}}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@nobarrier}, {@orlov}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}]}, 0x1, 0x7a1, &(0x7f0000001f00)="$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") lseek(r0, 0x10, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x6000) getdents64(0xffffffffffffffff, 0x0, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) epoll_create1(0x0) waitid(0x1000000, 0x0, 0x0, 0x4, 0x0) 35.801893713s ago: executing program 4 (id=129): unlinkat(0xffffffffffffff9c, 0x0, 0x28c) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x5aa7bac0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000040)={[{@dioread_lock}, {@jqfmt_vfsv1}, {@nouid32}, {@grpquota}]}, 0xfc, 0x580, &(0x7f0000000f80)="$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") statfs(&(0x7f0000000000)='./file1\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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") r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0xa4d, 0x1c5802) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) pipe2$watch_queue(&(0x7f0000000300), 0x80) syz_io_uring_setup(0x2b35, &(0x7f0000000640)={0x0, 0x7613, 0x40, 0x0, 0x39b, 0x0, r2}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='thermal_power_cpu_limit\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r7, 0x3a, 0x1, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0x3, &(0x7f00000001c0)={0xd, 0xfff}, &(0x7f00000002c0)) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x10048041) pipe2(&(0x7f0000000380), 0x80000) syz_open_dev$tty1(0xc, 0x4, 0x2) 35.517744037s ago: executing program 4 (id=135): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b4b, &(0x7f0000000200)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000045c3023b000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_free_percpu\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000040000000000000000000000000000000000000000000000a53cf7abb3d6259635a4a8c7bf70da144523d553a7282d799228684e52c8a795cabd26979cce6751d07f1fdd76086fcfb2d08a4d39535166e98ba9df1e1777094051a874b551508e3fdac7a147499f1993f8b14096732f196736f35dff139e46d4ef67fbcd8afded7b4d3c56a7112a"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000020a17647769fd3f25f62b3a57f44daea02e97abcd7b0499aadd02c73b3ed212822078563a4dd38f711f4f756ce83e5010000005b429400000077dd88f3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xfedd, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_enter(r5, 0xa32, 0x0, 0x47, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000e0ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x1e48) ioctl$FIONCLEX(r7, 0x5450) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, 0x0, 0x0, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0xb4, &(0x7f0000000c00)=ANY=[@ANYBLOB="aaaaaaaaaa41bbbbbbbbbbbb81001d0000040001fc78c367001930e4101faf4a9d97a22376b5d0e4595429ce8d0900000000000000e6a9a8ceb9f243b367b33f907d780f4394d134f4d657ec4ad0f8fa6a0c8ca963bc33609123d6c135ce70b4861dd75436884e1329a570e0af92c1b6263d036352b07b29f3ab703942bce53796cd94fa3c0ddaeeab8f6974af9dc38e5e4d3918cd5acf6e6d9306d85472005294000000000000000000c8c9e7183def8992dd5ae42807fe8057498b9475c2bd4a2a246f1c7ad3487c827e3187de"], 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) 35.517400987s ago: executing program 32 (id=135): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b4b, &(0x7f0000000200)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000045c3023b000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_free_percpu\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000040000000000000000000000000000000000000000000000a53cf7abb3d6259635a4a8c7bf70da144523d553a7282d799228684e52c8a795cabd26979cce6751d07f1fdd76086fcfb2d08a4d39535166e98ba9df1e1777094051a874b551508e3fdac7a147499f1993f8b14096732f196736f35dff139e46d4ef67fbcd8afded7b4d3c56a7112a"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000020a17647769fd3f25f62b3a57f44daea02e97abcd7b0499aadd02c73b3ed212822078563a4dd38f711f4f756ce83e5010000005b429400000077dd88f3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xfedd, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_enter(r5, 0xa32, 0x0, 0x47, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000e0ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x1e48) ioctl$FIONCLEX(r7, 0x5450) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, 0x0, 0x0, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0xb4, &(0x7f0000000c00)=ANY=[@ANYBLOB="aaaaaaaaaa41bbbbbbbbbbbb81001d0000040001fc78c367001930e4101faf4a9d97a22376b5d0e4595429ce8d0900000000000000e6a9a8ceb9f243b367b33f907d780f4394d134f4d657ec4ad0f8fa6a0c8ca963bc33609123d6c135ce70b4861dd75436884e1329a570e0af92c1b6263d036352b07b29f3ab703942bce53796cd94fa3c0ddaeeab8f6974af9dc38e5e4d3918cd5acf6e6d9306d85472005294000000000000000000c8c9e7183def8992dd5ae42807fe8057498b9475c2bd4a2a246f1c7ad3487c827e3187de"], 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) 3.814623502s ago: executing program 3 (id=570): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0xffb5, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1f}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x301}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) openat$tun(0xffffffffffffff9c, 0x0, 0x440000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x2, 0x0, 0x0, 0x0) 3.593546555s ago: executing program 3 (id=575): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x0) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000a00)="048c0c", 0x3}, {&(0x7f0000000780)="cddfbb122c04cc4d2bd067f2754e8f919250604bacc1114e1f109939a7b3634aae7ee08735506c2865dcfa0c09ac053cfa2b13b82c4cefa5c70fa169efbfb87b8fbf0193b3501522bb9f898465a2cbbb", 0x50}, {&(0x7f0000002fc0)="d1f9b2a26abf1e52c91fd99114fffceb473a3d72481ad285c05404a9945c57d5c266fb4be0f43f77b0c1440f937f4fac20e7dbe184e3ba7089460a3bf9e922d365", 0x41}], 0x3, 0x6) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) 2.0039561s ago: executing program 2 (id=612): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x5e, 0x6, @broadcast}, 0x14) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000600)=ANY=[], 0xfdef) r4 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000080)=0xfffffffa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000) mbind(&(0x7f0000188000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x1, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$TCSETS(r5, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffffff, 0x0, 0x0, 0x0, "00769aff95595915303d74ffdeffff000400"}) syz_open_pts(r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 1.446380108s ago: executing program 1 (id=624): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000304fcff", 0x58}], 0x1) (async) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') lstat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) mknod$loop(&(0x7f00000007c0)='./file0\x00', 0x100000000000600d, 0x1) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x12, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40, 0x0, 0x0, 0x2000000}]) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0x3}, 0x18) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 1.385923769s ago: executing program 1 (id=625): r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) lseek(r3, 0x0, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="17e2000000000000000000000000000218110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r6, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) write$binfmt_elf32(r3, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xff, 0x3, 0x8, 0x61, 0x2, 0x3, 0x2, 0x1eb, 0x38, 0x240, 0xae6, 0x0, 0x20, 0x4, 0xd, 0x3}, [{0x2, 0x1000, 0x7, 0x35e, 0x6, 0x6, 0x80000001, 0x8}, {0x7, 0x9, 0x9, 0x1, 0x9, 0x0, 0x0, 0x3}, {0x4, 0xffffffff, 0x5, 0x0, 0x120, 0x5, 0x4, 0x4}, {0x70000000, 0x8, 0x7f, 0x4, 0xea29, 0x4, 0x2f12, 0x5}], "53f669de9b7be82f7e729be4ad7494dcbd139fef86d0057de894fed80913db7ae18cf5fb0af950ee32a19688b21eab349d6207ee70db3480c28426248654501326b419ffd0197e22e1680ecb2630350cd93379aac384497d1798b0235156c7e6e8db4bd148dc256ffaaa1a25447efc0735c0d00a22342fdf952f239cf6b3b79f989ecebcd049a899111257b5f28a5df677f17ff870b2d80078703b4d78a846229a75300c68ef3dd834c8da0e6a085fa1acdcf64ac5d5feaa8eaea47ee26f41e6746a77d71f31d8aa7ff1ed05d41b2979569614", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x98b) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="fdffffffac"], 0x10}}, 0x0) r11 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x84100, 0x208) ioctl$PTP_PEROUT_REQUEST(r11, 0x40383d03, &(0x7f0000000040)={{0x1, 0x4}, {0x1, 0x4}, 0x10001, 0x1}) 1.256318321s ago: executing program 2 (id=629): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87, '\x00', 0x0, r0}, 0x50) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x178}, 0x18) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) renameat2(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x101}]}}, 0x0, 0x26}, 0x28) 1.048056204s ago: executing program 1 (id=636): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = syz_open_procfs(0x0, 0x0) lseek(r3, 0xffffeffffffffffe, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100) write$tun(r3, &(0x7f0000000880)={@void, @val={0x2d0ef3ecf0eefbf6, 0x4, 0x8, 0x31df, 0x2, 0x6}, @llc={@snap={0x155, 0x54, "9a", "d95a7c", 0x11}}}, 0x12) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="004100002000010008001c00", @ANYRES32, @ANYBLOB], 0x50}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[{0x0, 0x9, 0x7, 0x6}, {0x8, 0x4, 0x1, 0xffffffff}, {0x9, 0x4, 0xda, 0x9}, {0x5, 0x2, 0x5, 0x7}, {0x7, 0x6, 0x7, 0x7}, {0x1, 0xcb, 0x9, 0x1}]}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000500)={0x0, @multicast1, @initdev}, &(0x7f00000006c0)=0xc) syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000300)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x40400, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x30, &(0x7f0000001a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x52d2, 0x0, 0x0, 0x0, 0x248}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x5}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @jmp={0x5, 0x0, 0x7, 0x3, 0x5, 0x75d303b6c2c58f15, 0x4}, @exit, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x86e}}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x1, 0x8, 0x3, 0x8, 0x30, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x21}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x10, 0xe1, &(0x7f0000000380)=""/225, 0x41000, 0x74, '\x00', r5, 0x25, r3, 0x8, &(0x7f0000000700)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x10, 0x3e54, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf9b}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.002863395s ago: executing program 2 (id=638): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x20004811}, 0x8814) 1.002498825s ago: executing program 2 (id=639): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0xffb5, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1f}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x301}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0x1, 0x357}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r5, 0x47bc, 0x2, 0x0, 0x0, 0x0) 889.097816ms ago: executing program 2 (id=642): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') lseek(r3, 0xffffeffffffffffe, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100) write$tun(r3, &(0x7f0000000880)={@void, @val={0x2d0ef3ecf0eefbf6, 0x4, 0x8, 0x31df, 0x2, 0x6}, @llc={@snap={0x155, 0x54, "9a39", "d95a7c", 0x11, "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"}}}, 0x1013) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010003b1500000000fffc000000000000", @ANYRES32=0x0, @ANYBLOB="0180000000000000280012800a000100767863616e00", @ANYRES32=0x0, @ANYBLOB="004100002000010008001c00", @ANYRES32, @ANYBLOB], 0x50}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[{0x0, 0x9, 0x7, 0x6}, {0x8, 0x4, 0x1, 0xffffffff}, {0x9, 0x4, 0xda, 0x9}, {0x5, 0x2, 0x5, 0x7}, {0x7, 0x6, 0x7, 0x7}, {0x1, 0xcb, 0x9, 0x1}]}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000500)={0x0, @multicast1, @initdev}, &(0x7f00000006c0)=0xc) syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000300)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x40400, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x30, &(0x7f0000001a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x52d2, 0x0, 0x0, 0x0, 0x248}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x5}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @jmp={0x5, 0x0, 0x7, 0x3, 0x5, 0x75d303b6c2c58f15, 0x4}, @exit, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x86e}}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x1, 0x8, 0x3, 0x8, 0x30, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x21}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x10, 0xe1, &(0x7f0000000380)=""/225, 0x41000, 0x74, '\x00', r5, 0x25, r3, 0x8, &(0x7f0000000700)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x10, 0x3e54, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000780)=[r3], &(0x7f0000001c00)=[{0x0, 0x5, 0x9, 0xc}, {0x2, 0x5, 0x6, 0x1}, {0x4, 0x1, 0xa, 0x4}, {0x2, 0x1, 0x8, 0x6}, {0x0, 0x3, 0xa, 0xa}], 0x10, 0xf9b}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 838.930517ms ago: executing program 5 (id=644): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x18, 0x0, 0xcb, r1}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x30}}, 0x0) 777.836068ms ago: executing program 5 (id=645): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="461ec9180000000000800000000000000000001801000020386820702500000000002020207b1af8ff0000000051d41b000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000009c0ede6c50e19e054145"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) rename(0x0, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) syz_emit_ethernet(0x46, &(0x7f0000002140)=ANY=[@ANYBLOB="aaaab7aaaaaaffffffffffff86dd6000021000103afffe8000000000000000000000000000bbff020000000000000000000000000001860090780001020000688a24b95962bf"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='ext4_free_blocks\x00', r2, 0x0, 0xff}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4d6, &(0x7f0000000740)="$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") socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000380)='./file0\x00', 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCFLSH(r4, 0x540b, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) ioctl$TIOCL_BLANKSCREEN(r4, 0x4b67, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010023484af53b607cc707000000080001"], 0x2c}}, 0x0) 688.39434ms ago: executing program 5 (id=646): r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) lseek(r3, 0x0, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="17e2000000000000000000000000000218110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r6, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) write$binfmt_elf32(r3, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xff, 0x3, 0x8, 0x61, 0x2, 0x3, 0x2, 0x1eb, 0x38, 0x240, 0xae6, 0x0, 0x20, 0x4, 0xd, 0x3}, [{0x2, 0x1000, 0x7, 0x35e, 0x6, 0x6, 0x80000001, 0x8}, {0x7, 0x9, 0x9, 0x1, 0x9, 0x0, 0x0, 0x3}, {0x4, 0xffffffff, 0x5, 0x0, 0x120, 0x5, 0x4, 0x4}, {0x70000000, 0x8, 0x7f, 0x4, 0xea29, 0x4, 0x2f12, 0x5}], "53f669de9b7be82f7e729be4ad7494dcbd139fef86d0057de894fed80913db7ae18cf5fb0af950ee32a19688b21eab349d6207ee70db3480c28426248654501326b419ffd0197e22e1680ecb2630350cd93379aac384497d1798b0235156c7e6e8db4bd148dc256ffaaa1a25447efc0735c0d00a22342fdf952f239cf6b3b79f989ecebcd049a899111257b5f28a5df677f17ff870b2d80078703b4d78a846229a75300c68ef3dd834c8da0e6a085fa1acdcf64ac5d5feaa8eaea47ee26f41e6746a77d71f31d8aa7ff1ed05d41b2979569614", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x98b) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="fdffffffac"], 0x10}}, 0x0) r11 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x84100, 0x208) ioctl$PTP_PEROUT_REQUEST(r11, 0x40383d03, &(0x7f0000000040)={{0x1, 0x4}, {0x1, 0x4}, 0x10001, 0x1}) 560.552382ms ago: executing program 3 (id=649): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87, '\x00', 0x0, r0}, 0x50) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x178}, 0x18) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) renameat2(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x101}]}}, 0x0, 0x26}, 0x28) 482.071863ms ago: executing program 0 (id=653): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 481.498263ms ago: executing program 5 (id=654): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c0000000b00000007000000010000060400000007000000000000000000000001000004ffff000001000000010000000000000000610000000000ff"], 0x0, 0x4f}, 0x28) creat(&(0x7f0000000240)='./file2\x00', 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}, @IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x9}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = fsopen(&(0x7f00000002c0)='ext4\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0xa}, 0x18) times(0x0) 357.111845ms ago: executing program 3 (id=655): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRESOCT], 0x0, 0x7, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rseq(&(0x7f0000002d80), 0x20, 0x0, 0x0) unshare(0x28000600) readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1) 356.649305ms ago: executing program 3 (id=656): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x1, 0x4000041, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0xed) 344.997485ms ago: executing program 0 (id=657): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4}, &(0x7f0000044000)) wait4(0x0, &(0x7f0000000200), 0x80000000, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000100)}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x20000}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$eJzs3M1vG0UbAPBn7Tht+pW8Vd9CP4AgQJQCSZOW0gMXEEgcQEKCQzmGJK1K0wY1QSJVBQGhckSVOHFBHJH4CzjBBcENiQsHuKNKFeqlhZPRZncT2zhpmjpepf79pHVndtedeTwz9uxO7AB61nD6kETsiojfI2IwyzafMJz9c/vmlcm/b16ZTKJef/OvpC89fOvmlcXi1OJ5O4tMX0Tl0yQOtSl3buHy+YmZmelLeX50/sJ7o3MLl589d2Hi7PTZ6Yvjp06dOD72/Mnx5zoSZxrXrYMfzh4+8Orb116fPH3tnZ+/TYr4szgmO1LQiuG1Dj5Rr3e4uHLtbkhnPYOtoJoN06gtjf/BqMZK4w3GK5+UWjlgU9Xr9fr+5Vyt9fBiHbiPJVF2DYByFB/06fVvsXVx+lG6Gy9mF0Bp3LfzLTvSF5X8nFrL9W0nDUfE6cV/vkq32Jz7EAAATb5P5z/PtJv/VWJ/w3l78jWUoYj4X0TsjYiTEbEvIv4fsXTuAxHx4F2W37pIkpU/0LCncn2jsa1HOv97IV/bap7/FbO/GKrmud1L8deSM+dmpo/lr8mRqG1L82NrlPHDy79+vtqxxvlfuqXlF3PBvB7X+7Y1P2dqYn7iXmJudOPjiIN97eJPllcCkog4EBEHN1jGuaPfHF7t2J3jX0MH1pnqX0c8mbX/YrTEX0jWXp8c3R4z08dGi17Rxi9X31it/HuKvwPS9t/Rtv8vxz+UNK7Xzt3N//7lU+nj1T8+W/WaZqP9vz95q2nfBxPz85fGIvqT17JKN+4fbzlvfOX8NP4jj7Uf/3tj5ZU4FBFpJ34oIh6OiEfyuj/62547vgo/vfT4uy27qivxD5Te/lPrb//6YETRERb6I08s72mfqJ7/8bumQodWko3tv2fV9j+xlDqS71nP+9966nW3vRkAAAC2qkpE7IqkMrKcrlRGRrK/4d8XOyozs3PzT5+Zff/iVPYdgaGoVYo7XYMN90PH8sv6Ij/ekj+e3zf+ojqwlB+ZnJ2ZKjt46HE7Vxn/qT+zu5Tbyq0hsKl8Xwt6l/EPvcv4h9713/G/vTlb6V5dgO5q8/k/UEY9gO5rHv/Zj4B8tJ4n7tqc+gDd0/L5Xy2rHkD3uf8HvWsj4997Btwf+tb6yeb+rlYF6J65gbjzl+QltlKiWK3djCJqaW85GhELl6NSeqQSm5go+50JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgM/4NAAD//55o4Oc=") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r6 = dup2(r5, r5) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r6, 0x1276, 0x0) getdents64(r3, &(0x7f0000000080)=""/95, 0x5f) unlinkat(r3, &(0x7f0000000000)='./file0\x00', 0x200) utimes(0x0, 0x0) dup(r3) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb76}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 246.771597ms ago: executing program 5 (id=658): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4091) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r1], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) setgid(0xee01) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x1c243811) keyctl$chown(0x4, r4, 0xee00, 0x0) keyctl$read(0xb, r4, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x80) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r6, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0xc0105303, &(0x7f0000000440)={0xfffffffd}) tkill(r5, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgsnd(0x0, &(0x7f0000000480)=ANY=[], 0x2000, 0x0) r7 = getpid() kcmp$KCMP_EPOLL_TFD(r7, r7, 0x7, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 224.015527ms ago: executing program 3 (id=659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="4601000001018610f4205ae06d6c010203012b02120001010000bdb404690200df5aa340def57d624ba6af5fdae17b097a57a8040000"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) tkill(r5, 0x12) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) 188.796708ms ago: executing program 0 (id=660): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x1, 0x4000041, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0xed) 125.836718ms ago: executing program 0 (id=661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1f000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000857a41f72a08000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005480)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r6}, 0x10) pwritev2(r6, &(0x7f0000000000)=[{&(0x7f0000000a00)="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", 0x1000}], 0x1, 0x9, 0x2, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0x3}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0xb}}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffc}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x10000000) 67.471319ms ago: executing program 0 (id=662): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x0) 64.882989ms ago: executing program 1 (id=663): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) name_to_handle_at(0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x1400) 47.403219ms ago: executing program 0 (id=664): r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) lseek(r3, 0x0, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="17e2000000000000000000000000000218110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r6, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) write$binfmt_elf32(r3, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xff, 0x3, 0x8, 0x61, 0x2, 0x3, 0x2, 0x1eb, 0x38, 0x240, 0xae6, 0x0, 0x20, 0x4, 0xd, 0x3}, [{0x2, 0x1000, 0x7, 0x35e, 0x6, 0x6, 0x80000001, 0x8}, {0x7, 0x9, 0x9, 0x1, 0x9, 0x0, 0x0, 0x3}, {0x4, 0xffffffff, 0x5, 0x0, 0x120, 0x5, 0x4, 0x4}, {0x70000000, 0x8, 0x7f, 0x4, 0xea29, 0x4, 0x2f12, 0x5}], "53f669de9b7be82f7e729be4ad7494dcbd139fef86d0057de894fed80913db7ae18cf5fb0af950ee32a19688b21eab349d6207ee70db3480c28426248654501326b419ffd0197e22e1680ecb2630350cd93379aac384497d1798b0235156c7e6e8db4bd148dc256ffaaa1a25447efc0735c0d00a22342fdf952f239cf6b3b79f989ecebcd049a899111257b5f28a5df677f17ff870b2d80078703b4d78a846229a75300c68ef3dd834c8da0e6a085fa1acdcf64ac5d5feaa8eaea47ee26f41e6746a77d71f31d8aa7ff1ed05d41b2979569614", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x98b) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="fdffffffac"], 0x10}}, 0x0) r11 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x84100, 0x208) ioctl$PTP_PEROUT_REQUEST(r11, 0x40383d03, &(0x7f0000000040)={{0x1, 0x4}, {0x1, 0x4}, 0x10001, 0x1}) 25.940459ms ago: executing program 1 (id=665): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) creat(&(0x7f00000000c0)='./file0\x00', 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0) 24.48552ms ago: executing program 5 (id=666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001"], 0x118}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000002c0)={0x0, 0xffffffffffffffd2, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x4) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r2) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) (async, rerun: 64) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x60000200}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)=ANY=[@ANYBLOB="50680413", @ANYRES16=r4, @ANYBLOB="000126bd7000fcdbdf25020000000c00050004000000000000000c00030002000000000000000c00040003000000000000000c00050008010000000000000c0008000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40014}, 0x4000) (rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r7}, 0x10) r8 = epoll_create1(0x0) epoll_pwait(r8, &(0x7f00000003c0)=[{}], 0x1, 0x101, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) (async, rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=r8, @ANYRESDEC=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r10, 0x0, 0x1}, 0x18) (async) open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x100) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r11, 0x0, 0x14, &(0x7f0000000000)="1f", 0x1) syz_read_part_table(0x618, &(0x7f0000002200)="$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") (async, rerun: 32) r12 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) (rerun: 32) sendfile(r12, r12, 0x0, 0x800000409) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x78, 0x0, 0x0, 0x0, 0x3, 0x1, 0xb08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0xf439, 0xd5}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000a00)={0x0, ""/256, 0x0, 0x0}) (async) eventfd(0xfffffffa) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000017c0)={r13, 0x0, "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", "77842a5eee705620f0df082b05dc3a99f6d34a554285aca98d5f96ede9f1e0258dc9cb3d9b28e4c237b7dfa61c37caa91a32c3d121cb3dc414c0d5c5dcf5c591b4a9913cf6796587b470c10c057f305554a6b2f0b6e43f0ac5277fa8443cc09c72ab4b779cadedf37d3493f297510a79b75444c501d86298316acf380a1abcc94f7e014dafdcfadc36c78af9afa82d63bc90f3b2ee58cdf57b8aca0a8969bbf044921fc4853fed49b03340ea944e1beb9749d3306f70b2f842b64dc16010fe0ce98cca131740b4bab7918f8aaaae02ea3bf8d799800a3ffbe9e3b6804078960fd298ede12caaf675920c800016ece243e63d5cac06472a8baab542b2d1368d7fa173f0dff78c3053e409e13295eb7677687f1370701fad7e26566fc33117ad66febb40406ce0b250131977a6e8452cf42ef3ef1d200d0e36cd139bec9791923efe5c72954437a4c37bf7b275157491b7cf33b7b58c0f17ed7eaaa5df4d6a0a07e88b4cef24c244dce9bae7c2f2f34e6958e80088d194b8540b95f324c57d62727298b99c18e42b47223445051513a4f28fdd96c2db72871733fbe1252b630622ac6908955f39e9b3642f7ebb0bf24584cb3ab05b9b3e7cc76b6385d790e9971db9a9cf85d89b8590ba1c7b8dcbf50311bf60739266c829d63a76e2b2b82399578ad1d1fcf2866f6d9a5fc8fd5b51cff655cf68e3da54cea2f13d5ffd8958aace78012fd1b3440a632b3720ffb80bf327e2f5b92843d35802749f8f41990da009f0ee5726a51dff6f971e2f3d67ca11f8ceb9d52e931885a8501fa9971973aa55157d3b656bea6db2d0104e5c85398754389a23bb9794ddd2f4c949e8c5a037093cfa91a526e22f07cc86d5aabc870401db33e18f74d16bd13c80a8d0b4d318db3223269bb0b557ef0ceb3c105b90277da5366ada6756a93f08f7f921fadba4599b20198d3c41f93b88f408e6a55cb95ac85f5abf799e44aedae3d7c3f7cc8fb73016b14d088832fafbff561d289b634e71fe6ed15e3b33b7fa8a5486a788be5290c1ae236f61a4609dc470915ae58755e87d83bf55c07ceaf7656a5166174213897593ee22c89d7ed63128f34ba54441184b319e42663c4c1a78f98110b617dcb4ad08d168f78e0f9403293af09cf8db02c887d730e418e9524d9f70b5fddae490bc9b01d8898e17b4d020c084fcb79192712a42ad9576176712c31f9212b928c728791a48c8e8c2dbd6fbdfd33b189f884f6b02c4d361565e3c4a07c169ee03bc1b734d6f27217febb3269015e0c747cf224147a9bfec2503a7d7d3a1eece26d918cbae110c1a2437ba6c0f968b93748c52d6a69d532e77e52dd45551b063a1e6144e7f81bd7b2d69c2a6c9b74535e7a0309f82e2c0dd3e8fee231b9a8b0dd5e72b9b86b68a8355eb3f8f6a994c7a4e3027838a95f778d75c7fea9bf5610733bff113e3f93e73e11976207644ac9b0d4e3ad12f2c9f8f09e25b08b8dce3c2feeae7d10a3ac8f6f6699506c57613c8d73d28406f9992cec88676b6e25d89f482add3c47a5e9f52b3491b4bfbc185f42fb3f99f7556a72c7f5513cea9192eca3092c143de86b7f9a14f88127b2b863a9b1e8150bceea1cb5c616b1895ec7445088edf75101fc443f8758e79b1d1d361bdbc924a0666f4cf719e954a4004c036ddc50b87ac311671bc3651045c0d294206c0fcd36243efdf0fed81a232b0cd94cf6f1ef8fc89cc5bfafebbd891dd56b13ed5c7a4c350ed8fb7ad12925b9dcf21680ac6cb4f383ab0ea29cbfe7fabc208b30c520503dd60ca8c4de56189463ea5166e49b5bfcb8f3201cc65668ff8aebcd09319b08d823ded4ec5f13a1842d464cb23ff87d9b85f998a08387831533f3134fc58b930466d7ff181be1cad4d35665998ec4bafd13df36c8df60811c7e5dedd0030931a3bdb8a4918b36db21203987da547e7c23df42502b07d06194e5d6fe37bc4608544c304131a480922324363ee482752b9b47db05f608aa50832e54f47d016b7a6f538ad964614fe2fafabb7f27958932390f40c8342be55cf3dbc51c84fef4d3541a82dd8cffa71966fc6520a2f39171b2b2bb1bbe5e960766dc86d1d1fda20bcd0ea23ba3648c29afacc596e5a481513ea716c7b6bd4a2a83c6516f08a4b0d750f2560b391009ea06d7ae8e2cbd7001610f7840146baf4f715d9b2316944f05213f906182ea1bab8405b50a3e5e198314bfe6a56106cbbf15e77bc04fcc2826a9a969d29782c5413bd6115195f97df6fbac9c26b311028b5fac88396801b76e1a64a154feb7792fe72cf189dce14148c58aebca4c0392ab25eae11e7b776761461ccfd085eb935e3fd105b59ca4dce9a4d3bba6da8200e7f36fb1aa0168897eb4c824537d6176c03922668fc1a9590154647ebf6b19110c0b4a3db6beb19cdeacabc73619710686efd08ece38992ced4ec3b497d60e1769c1caa62708b80f606bcf6881326fe7e4deab3d0fbfc95eb408013e39848b0fa936d5c891600a44f7c08bae30b10b615a7687242dcfb12f83f8b80e29604955dacc9b080a8de9f3a4405ef067282e9eca4c5aaa922506141791f6ef405d30732980ef19a266a89a4e81edbb51868a3c758c17fdfc7cbc812bba44a80c6f477ab00d5c614216b649bbccf84551051939a6ef39fdef2e036db4170d94be1b452068bad2ea0acb67ea196ca45fc8195fb516c86c27a34e63f502f73fb570641d6eb88222e4458b2847d1507cd2c3b2bc4ce5cb49c54b38d623868293feed22edf2834e87004692dadafcbf1d09104aa1f4422c44d2180b2d3db0bdff0be24de9e2ab6cc6ceb67a8ea181297f14e64c66a03a8e07f99aa98de39aa836d56e99dcc07b0323afaa011b33be0782ea929ad47dfa93e254f036e94c8df71143e26c966855263ba3a92cb49473ae7b959b191752ccd721bbab0e2f6bb6570b7abec5ce2605a6d32c7c8fc711d116442282b4d95a12d656860f56f809d8f5a8b5621ec0b4b04bdd8706a13d93d21e105fd11c79318197abea8e0f86b7aabb454869cca458bb048a6d14736d088ee3b77f17a836f0a46e6fed2858d4eb0ec94359c0ded50edb0e342c776f769a9ebc51124d03396eaa8e93747a4f092f337deca385e4b547ac8243733d5cf0344dfb23e8fda49c1dd9a04010ed27d413a077aae75523dd4d1a2d1d534d8f729e83cd8dcf81dde148127c728c6b6b57784664d525ef785d4e93aa4fb20b03330c9852cc8a52c000ad099d79b371435a2c9812863245abbbd07934d19913b1c3c7f929ce576d53732d5825a4f9ec425991e34753136b99207124977d48c4630d8fc775cf9cad1eada304b0d3d2dc35de7b19e2447db71db48290f89ee7e619abefca5493d9667d801b3b477ffb46c7c0b18c8a2c39b02a7253fe1c9fb67877f33b0809abac70886b6ea505af1c821a9784aa75d2f7cc481b508183881243c0e3237cfc74a4d05b0b5a9ae2fc309923e0a254e3545d81947de96c06ffe59b2088b4fc3bc34da89f2e6c36e68032a140baa45b4b8fe20442c504c8ac9a4adc5501fd8044d772f0b4d8f4057654b0a1a1847585c382fe33af4c99da3560c80783a328c8c337a8d8abb54319ed7f9aead126c98f3c51b9bd30c283fb80adb0464c2e56dba52ba67cf7affe0cce06f9a440ef8485e825b09557361e9a1ef46b746ae3dacb625c396fc2496b0f2c8107f25256a827fe5b2e3689ef28b628607de3f7798c829cccd7189b8baf26735d9f2edf5629e6dba876460cd5e53166eb29280b6c3450081fb742d77d3f2b2fd84ac497d3a98203845a723ebe710578322b9c593c789aeea855aca5a23e26d80997693bdabc1915a1e6c3910fcba6687a02d1d6b7b2c065333579fad5ff8117e17de511e8336031842d1a5cf7d960b15394b60e59399802caa78a3b3379733899b2a3b14010c6c39e9841d5c3b3f249a2cc10184c2321d6d5dff16d0de7287db9eb0700b2e6a6b576cd8d9df361c55d60ace7eb1564b4b3154f5e594e9c344b918ae82a6fcece868c70da5a44ba2b2a11447926df634203b7b78e869f489b0cab5fc6cbd33a4f90884ba1bd00dd054eee9c1b355eff0af488adfe3736e8b63febd1c14e1401af18df1282c47c04e4081c6140f2a75f43a53315c9b92a3e0ae660d76b71ad4f8ba32b7b50734891d6a8789cbdc2279b2f41a021792fe1c331d95b0e617ad4465adf6c6f6351383326c5cfffa1052ba510bcef085443bc4b031663b0ca9288444cec9ef35ffc5ed41c10de69f5e85cf03d1bedf4b585bbacdf1fdde5af4d92f3bf6afa96efa58bc50d0b4add8386d4bd0d4b686ef35d305e96fe8a4be000ca9106863457647f5679fe2853450b8fc5af126a032f6cac0a2a58559001fd929f60b044951992235e0748de967defea27e013a5f98d35b34e4a307fdab2f60d9c5536d501fb56cb10698dfbd4b2e379e49bfd773960f766f01aba74e9d97d31fede2b5cae35eeb0cb227953f0322def94ffb6cacf5c1a22c288c2eaf1c0a230772d376955c86d0fc7b45cff41d5325f4c68a1e7dc8b4d99de57ce57b07aef046a4f898a7fd6ab6848a7eb92573ef5db0766e327b674faff005eb67454fedf072f0280c92335053a28fda1fe3f8bbc26d6d85c5ca3e1cadd3b89f3e46b92f1c981eef3c166503373f6c125013b6a3edbb62de267c0a74c81d3b29d0692a4095e42fdc2bf222c000318d6b700f15c12a7b38af649cbae523a7ed781df964866f3c325e096971d7c64856aebabea561046dc27738aec2f54c59cd13fd2813a2f200aeeb3a24e4b62f9674093d33bfadb3220ce3c0ca4f35854a248d747d6ebb396508b416444c6feeac8c5782b21c1b482a6a39130abfc8f3d5d0f7e0aeed85c9dbe6376434b99a65edceda2d43f7ae771a3c920ff10d44efc4862c0f85f189115898bf92a338e384e76d3a6bcf3cba04df3653402386e1de240fed7d764187d19eca67fb24a393966f3f456c2d595e1765672a7b3defcee3f6833d402c5aafd6976628b87d80455137f02226c8119652954b120a3e2ef701537289a801face50322110d4ec7340874b4fa785d0643b924f353aab1b7867fbc4e2bed1ac1cbfe9afc0077953d2baaa10e8af860498c20c3e40041ce9b4ca33811547ab9818993a34a9b927e11cbd4e09a99ec8ab014c0f3dd082a2c1131a8a3480e3f1e2f2c0ba5d3375460640972bece90613a8ce27b894572f54493b172f915211b182d1f6443e366e8365a3e2fed4495de0478cec2747dc2097fd0814cf4a90d5d8d97357883d6da9e22ea779f6f65d65e95ab328285a18703328b3ae5386931488086610d9f1c1ec1e238171ee904ba52c80991f8120993714f1e646bfbefb6ef589387d668939dec0d7c3c0ca5e3c53325d807fa4"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000000)={{0x0, 0xfffffffffffffffe, 0x7f, 0x85, 0xff5, 0x0, 0xfffffffffffeffff, 0x8, 0x0, 0x9, 0x9, 0xffffffffffff8000, 0x3, 0x3, 0x4f}, 0x10, [0x0, 0x0]}) 15.45146ms ago: executing program 1 (id=667): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0xffb5, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1f}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x301}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0x1, 0x357}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r3, 0x47bc, 0x2, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=668): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c0000000b00000007000000010000060400000007000000000000000000000001000004ffff000001000000010000000000000000610000000000ff"], 0x0, 0x4f}, 0x28) creat(&(0x7f0000000240)='./file2\x00', 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}, @IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x9}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = fsopen(&(0x7f00000002c0)='ext4\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0xa}, 0x18) times(0x0) kernel console output (not intermixed with test programs): 2233][ T3665] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 36.267136][ T3673] loop4: detected capacity change from 0 to 512 [ 36.275280][ T3665] lo speed is unknown, defaulting to 1000 [ 36.281968][ T3673] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.295139][ T3673] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.307405][ T3665] lo speed is unknown, defaulting to 1000 [ 36.313612][ T3665] lo speed is unknown, defaulting to 1000 [ 36.320037][ T3665] lo speed is unknown, defaulting to 1000 [ 36.326245][ T3665] lo speed is unknown, defaulting to 1000 [ 36.333824][ T3663] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 36.359093][ T3673] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.412089][ T3673] EXT4-fs (loop4): 1 truncate cleaned up [ 36.433389][ T3673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.522440][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.551615][ T3670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 36.575843][ T3686] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 36.586527][ T3686] ======================================================= [ 36.586527][ T3686] WARNING: The mand mount option has been deprecated and [ 36.586527][ T3686] and is ignored by this kernel. Remove the mand [ 36.586527][ T3686] option from the mount to silence this warning. [ 36.586527][ T3686] ======================================================= [ 36.587217][ T3681] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 36.818446][ T3702] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 36.864493][ T3707] netlink: 'syz.2.66': attribute type 10 has an invalid length. [ 36.876360][ T3707] batman_adv: batadv0: Adding interface: team0 [ 36.882666][ T3707] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.908024][ T3707] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 36.923734][ T3711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 36.971870][ T3707] SELinux: policydb version 0 does not match my version range 15-34 [ 36.981101][ T3707] SELinux: failed to load policy [ 36.986820][ T3707] netlink: 48 bytes leftover after parsing attributes in process `syz.2.66'. [ 37.002836][ T3707] loop2: detected capacity change from 0 to 1024 [ 37.018623][ T3718] xt_hashlimit: size too large, truncated to 1048576 [ 37.029816][ T3707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.069106][ T3717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.75'. [ 37.113606][ T3707] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm +}[@: Allocating blocks 449-513 which overlap fs metadata [ 37.127716][ T3717] tipc: Started in network mode [ 37.132679][ T3717] tipc: Node identity 8e0175e57893, cluster identity 4711 [ 37.139867][ T3717] tipc: Enabled bearer , priority 0 [ 37.166422][ T3726] tipc: Disabling bearer [ 37.168091][ T3706] EXT4-fs (loop2): pa ffff888106ec1000: logic 48, phys. 177, len 21 [ 37.180430][ T3706] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 37.212403][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.247932][ T3729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.77'. [ 37.260294][ T3729] tipc: Enabled bearer , priority 0 [ 37.271396][ T3729] tipc: Disabling bearer [ 37.325604][ T3735] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 37.475966][ T3751] FAULT_INJECTION: forcing a failure. [ 37.475966][ T3751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.489118][ T3751] CPU: 1 UID: 0 PID: 3751 Comm: syz.0.86 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 37.489203][ T3751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 37.489214][ T3751] Call Trace: [ 37.489220][ T3751] [ 37.489227][ T3751] __dump_stack+0x1d/0x30 [ 37.489249][ T3751] dump_stack_lvl+0xe8/0x140 [ 37.489269][ T3751] dump_stack+0x15/0x1b [ 37.489284][ T3751] should_fail_ex+0x265/0x280 [ 37.489314][ T3751] should_fail+0xb/0x20 [ 37.489338][ T3751] should_fail_usercopy+0x1a/0x20 [ 37.489367][ T3751] _copy_from_iter+0xcf/0xe40 [ 37.489453][ T3751] ? __build_skb_around+0x1a0/0x200 [ 37.489481][ T3751] ? __alloc_skb+0x223/0x320 [ 37.489539][ T3751] netlink_sendmsg+0x471/0x6b0 [ 37.489559][ T3751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.489577][ T3751] __sock_sendmsg+0x145/0x180 [ 37.489602][ T3751] ____sys_sendmsg+0x31e/0x4e0 [ 37.489655][ T3751] ___sys_sendmsg+0x17b/0x1d0 [ 37.489696][ T3751] __x64_sys_sendmsg+0xd4/0x160 [ 37.489740][ T3751] x64_sys_call+0x2999/0x2fb0 [ 37.489824][ T3751] do_syscall_64+0xd2/0x200 [ 37.489840][ T3751] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 37.489864][ T3751] ? clear_bhb_loop+0x40/0x90 [ 37.489884][ T3751] ? clear_bhb_loop+0x40/0x90 [ 37.489906][ T3751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.489963][ T3751] RIP: 0033:0x7f816db7e929 [ 37.490054][ T3751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.490070][ T3751] RSP: 002b:00007f816c1e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.490087][ T3751] RAX: ffffffffffffffda RBX: 00007f816dda5fa0 RCX: 00007f816db7e929 [ 37.490100][ T3751] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 37.490110][ T3751] RBP: 00007f816c1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 37.490171][ T3751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.490184][ T3751] R13: 0000000000000000 R14: 00007f816dda5fa0 R15: 00007fff5441dff8 [ 37.490203][ T3751] [ 37.510712][ T3741] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 37.781607][ T3755] loop3: detected capacity change from 0 to 2048 [ 37.797295][ T3761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 37.829411][ T3755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.879836][ T3769] netlink: 5116 bytes leftover after parsing attributes in process `syz.0.88'. [ 38.260017][ T3785] bond0: entered promiscuous mode [ 38.265107][ T3785] bond_slave_0: entered promiscuous mode [ 38.270958][ T3785] bond_slave_1: entered promiscuous mode [ 38.296425][ T3785] batadv0: entered promiscuous mode [ 38.321652][ T3785] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 38.343957][ T3785] bond0: left promiscuous mode [ 38.348821][ T3785] bond_slave_0: left promiscuous mode [ 38.354269][ T3785] bond_slave_1: left promiscuous mode [ 38.361224][ T3785] batadv0: left promiscuous mode [ 38.401370][ T3789] IPVS: Error joining to the multicast group [ 38.490969][ T3791] infiniband syz1: set active [ 38.495736][ T3791] infiniband syz1: added veth0_to_bridge [ 38.600823][ T3791] RDS/IB: syz1: added [ 38.604888][ T3791] smc: adding ib device syz1 with port count 1 [ 38.611188][ T3791] smc: ib device syz1 port 1 has pnetid [ 38.631462][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.865828][ T3812] tipc: Started in network mode [ 38.870771][ T3812] tipc: Node identity 5eb4d0110a6, cluster identity 4711 [ 38.877835][ T3812] tipc: Enabled bearer , priority 0 [ 39.033107][ T3820] tipc: Disabling bearer [ 39.459383][ T3828] loop1: detected capacity change from 0 to 1024 [ 39.489129][ T3828] EXT4-fs: Ignoring removed nobh option [ 39.494846][ T3828] EXT4-fs: Ignoring removed bh option [ 39.520769][ T3828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.561967][ T3828] gtp0: entered promiscuous mode [ 39.566964][ T3828] gtp0: entered allmulticast mode [ 39.604103][ T3837] loop3: detected capacity change from 0 to 1024 [ 39.698864][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.761365][ T3837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.811387][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 39.811402][ T29] audit: type=1400 audit(1751449720.539:685): avc: denied { read } for pid=3835 comm="syz.3.113" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 39.852016][ T3851] loop1: detected capacity change from 0 to 128 [ 39.858749][ T29] audit: type=1326 audit(1751449720.579:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfabee929 code=0x7ffc0000 [ 39.882006][ T29] audit: type=1326 audit(1751449720.579:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfabee929 code=0x7ffc0000 [ 39.905262][ T29] audit: type=1326 audit(1751449720.579:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5dfabee929 code=0x7ffc0000 [ 39.928640][ T29] audit: type=1326 audit(1751449720.579:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5dfabee963 code=0x7ffc0000 [ 39.930778][ T3837] vhci_hcd: invalid port number 96 [ 39.951699][ T29] audit: type=1326 audit(1751449720.579:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5dfabed3df code=0x7ffc0000 [ 39.956815][ T3837] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 39.979768][ T29] audit: type=1326 audit(1751449720.579:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5dfabee9b7 code=0x7ffc0000 [ 40.010285][ T29] audit: type=1326 audit(1751449720.579:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5dfabed290 code=0x7ffc0000 [ 40.033532][ T29] audit: type=1326 audit(1751449720.579:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5dfabee52b code=0x7ffc0000 [ 40.058354][ T29] audit: type=1326 audit(1751449720.619:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5dfabed58a code=0x7ffc0000 [ 40.120972][ T31] kworker/u8:1: attempt to access beyond end of device [ 40.120972][ T31] loop1: rw=1, sector=153, nr_sectors = 8 limit=128 [ 40.144091][ T31] kworker/u8:1: attempt to access beyond end of device [ 40.144091][ T31] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 40.159559][ T31] kworker/u8:1: attempt to access beyond end of device [ 40.159559][ T31] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 40.173289][ T31] kworker/u8:1: attempt to access beyond end of device [ 40.173289][ T31] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 40.186667][ T31] kworker/u8:1: attempt to access beyond end of device [ 40.186667][ T31] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 40.200052][ T31] kworker/u8:1: attempt to access beyond end of device [ 40.200052][ T31] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 40.213614][ T31] kworker/u8:1: attempt to access beyond end of device [ 40.213614][ T31] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 40.227067][ T31] kworker/u8:1: attempt to access beyond end of device [ 40.227067][ T31] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 40.240516][ T31] kworker/u8:1: attempt to access beyond end of device [ 40.240516][ T31] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 40.253882][ T31] kworker/u8:1: attempt to access beyond end of device [ 40.253882][ T31] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 40.330990][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.405074][ T3875] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 40.438273][ T3878] loop4: detected capacity change from 0 to 2048 [ 40.445392][ T3878] EXT4-fs: Ignoring removed orlov option [ 40.452501][ T3878] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.486600][ T3878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.687456][ T3316] EXT4-fs error (device loop4): ext4_read_inline_dir:1502: inode #12: block 9: comm syz-executor: path /29/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 40.709480][ T3316] EXT4-fs (loop4): Remounting filesystem read-only [ 40.770098][ T3894] loop0: detected capacity change from 0 to 1024 [ 40.790025][ T3894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.851779][ T3894] vhci_hcd: invalid port number 96 [ 40.856924][ T3894] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 40.916708][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.945660][ T3886] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.955085][ T3904] loop1: detected capacity change from 0 to 1024 [ 40.981736][ T3904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.999535][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.063434][ T3904] vhci_hcd: invalid port number 96 [ 41.068624][ T3904] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 41.078269][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.092122][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.121141][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.215361][ T51] bridge_slave_1: left allmulticast mode [ 41.221063][ T51] bridge_slave_1: left promiscuous mode [ 41.226916][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.235310][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.245121][ T51] bridge_slave_0: left allmulticast mode [ 41.250854][ T51] bridge_slave_0: left promiscuous mode [ 41.256553][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.292833][ T3926] loop1: detected capacity change from 0 to 128 [ 41.301232][ T3926] FAT-fs (loop1): FAT read failed (blocknr 54816) [ 41.312962][ T3926] xt_hashlimit: max too large, truncated to 1048576 [ 41.324529][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.325169][ T3927] __nla_validate_parse: 10 callbacks suppressed [ 41.325181][ T3927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 41.350717][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.369431][ T51] bond0 (unregistering): Released all slaves [ 41.385895][ T3909] lo speed is unknown, defaulting to 1000 [ 41.423252][ T51] tipc: Left network mode [ 41.536904][ T51] hsr_slave_0: left promiscuous mode [ 41.554606][ T51] hsr_slave_1: left promiscuous mode [ 41.561645][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.569081][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.604833][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.612362][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.668347][ T51] veth1_macvtap: left promiscuous mode [ 41.674107][ T51] veth0_macvtap: left promiscuous mode [ 41.698817][ T51] veth1_vlan: left promiscuous mode [ 41.707339][ T51] veth0_vlan: left promiscuous mode [ 41.806910][ T51] team0 (unregistering): Port device team_slave_1 removed [ 41.821265][ T51] team0 (unregistering): Port device team_slave_0 removed [ 41.847927][ T12] smc: removing ib device syz! [ 41.931112][ T3909] chnl_net:caif_netlink_parms(): no params data found [ 42.041347][ T3954] vhci_hcd: invalid port number 96 [ 42.046514][ T3954] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 42.081616][ T3956] loop3: detected capacity change from 0 to 1024 [ 42.137939][ T3956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.292567][ T3909] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.299766][ T3909] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.307196][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.331368][ T3948] Set syz1 is full, maxelem 65536 reached [ 42.336541][ T3909] bridge_slave_0: entered allmulticast mode [ 42.362448][ T3909] bridge_slave_0: entered promiscuous mode [ 42.420115][ T3909] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.427259][ T3909] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.498731][ T3909] bridge_slave_1: entered allmulticast mode [ 42.517648][ T3909] bridge_slave_1: entered promiscuous mode [ 42.571250][ T3909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.584335][ T3909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.605455][ T3909] team0: Port device team_slave_0 added [ 42.613020][ T3909] team0: Port device team_slave_1 added [ 42.624606][ T3980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 42.640887][ T3909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.647842][ T3909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.652665][ T3942] xt_connbytes: Forcing CT accounting to be enabled [ 42.673835][ T3909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.691026][ T3983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 42.751455][ T3909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.758543][ T3909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.784758][ T3909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.846559][ T3942] set match dimension is over the limit! [ 42.866482][ T3909] hsr_slave_0: entered promiscuous mode [ 42.873508][ T3909] hsr_slave_1: entered promiscuous mode [ 42.879490][ T3909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.894584][ T3909] Cannot create hsr debugfs directory [ 42.988543][ T3909] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.997096][ T3990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.156'. [ 43.016258][ T3909] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.023355][ T3993] loop3: detected capacity change from 0 to 128 [ 43.033298][ T3909] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.045782][ T3909] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.052863][ T3990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'. [ 43.072582][ T3993] netlink: '+}[@': attribute type 16 has an invalid length. [ 43.075968][ T3909] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.079907][ T3993] netlink: '+}[@': attribute type 17 has an invalid length. [ 43.086922][ T3909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.101420][ T3909] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.108463][ T3909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.119418][ T4003] loop2: detected capacity change from 0 to 512 [ 43.133947][ T3993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 43.133972][ T4003] EXT4-fs (loop2): 1 orphan inode deleted [ 43.155727][ T4003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.168506][ T36] lo speed is unknown, defaulting to 1000 [ 43.170468][ T4003] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.185479][ T138] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 43.201475][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.209768][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.230384][ T4008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.158'. [ 43.234688][ T3909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.257445][ T4010] loop3: detected capacity change from 0 to 512 [ 43.258111][ T3909] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.265511][ T4010] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.283244][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.286202][ T4010] EXT4-fs (loop3): 1 truncate cleaned up [ 43.290307][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.294424][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.310294][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.311926][ T4010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.328104][ T3909] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.339993][ T3909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.430580][ T3909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.535555][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.585847][ T4032] loop1: detected capacity change from 0 to 128 [ 43.620286][ T3909] veth0_vlan: entered promiscuous mode [ 43.628440][ T3909] veth1_vlan: entered promiscuous mode [ 43.649683][ T3909] veth0_macvtap: entered promiscuous mode [ 43.660001][ T3909] veth1_macvtap: entered promiscuous mode [ 43.667050][ T4028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 43.678068][ T3909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.689790][ T3909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.701924][ T3909] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.710686][ T3909] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.719447][ T3909] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.728180][ T3909] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.787533][ T4055] FAULT_INJECTION: forcing a failure. [ 43.787533][ T4055] name failslab, interval 1, probability 0, space 0, times 0 [ 43.800286][ T4055] CPU: 0 UID: 0 PID: 4055 Comm: syz.0.169 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 43.800311][ T4055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.800367][ T4055] Call Trace: [ 43.800372][ T4055] [ 43.800379][ T4055] __dump_stack+0x1d/0x30 [ 43.800450][ T4055] dump_stack_lvl+0xe8/0x140 [ 43.800469][ T4055] dump_stack+0x15/0x1b [ 43.800484][ T4055] should_fail_ex+0x265/0x280 [ 43.800513][ T4055] should_failslab+0x8c/0xb0 [ 43.800594][ T4055] kmem_cache_alloc_noprof+0x50/0x310 [ 43.800615][ T4055] ? getname_kernel+0x3c/0x1f0 [ 43.800626][ T4055] ? kmem_cache_alloc_node_noprof+0x18c/0x320 [ 43.800705][ T4055] getname_kernel+0x3c/0x1f0 [ 43.800754][ T4055] kern_path+0x23/0x130 [ 43.800767][ T4055] unix_find_other+0xe9/0x760 [ 43.800781][ T4055] ? skb_set_owner_w+0x16a/0x1c0 [ 43.800859][ T4055] unix_stream_connect+0x33c/0xa50 [ 43.800874][ T4055] ? __pfx_unix_stream_connect+0x10/0x10 [ 43.800887][ T4055] __sys_connect+0x1ef/0x2b0 [ 43.800907][ T4055] __x64_sys_connect+0x3f/0x50 [ 43.800993][ T4055] x64_sys_call+0x1daa/0x2fb0 [ 43.801028][ T4055] do_syscall_64+0xd2/0x200 [ 43.801038][ T4055] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.801052][ T4055] ? clear_bhb_loop+0x40/0x90 [ 43.801064][ T4055] ? clear_bhb_loop+0x40/0x90 [ 43.801075][ T4055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.801116][ T4055] RIP: 0033:0x7f816db7e929 [ 43.801125][ T4055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.801139][ T4055] RSP: 002b:00007f816c1e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 43.801178][ T4055] RAX: ffffffffffffffda RBX: 00007f816dda5fa0 RCX: 00007f816db7e929 [ 43.801189][ T4055] RDX: 000000000000000c RSI: 0000200000fce000 RDI: 0000000000000006 [ 43.801196][ T4055] RBP: 00007f816c1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 43.801228][ T4055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.801235][ T4055] R13: 0000000000000000 R14: 00007f816dda5fa0 R15: 00007fff5441dff8 [ 43.801245][ T4055] [ 44.045341][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.058235][ T4062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.066868][ T4062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.104416][ T4068] program syz.2.174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.177079][ T4070] loop2: detected capacity change from 0 to 2048 [ 44.188995][ T4072] FAULT_INJECTION: forcing a failure. [ 44.188995][ T4072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.191129][ T4070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.202135][ T4072] CPU: 1 UID: 0 PID: 4072 Comm: syz.5.175 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 44.202165][ T4072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.202175][ T4072] Call Trace: [ 44.202180][ T4072] [ 44.202188][ T4072] __dump_stack+0x1d/0x30 [ 44.202238][ T4072] dump_stack_lvl+0xe8/0x140 [ 44.202261][ T4072] dump_stack+0x15/0x1b [ 44.202277][ T4072] should_fail_ex+0x265/0x280 [ 44.202305][ T4072] should_fail+0xb/0x20 [ 44.202329][ T4072] should_fail_usercopy+0x1a/0x20 [ 44.202415][ T4072] _copy_from_iter+0xcf/0xe40 [ 44.202491][ T4072] ? __build_skb_around+0x1a0/0x200 [ 44.202519][ T4072] ? __alloc_skb+0x223/0x320 [ 44.202584][ T4072] netlink_sendmsg+0x471/0x6b0 [ 44.202605][ T4072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.202624][ T4072] __sock_sendmsg+0x145/0x180 [ 44.202658][ T4072] ____sys_sendmsg+0x31e/0x4e0 [ 44.202688][ T4072] ___sys_sendmsg+0x17b/0x1d0 [ 44.202760][ T4072] __x64_sys_sendmsg+0xd4/0x160 [ 44.202864][ T4072] x64_sys_call+0x2999/0x2fb0 [ 44.202883][ T4072] do_syscall_64+0xd2/0x200 [ 44.202946][ T4072] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.202970][ T4072] ? clear_bhb_loop+0x40/0x90 [ 44.203041][ T4072] ? clear_bhb_loop+0x40/0x90 [ 44.203061][ T4072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.203081][ T4072] RIP: 0033:0x7fc34770e929 [ 44.203096][ T4072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.203154][ T4072] RSP: 002b:00007fc345d77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.203172][ T4072] RAX: ffffffffffffffda RBX: 00007fc347935fa0 RCX: 00007fc34770e929 [ 44.203184][ T4072] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000003 [ 44.203196][ T4072] RBP: 00007fc345d77090 R08: 0000000000000000 R09: 0000000000000000 [ 44.203208][ T4072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.203219][ T4072] R13: 0000000000000000 R14: 00007fc347935fa0 R15: 00007ffc3937a3c8 [ 44.203268][ T4072] [ 44.427182][ T4068] SELinux: Context @ is not valid (left unmapped). [ 44.453080][ T4079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 44.483646][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.521565][ T4083] 9pnet_fd: Insufficient options for proto=fd [ 44.574670][ T4077] infiniband syz!: set active [ 44.580361][ T4077] infiniband syz!: added team_slave_0 [ 44.723705][ T4086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 44.753362][ T4077] RDS/IB: syz!: added [ 44.778850][ T4077] smc: adding ib device syz! with port count 1 [ 44.809140][ T4077] smc: ib device syz! port 1 has pnetid [ 45.013961][ T4095] loop1: detected capacity change from 0 to 128 [ 45.040688][ T4095] FAT-fs (loop1): FAT read failed (blocknr 54816) [ 45.062035][ T4095] xt_hashlimit: max too large, truncated to 1048576 [ 45.117468][ T29] kauditd_printk_skb: 574 callbacks suppressed [ 45.117481][ T29] audit: type=1400 audit(1751449725.839:1266): avc: denied { create } for pid=4096 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.155558][ T29] audit: type=1400 audit(1751449725.879:1267): avc: denied { write } for pid=4096 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.339998][ T4077] syz.5.176 (4077) used greatest stack depth: 9992 bytes left [ 45.536764][ T4107] syz!: rxe_newlink: already configured on team_slave_0 [ 45.619091][ T4118] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 45.626729][ T4111] FAULT_INJECTION: forcing a failure. [ 45.626729][ T4111] name failslab, interval 1, probability 0, space 0, times 0 [ 45.639374][ T4111] CPU: 1 UID: 0 PID: 4111 Comm: syz.2.189 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 45.639402][ T4111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.639412][ T4111] Call Trace: [ 45.639417][ T4111] [ 45.639422][ T4111] __dump_stack+0x1d/0x30 [ 45.639460][ T4111] dump_stack_lvl+0xe8/0x140 [ 45.639479][ T4111] dump_stack+0x15/0x1b [ 45.639493][ T4111] should_fail_ex+0x265/0x280 [ 45.639517][ T4111] ? rtnl_newlink+0x5c/0x12d0 [ 45.639535][ T4111] should_failslab+0x8c/0xb0 [ 45.639635][ T4111] __kmalloc_cache_noprof+0x4c/0x320 [ 45.639658][ T4111] rtnl_newlink+0x5c/0x12d0 [ 45.639676][ T4111] ? bpf_trace_run4+0x105/0x1d0 [ 45.639742][ T4111] ? bpf_trace_printk+0xd6/0x1c0 [ 45.639784][ T4111] ? bpf_trace_run4+0x105/0x1d0 [ 45.639808][ T4111] ? __rcu_read_unlock+0x4f/0x70 [ 45.639828][ T4111] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 45.639855][ T4111] ? __memcg_slab_free_hook+0x135/0x230 [ 45.639956][ T4111] ? __kfree_skb+0x109/0x150 [ 45.640017][ T4111] ? __rcu_read_unlock+0x4f/0x70 [ 45.640037][ T4111] ? avc_has_perm_noaudit+0x1b1/0x200 [ 45.640136][ T4111] ? selinux_capable+0x1f9/0x270 [ 45.640168][ T4111] ? security_capable+0x83/0x90 [ 45.640194][ T4111] ? ns_capable+0x7d/0xb0 [ 45.640294][ T4111] ? __pfx_rtnl_newlink+0x10/0x10 [ 45.640317][ T4111] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 45.640343][ T4111] netlink_rcv_skb+0x123/0x220 [ 45.640372][ T4111] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 45.640442][ T4111] rtnetlink_rcv+0x1c/0x30 [ 45.640463][ T4111] netlink_unicast+0x59e/0x670 [ 45.640489][ T4111] netlink_sendmsg+0x58b/0x6b0 [ 45.640511][ T4111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.640531][ T4111] __sock_sendmsg+0x145/0x180 [ 45.640568][ T4111] ____sys_sendmsg+0x31e/0x4e0 [ 45.640599][ T4111] ___sys_sendmsg+0x17b/0x1d0 [ 45.640677][ T4111] __x64_sys_sendmsg+0xd4/0x160 [ 45.640713][ T4111] x64_sys_call+0x2999/0x2fb0 [ 45.640734][ T4111] do_syscall_64+0xd2/0x200 [ 45.640752][ T4111] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.640777][ T4111] ? clear_bhb_loop+0x40/0x90 [ 45.640839][ T4111] ? clear_bhb_loop+0x40/0x90 [ 45.640860][ T4111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.640882][ T4111] RIP: 0033:0x7f32807fe929 [ 45.640896][ T4111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.640913][ T4111] RSP: 002b:00007f327ee67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.640984][ T4111] RAX: ffffffffffffffda RBX: 00007f3280a25fa0 RCX: 00007f32807fe929 [ 45.640994][ T4111] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 45.641004][ T4111] RBP: 00007f327ee67090 R08: 0000000000000000 R09: 0000000000000000 [ 45.641016][ T4111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.641049][ T4111] R13: 0000000000000000 R14: 00007f3280a25fa0 R15: 00007ffd68e823c8 [ 45.641069][ T4111] [ 46.085318][ T29] audit: type=1326 audit(1751449726.199:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfabee929 code=0x7ffc0000 [ 46.108789][ T29] audit: type=1326 audit(1751449726.199:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfabee929 code=0x7ffc0000 [ 46.132112][ T29] audit: type=1326 audit(1751449726.199:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5dfabee929 code=0x7ffc0000 [ 46.155372][ T29] audit: type=1326 audit(1751449726.199:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfabee929 code=0x7ffc0000 [ 46.178748][ T29] audit: type=1326 audit(1751449726.199:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfabee929 code=0x7ffc0000 [ 46.202210][ T29] audit: type=1326 audit(1751449726.199:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5dfabee929 code=0x7ffc0000 [ 46.225524][ T29] audit: type=1326 audit(1751449726.199:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfabee929 code=0x7ffc0000 [ 46.248980][ T29] audit: type=1326 audit(1751449726.199:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfabee929 code=0x7ffc0000 [ 46.339002][ T4182] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 46.426509][ T4194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 46.448801][ T4198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.192'. [ 46.494534][ T4206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 46.505574][ T4207] loop2: detected capacity change from 0 to 1024 [ 46.533183][ T4207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.629556][ T4207] vhci_hcd: invalid port number 96 [ 46.634761][ T4207] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 46.695836][ T4215] FAULT_INJECTION: forcing a failure. [ 46.695836][ T4215] name failslab, interval 1, probability 0, space 0, times 0 [ 46.708505][ T4215] CPU: 1 UID: 0 PID: 4215 Comm: syz.3.202 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 46.708602][ T4215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 46.708612][ T4215] Call Trace: [ 46.708617][ T4215] [ 46.708624][ T4215] __dump_stack+0x1d/0x30 [ 46.708684][ T4215] dump_stack_lvl+0xe8/0x140 [ 46.708700][ T4215] dump_stack+0x15/0x1b [ 46.708714][ T4215] should_fail_ex+0x265/0x280 [ 46.708806][ T4215] should_failslab+0x8c/0xb0 [ 46.708825][ T4215] kmem_cache_alloc_noprof+0x50/0x310 [ 46.708846][ T4215] ? security_inode_alloc+0x37/0x100 [ 46.708931][ T4215] security_inode_alloc+0x37/0x100 [ 46.709002][ T4215] inode_init_always_gfp+0x4b7/0x500 [ 46.709051][ T4215] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 46.709071][ T4215] alloc_inode+0x58/0x170 [ 46.709157][ T4215] new_inode+0x1d/0xe0 [ 46.709176][ T4215] shmem_get_inode+0x244/0x750 [ 46.709216][ T4215] __shmem_file_setup+0x113/0x210 [ 46.709241][ T4215] shmem_file_setup+0x3b/0x50 [ 46.709268][ T4215] __se_sys_memfd_create+0x2c3/0x590 [ 46.709344][ T4215] __x64_sys_memfd_create+0x31/0x40 [ 46.709421][ T4215] x64_sys_call+0x122f/0x2fb0 [ 46.709489][ T4215] do_syscall_64+0xd2/0x200 [ 46.709654][ T4215] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.709680][ T4215] ? clear_bhb_loop+0x40/0x90 [ 46.709716][ T4215] ? clear_bhb_loop+0x40/0x90 [ 46.709734][ T4215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.709755][ T4215] RIP: 0033:0x7f784bade929 [ 46.709771][ T4215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.709788][ T4215] RSP: 002b:00007f784a146e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 46.709813][ T4215] RAX: ffffffffffffffda RBX: 00000000000007dc RCX: 00007f784bade929 [ 46.709824][ T4215] RDX: 00007f784a146ef0 RSI: 0000000000000000 RDI: 00007f784bb614cc [ 46.709914][ T4215] RBP: 0000200000000d80 R08: 00007f784a146bb7 R09: 00007f784a146e40 [ 46.709962][ T4215] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000280 [ 46.709975][ T4215] R13: 00007f784a146ef0 R14: 00007f784a146eb0 R15: 0000200000000580 [ 46.709995][ T4215] [ 47.233517][ T4226] FAULT_INJECTION: forcing a failure. [ 47.233517][ T4226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.246681][ T4226] CPU: 1 UID: 0 PID: 4226 Comm: syz.5.205 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 47.246710][ T4226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.246721][ T4226] Call Trace: [ 47.246727][ T4226] [ 47.246743][ T4226] __dump_stack+0x1d/0x30 [ 47.246824][ T4226] dump_stack_lvl+0xe8/0x140 [ 47.246840][ T4226] dump_stack+0x15/0x1b [ 47.246853][ T4226] should_fail_ex+0x265/0x280 [ 47.246930][ T4226] should_fail+0xb/0x20 [ 47.246951][ T4226] should_fail_usercopy+0x1a/0x20 [ 47.246977][ T4226] _copy_from_iter+0xcf/0xe40 [ 47.247009][ T4226] ? __build_skb_around+0x1a0/0x200 [ 47.247119][ T4226] ? __alloc_skb+0x223/0x320 [ 47.247194][ T4226] netlink_sendmsg+0x471/0x6b0 [ 47.247211][ T4226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.247227][ T4226] __sock_sendmsg+0x145/0x180 [ 47.247250][ T4226] ____sys_sendmsg+0x31e/0x4e0 [ 47.247284][ T4226] ___sys_sendmsg+0x17b/0x1d0 [ 47.247490][ T4226] __x64_sys_sendmsg+0xd4/0x160 [ 47.247526][ T4226] x64_sys_call+0x2999/0x2fb0 [ 47.247618][ T4226] do_syscall_64+0xd2/0x200 [ 47.247633][ T4226] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.247655][ T4226] ? clear_bhb_loop+0x40/0x90 [ 47.247746][ T4226] ? clear_bhb_loop+0x40/0x90 [ 47.247768][ T4226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.247787][ T4226] RIP: 0033:0x7fc34770e929 [ 47.247801][ T4226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.247818][ T4226] RSP: 002b:00007fc345d77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.247835][ T4226] RAX: ffffffffffffffda RBX: 00007fc347935fa0 RCX: 00007fc34770e929 [ 47.247863][ T4226] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 47.247873][ T4226] RBP: 00007fc345d77090 R08: 0000000000000000 R09: 0000000000000000 [ 47.247883][ T4226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.247894][ T4226] R13: 0000000000000000 R14: 00007fc347935fa0 R15: 00007ffc3937a3c8 [ 47.247914][ T4226] [ 47.536654][ T4227] FAULT_INJECTION: forcing a failure. [ 47.536654][ T4227] name failslab, interval 1, probability 0, space 0, times 0 [ 47.549457][ T4227] CPU: 0 UID: 0 PID: 4227 Comm: syz.3.204 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 47.549480][ T4227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.549490][ T4227] Call Trace: [ 47.549496][ T4227] [ 47.549504][ T4227] __dump_stack+0x1d/0x30 [ 47.549595][ T4227] dump_stack_lvl+0xe8/0x140 [ 47.549613][ T4227] dump_stack+0x15/0x1b [ 47.549630][ T4227] should_fail_ex+0x265/0x280 [ 47.549736][ T4227] should_failslab+0x8c/0xb0 [ 47.549755][ T4227] __kmalloc_node_noprof+0xa9/0x410 [ 47.549776][ T4227] ? alloc_slab_obj_exts+0x31/0x80 [ 47.549865][ T4227] ? freeze_slab+0x5c/0x80 [ 47.549898][ T4227] alloc_slab_obj_exts+0x31/0x80 [ 47.549917][ T4227] __memcg_slab_post_alloc_hook+0x23f/0x580 [ 47.549949][ T4227] kmem_cache_alloc_noprof+0x220/0x310 [ 47.550052][ T4227] ? copy_net_ns+0x10f/0x690 [ 47.550147][ T4227] copy_net_ns+0x10f/0x690 [ 47.550222][ T4227] create_new_namespaces+0x20e/0x3d0 [ 47.550298][ T4227] unshare_nsproxy_namespaces+0xe8/0x120 [ 47.550397][ T4227] ksys_unshare+0x3d0/0x6d0 [ 47.550424][ T4227] ? ksys_write+0x192/0x1a0 [ 47.550482][ T4227] __x64_sys_unshare+0x1f/0x30 [ 47.550509][ T4227] x64_sys_call+0x2d4b/0x2fb0 [ 47.550669][ T4227] do_syscall_64+0xd2/0x200 [ 47.550684][ T4227] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.550786][ T4227] ? clear_bhb_loop+0x40/0x90 [ 47.550806][ T4227] ? clear_bhb_loop+0x40/0x90 [ 47.550824][ T4227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.550842][ T4227] RIP: 0033:0x7f784bade929 [ 47.550894][ T4227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.550911][ T4227] RSP: 002b:00007f784a105038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 47.550930][ T4227] RAX: ffffffffffffffda RBX: 00007f784bd06160 RCX: 00007f784bade929 [ 47.550940][ T4227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 47.550962][ T4227] RBP: 00007f784a105090 R08: 0000000000000000 R09: 0000000000000000 [ 47.550972][ T4227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.550982][ T4227] R13: 0000000000000000 R14: 00007f784bd06160 R15: 00007ffc3d47b858 [ 47.550999][ T4227] [ 47.783212][ T4227] lo speed is unknown, defaulting to 1000 [ 47.842005][ T4224] loop3: detected capacity change from 0 to 512 [ 47.848615][ T4224] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.855052][ T4224] EXT4-fs: Ignoring removed bh option [ 47.870476][ T4224] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.881661][ T4224] EXT4-fs (loop3): 1 truncate cleaned up [ 47.887730][ T4224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.948532][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.972771][ T4230] netlink: 20 bytes leftover after parsing attributes in process `syz.5.206'. [ 47.981813][ T4230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.206'. [ 48.016892][ T4235] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 48.068810][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.137581][ T4239] siw: device registration error -23 [ 48.322490][ T4252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.214'. [ 48.338203][ T4253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 48.381047][ T4250] xt_TPROXY: Can be used only with -p tcp or -p udp [ 48.830417][ T4253] loop2: detected capacity change from 0 to 512 [ 48.836970][ T4253] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.838167][ T4247] lo speed is unknown, defaulting to 1000 [ 48.843455][ T4253] EXT4-fs: Ignoring removed bh option [ 48.884376][ T4253] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.898691][ T4253] EXT4-fs (loop2): 1 truncate cleaned up [ 48.905777][ T4253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.102511][ T4280] loop0: detected capacity change from 0 to 512 [ 49.116949][ T4280] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 49.138484][ T4280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.224'. [ 49.147846][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.166368][ T4280] FAULT_INJECTION: forcing a failure. [ 49.166368][ T4280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.179519][ T4280] CPU: 1 UID: 0 PID: 4280 Comm: syz.0.224 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 49.179546][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.179558][ T4280] Call Trace: [ 49.179565][ T4280] [ 49.179573][ T4280] __dump_stack+0x1d/0x30 [ 49.179594][ T4280] dump_stack_lvl+0xe8/0x140 [ 49.179681][ T4280] dump_stack+0x15/0x1b [ 49.179771][ T4280] should_fail_ex+0x265/0x280 [ 49.179798][ T4280] should_fail+0xb/0x20 [ 49.179853][ T4280] should_fail_usercopy+0x1a/0x20 [ 49.179933][ T4280] _copy_from_user+0x1c/0xb0 [ 49.179961][ T4280] memdup_user+0x5e/0xd0 [ 49.179981][ T4280] con_font_op+0x6c3/0x930 [ 49.180008][ T4280] ? should_fail_ex+0xdb/0x280 [ 49.180038][ T4280] vt_ioctl+0x153c/0x1880 [ 49.180152][ T4280] tty_ioctl+0x7db/0xb80 [ 49.180175][ T4280] ? __pfx_tty_ioctl+0x10/0x10 [ 49.180196][ T4280] __se_sys_ioctl+0xce/0x140 [ 49.180284][ T4280] __x64_sys_ioctl+0x43/0x50 [ 49.180307][ T4280] x64_sys_call+0x19a8/0x2fb0 [ 49.180332][ T4280] do_syscall_64+0xd2/0x200 [ 49.180351][ T4280] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.180449][ T4280] ? clear_bhb_loop+0x40/0x90 [ 49.180470][ T4280] ? clear_bhb_loop+0x40/0x90 [ 49.180492][ T4280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.180541][ T4280] RIP: 0033:0x7f816db7e929 [ 49.180607][ T4280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.180621][ T4280] RSP: 002b:00007f816c1e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.180637][ T4280] RAX: ffffffffffffffda RBX: 00007f816dda5fa0 RCX: 00007f816db7e929 [ 49.180648][ T4280] RDX: 0000200000000080 RSI: 0000000000004b72 RDI: 0000000000000007 [ 49.180661][ T4280] RBP: 00007f816c1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.180673][ T4280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.180758][ T4280] R13: 0000000000000000 R14: 00007f816dda5fa0 R15: 00007fff5441dff8 [ 49.180774][ T4280] [ 49.182696][ T4277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=4277 comm=syz.3.223 [ 49.394476][ T4293] loop5: detected capacity change from 0 to 128 [ 49.446469][ T4293] FAT-fs (loop5): FAT read failed (blocknr 54816) [ 49.480106][ T4293] xt_hashlimit: max too large, truncated to 1048576 [ 49.556601][ T4303] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 49.583386][ T4298] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 49.605686][ T4305] vhci_hcd: invalid port number 96 [ 49.610940][ T4305] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 49.666505][ T4310] tipc: Started in network mode [ 49.671569][ T4310] tipc: Node identity 921896162f5f, cluster identity 4711 [ 49.678792][ T4310] tipc: Enabled bearer , priority 0 [ 49.700562][ T4310] tipc: Disabling bearer [ 49.769625][ T4315] FAULT_INJECTION: forcing a failure. [ 49.769625][ T4315] name failslab, interval 1, probability 0, space 0, times 0 [ 49.782436][ T4315] CPU: 0 UID: 0 PID: 4315 Comm: syz.5.236 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 49.782461][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.782528][ T4315] Call Trace: [ 49.782535][ T4315] [ 49.782542][ T4315] __dump_stack+0x1d/0x30 [ 49.782561][ T4315] dump_stack_lvl+0xe8/0x140 [ 49.782578][ T4315] dump_stack+0x15/0x1b [ 49.782626][ T4315] should_fail_ex+0x265/0x280 [ 49.782656][ T4315] should_failslab+0x8c/0xb0 [ 49.782680][ T4315] kmem_cache_alloc_node_noprof+0x57/0x320 [ 49.782703][ T4315] ? __alloc_skb+0x101/0x320 [ 49.782737][ T4315] __alloc_skb+0x101/0x320 [ 49.782766][ T4315] pfkey_sendmsg+0xd7/0x900 [ 49.782798][ T4315] ? avc_has_perm+0xd3/0x150 [ 49.782884][ T4315] ? selinux_socket_sendmsg+0x175/0x1b0 [ 49.782949][ T4315] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 49.782973][ T4315] __sock_sendmsg+0x145/0x180 [ 49.783005][ T4315] ____sys_sendmsg+0x31e/0x4e0 [ 49.783085][ T4315] ___sys_sendmsg+0x17b/0x1d0 [ 49.783126][ T4315] __x64_sys_sendmsg+0xd4/0x160 [ 49.783164][ T4315] x64_sys_call+0x2999/0x2fb0 [ 49.783182][ T4315] do_syscall_64+0xd2/0x200 [ 49.783197][ T4315] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.783238][ T4315] ? clear_bhb_loop+0x40/0x90 [ 49.783299][ T4315] ? clear_bhb_loop+0x40/0x90 [ 49.783418][ T4315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.783499][ T4315] RIP: 0033:0x7fc34770e929 [ 49.783512][ T4315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.783526][ T4315] RSP: 002b:00007fc345d77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.783544][ T4315] RAX: ffffffffffffffda RBX: 00007fc347935fa0 RCX: 00007fc34770e929 [ 49.783556][ T4315] RDX: 0000000000002000 RSI: 0000200000000180 RDI: 0000000000000006 [ 49.783568][ T4315] RBP: 00007fc345d77090 R08: 0000000000000000 R09: 0000000000000000 [ 49.783580][ T4315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.783626][ T4315] R13: 0000000000000000 R14: 00007fc347935fa0 R15: 00007ffc3937a3c8 [ 49.783717][ T4315] [ 50.209281][ T4328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.227911][ T4328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.350789][ T4335] audit_log_lost: 178 callbacks suppressed [ 50.350802][ T4335] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 50.364416][ T4335] audit: out of memory in audit_log_start [ 50.370248][ T29] audit: type=1326 audit(1751449731.079:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816db7e929 code=0x7ffc0000 [ 50.393619][ T29] audit: type=1326 audit(1751449731.079:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816db7e929 code=0x7ffc0000 [ 50.417028][ T29] audit: type=1326 audit(1751449731.079:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f816db7d290 code=0x7ffc0000 [ 50.440363][ T29] audit: type=1326 audit(1751449731.079:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f816db7d3df code=0x7ffc0000 [ 50.498612][ T29] audit: type=1400 audit(1751449731.149:1458): avc: denied { read } for pid=4336 comm="syz.3.241" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.521966][ T29] audit: type=1400 audit(1751449731.149:1459): avc: denied { open } for pid=4336 comm="syz.3.241" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.545746][ T29] audit: type=1326 audit(1751449731.199:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f816db7d33c code=0x7ffc0000 [ 50.568941][ T29] audit: type=1326 audit(1751449731.199:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f816db7d3df code=0x7ffc0000 [ 50.598818][ T4346] netlink: 'syz.5.246': attribute type 1 has an invalid length. [ 50.610074][ T4346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=4346 comm=syz.5.246 [ 50.638310][ T4344] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 50.661167][ T4346] vlan2: entered allmulticast mode [ 50.665013][ T4353] loop3: detected capacity change from 0 to 1024 [ 50.666373][ T4346] veth1_to_hsr: entered allmulticast mode [ 50.740095][ T4353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.813995][ T4353] vhci_hcd: invalid port number 96 [ 50.819270][ T4353] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 51.150027][ T4378] netlink: 'syz.2.256': attribute type 1 has an invalid length. [ 51.152915][ T4379] vlan2: entered allmulticast mode [ 51.157734][ T4378] FAULT_INJECTION: forcing a failure. [ 51.157734][ T4378] name failslab, interval 1, probability 0, space 0, times 0 [ 51.175493][ T4378] CPU: 0 UID: 0 PID: 4378 Comm: syz.2.256 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 51.175522][ T4378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.175534][ T4378] Call Trace: [ 51.175540][ T4378] [ 51.175547][ T4378] __dump_stack+0x1d/0x30 [ 51.175569][ T4378] dump_stack_lvl+0xe8/0x140 [ 51.175658][ T4378] dump_stack+0x15/0x1b [ 51.175675][ T4378] should_fail_ex+0x265/0x280 [ 51.175705][ T4378] should_failslab+0x8c/0xb0 [ 51.175772][ T4378] __kmalloc_noprof+0xa5/0x3e0 [ 51.175798][ T4378] ? wpan_phy_new+0x2a/0x190 [ 51.175826][ T4378] wpan_phy_new+0x2a/0x190 [ 51.175851][ T4378] ieee802154_alloc_hw+0xbb/0x540 [ 51.175915][ T4378] hwsim_add_one+0x4a/0xa80 [ 51.175942][ T4378] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 51.175969][ T4378] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 51.176081][ T4378] hwsim_new_radio_nl+0x2e/0x40 [ 51.176121][ T4378] genl_family_rcv_msg_doit+0x140/0x1b0 [ 51.176203][ T4378] genl_rcv_msg+0x422/0x460 [ 51.176227][ T4378] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 51.176256][ T4378] netlink_rcv_skb+0x123/0x220 [ 51.176343][ T4378] ? __pfx_genl_rcv_msg+0x10/0x10 [ 51.176419][ T4378] genl_rcv+0x28/0x40 [ 51.176440][ T4378] netlink_unicast+0x59e/0x670 [ 51.176471][ T4378] netlink_sendmsg+0x58b/0x6b0 [ 51.176492][ T4378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.176580][ T4378] __sock_sendmsg+0x145/0x180 [ 51.176605][ T4378] ____sys_sendmsg+0x31e/0x4e0 [ 51.176639][ T4378] ___sys_sendmsg+0x17b/0x1d0 [ 51.176740][ T4378] __x64_sys_sendmsg+0xd4/0x160 [ 51.176775][ T4378] x64_sys_call+0x2999/0x2fb0 [ 51.176796][ T4378] do_syscall_64+0xd2/0x200 [ 51.176822][ T4378] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.176848][ T4378] ? clear_bhb_loop+0x40/0x90 [ 51.176946][ T4378] ? clear_bhb_loop+0x40/0x90 [ 51.176968][ T4378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.177025][ T4378] RIP: 0033:0x7f32807fe929 [ 51.177040][ T4378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.177057][ T4378] RSP: 002b:00007f327ee67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.177076][ T4378] RAX: ffffffffffffffda RBX: 00007f3280a25fa0 RCX: 00007f32807fe929 [ 51.177094][ T4378] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 51.177107][ T4378] RBP: 00007f327ee67090 R08: 0000000000000000 R09: 0000000000000000 [ 51.177120][ T4378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.177132][ T4378] R13: 0000000000000000 R14: 00007f3280a25fa0 R15: 00007ffd68e823c8 [ 51.177159][ T4378] [ 51.177167][ T4378] failure to allocate master IEEE802.15.4 device [ 51.445901][ T4381] __nla_validate_parse: 6 callbacks suppressed [ 51.445913][ T4381] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 51.446223][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.525551][ T4388] hub 2-0:1.0: USB hub found [ 51.540586][ T4388] hub 2-0:1.0: 8 ports detected [ 51.577668][ T4388] netlink: 'syz.2.258': attribute type 7 has an invalid length. [ 51.584818][ T4398] xt_TPROXY: Can be used only with -p tcp or -p udp [ 51.585390][ T4388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'. [ 51.605185][ T4402] loop0: detected capacity change from 0 to 764 [ 51.616556][ T4402] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 51.641544][ T4406] loop5: detected capacity change from 0 to 128 [ 51.648132][ T4388] loop2: detected capacity change from 0 to 164 [ 51.658723][ T4406] FAT-fs (loop5): FAT read failed (blocknr 54816) [ 51.669194][ T4406] xt_hashlimit: max too large, truncated to 1048576 [ 51.679914][ T4410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 51.688984][ T4388] iso9660: Bad value for 'block' [ 51.720844][ T4411] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.786306][ T4416] xt_hashlimit: max too large, truncated to 1048576 [ 51.862230][ T4413] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 51.877949][ T4424] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 51.912872][ T4430] FAULT_INJECTION: forcing a failure. [ 51.912872][ T4430] name failslab, interval 1, probability 0, space 0, times 0 [ 51.925682][ T4430] CPU: 1 UID: 0 PID: 4430 Comm: syz.2.276 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 51.925708][ T4430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.925718][ T4430] Call Trace: [ 51.925723][ T4430] [ 51.925730][ T4430] __dump_stack+0x1d/0x30 [ 51.925750][ T4430] dump_stack_lvl+0xe8/0x140 [ 51.925784][ T4430] dump_stack+0x15/0x1b [ 51.925800][ T4430] should_fail_ex+0x265/0x280 [ 51.925826][ T4430] should_failslab+0x8c/0xb0 [ 51.925848][ T4430] kmem_cache_alloc_noprof+0x50/0x310 [ 51.925869][ T4430] ? mas_alloc_nodes+0x265/0x520 [ 51.925884][ T4430] mas_alloc_nodes+0x265/0x520 [ 51.925902][ T4430] mas_preallocate+0x33e/0x520 [ 51.925934][ T4430] __split_vma+0x240/0x650 [ 51.925958][ T4430] ? vsnprintf+0x829/0x890 [ 51.925976][ T4430] vma_modify+0x3f2/0xc80 [ 51.925995][ T4430] vma_modify_flags+0x101/0x130 [ 51.926015][ T4430] mprotect_fixup+0x2cc/0x570 [ 51.926036][ T4430] do_mprotect_pkey+0x6d6/0x980 [ 51.926067][ T4430] __x64_sys_mprotect+0x48/0x60 [ 51.926088][ T4430] x64_sys_call+0x2794/0x2fb0 [ 51.926108][ T4430] do_syscall_64+0xd2/0x200 [ 51.926125][ T4430] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.926145][ T4430] ? clear_bhb_loop+0x40/0x90 [ 51.926161][ T4430] ? clear_bhb_loop+0x40/0x90 [ 51.926177][ T4430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.926194][ T4430] RIP: 0033:0x7f32807fe929 [ 51.926208][ T4430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.926224][ T4430] RSP: 002b:00007f327ee67038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 51.926242][ T4430] RAX: ffffffffffffffda RBX: 00007f3280a25fa0 RCX: 00007f32807fe929 [ 51.926255][ T4430] RDX: 0000000000000001 RSI: 0000000000800000 RDI: 0000200000000000 [ 51.926267][ T4430] RBP: 00007f327ee67090 R08: 0000000000000000 R09: 0000000000000000 [ 51.926278][ T4430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.926287][ T4430] R13: 0000000000000000 R14: 00007f3280a25fa0 R15: 00007ffd68e823c8 [ 51.926301][ T4430] [ 52.147822][ T4428] tipc: Enabled bearer , priority 0 [ 52.160608][ T4428] tipc: Disabling bearer [ 52.172448][ T4437] loop2: detected capacity change from 0 to 1024 [ 52.180274][ T4437] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 52.191276][ T4437] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 52.205967][ T4437] JBD2: no valid journal superblock found [ 52.211751][ T4437] EXT4-fs (loop2): Could not load journal inode [ 52.220689][ T4437] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 52.220813][ T4437] netlink: 'syz.2.279': attribute type 5 has an invalid length. [ 52.256885][ T4449] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.287486][ T4452] loop0: detected capacity change from 0 to 128 [ 52.313761][ T4452] FAT-fs (loop0): FAT read failed (blocknr 54816) [ 52.323151][ T4452] xt_hashlimit: max too large, truncated to 1048576 [ 52.437318][ T4457] lo speed is unknown, defaulting to 1000 [ 52.440090][ T4440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 52.570015][ T4468] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 52.583195][ T4464] netlink: 'syz.0.287': attribute type 1 has an invalid length. [ 52.687851][ T4465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=4465 comm=syz.0.287 [ 52.779650][ T4464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.841008][ T4474] vlan2: entered allmulticast mode [ 52.846165][ T4474] bond1: entered allmulticast mode [ 52.966843][ T4485] loop0: detected capacity change from 0 to 128 [ 52.973710][ T4485] FAT-fs (loop0): FAT read failed (blocknr 54816) [ 52.983378][ T4485] xt_hashlimit: max too large, truncated to 1048576 [ 52.992352][ T4482] netlink: 200 bytes leftover after parsing attributes in process `syz.1.293'. [ 53.041991][ T4489] netlink: 'syz.0.296': attribute type 10 has an invalid length. [ 53.049793][ T4489] netlink: 40 bytes leftover after parsing attributes in process `syz.0.296'. [ 53.061036][ T4489] dummy0: entered promiscuous mode [ 53.066795][ T4489] bridge0: port 3(dummy0) entered blocking state [ 53.073225][ T4489] bridge0: port 3(dummy0) entered disabled state [ 53.077736][ T4491] xt_hashlimit: max too large, truncated to 1048576 [ 53.079735][ T4489] dummy0: entered allmulticast mode [ 53.101241][ T4489] bridge0: port 3(dummy0) entered blocking state [ 53.107621][ T4489] bridge0: port 3(dummy0) entered forwarding state [ 53.266671][ T4500] loop5: detected capacity change from 0 to 512 [ 53.273328][ T4500] journal_path: Lookup failure for './file0/../file0' [ 53.280120][ T4500] EXT4-fs: error: could not find journal device path [ 53.337427][ T4493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'. [ 53.373486][ T4505] lo speed is unknown, defaulting to 1000 [ 53.584772][ T4503] netlink: 'syz.0.301': attribute type 1 has an invalid length. [ 53.592614][ T4503] netlink: 224 bytes leftover after parsing attributes in process `syz.0.301'. [ 53.615035][ T4505] loop1: detected capacity change from 0 to 512 [ 53.621806][ T4505] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.628267][ T4505] EXT4-fs: Ignoring removed bh option [ 53.634424][ T4505] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.646677][ T4505] EXT4-fs (loop1): 1 truncate cleaned up [ 53.652828][ T4505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.810751][ T4521] FAULT_INJECTION: forcing a failure. [ 53.810751][ T4521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.823865][ T4521] CPU: 0 UID: 0 PID: 4521 Comm: syz.3.306 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 53.823962][ T4521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.823971][ T4521] Call Trace: [ 53.823977][ T4521] [ 53.823983][ T4521] __dump_stack+0x1d/0x30 [ 53.824016][ T4521] dump_stack_lvl+0xe8/0x140 [ 53.824084][ T4521] dump_stack+0x15/0x1b [ 53.824124][ T4521] should_fail_ex+0x265/0x280 [ 53.824148][ T4521] should_fail+0xb/0x20 [ 53.824168][ T4521] should_fail_usercopy+0x1a/0x20 [ 53.824191][ T4521] _copy_from_user+0x1c/0xb0 [ 53.824256][ T4521] bpf_test_init+0xdf/0x160 [ 53.824280][ T4521] bpf_prog_test_run_xdp+0x274/0x910 [ 53.824304][ T4521] ? kstrtouint+0x76/0xc0 [ 53.824379][ T4521] ? __rcu_read_unlock+0x4f/0x70 [ 53.824403][ T4521] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.824426][ T4521] bpf_prog_test_run+0x22a/0x390 [ 53.824442][ T4521] __sys_bpf+0x3dc/0x790 [ 53.824514][ T4521] __x64_sys_bpf+0x41/0x50 [ 53.824535][ T4521] x64_sys_call+0x2478/0x2fb0 [ 53.824691][ T4521] do_syscall_64+0xd2/0x200 [ 53.824769][ T4521] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.824789][ T4521] ? clear_bhb_loop+0x40/0x90 [ 53.824826][ T4521] ? clear_bhb_loop+0x40/0x90 [ 53.825007][ T4521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.825033][ T4521] RIP: 0033:0x7f784bade929 [ 53.825047][ T4521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.825061][ T4521] RSP: 002b:00007f784a147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.825076][ T4521] RAX: ffffffffffffffda RBX: 00007f784bd05fa0 RCX: 00007f784bade929 [ 53.825087][ T4521] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 53.825097][ T4521] RBP: 00007f784a147090 R08: 0000000000000000 R09: 0000000000000000 [ 53.825107][ T4521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.825116][ T4521] R13: 0000000000000000 R14: 00007f784bd05fa0 R15: 00007ffc3d47b858 [ 53.825132][ T4521] [ 54.106667][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.133796][ T4528] loop3: detected capacity change from 0 to 1024 [ 54.152867][ T4528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.172335][ T4526] loop5: detected capacity change from 0 to 512 [ 54.186710][ T4528] vhci_hcd: invalid port number 96 [ 54.191998][ T4528] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 54.210766][ T4526] EXT4-fs (loop5): 1 orphan inode deleted [ 54.216959][ T4526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.222104][ T4539] loop0: detected capacity change from 0 to 512 [ 54.230413][ T4540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.243341][ T4540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.250547][ T4155] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:42: Failed to release dquot type 1 [ 54.263661][ T4526] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.279200][ T4540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.286673][ T4540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.296430][ T4539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.310679][ T4526] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 54.314130][ T4539] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.333568][ T4539] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.311: iget: bad i_size value: 2533274857506816 [ 54.358797][ T3909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.444854][ T4547] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.311: iget: bad i_size value: 2533274857506816 [ 54.480778][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.521519][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.899472][ T4559] netlink: 'syz.3.315': attribute type 10 has an invalid length. [ 54.907474][ T4559] dummy0: entered promiscuous mode [ 54.916400][ T4557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=4557 comm=syz.3.315 [ 54.929079][ T4557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=4557 comm=syz.3.315 [ 54.941620][ T4557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=4557 comm=syz.3.315 [ 54.954201][ T4557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=4557 comm=syz.3.315 [ 54.966757][ T4557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=4557 comm=syz.3.315 [ 54.981678][ T4558] sd 0:0:1:0: device reset [ 55.023809][ T4566] FAULT_INJECTION: forcing a failure. [ 55.023809][ T4566] name failslab, interval 1, probability 0, space 0, times 0 [ 55.036482][ T4566] CPU: 1 UID: 0 PID: 4566 Comm: syz.2.318 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 55.036610][ T4566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.036623][ T4566] Call Trace: [ 55.036629][ T4566] [ 55.036636][ T4566] __dump_stack+0x1d/0x30 [ 55.036657][ T4566] dump_stack_lvl+0xe8/0x140 [ 55.036673][ T4566] dump_stack+0x15/0x1b [ 55.036686][ T4566] should_fail_ex+0x265/0x280 [ 55.036791][ T4566] ? tcf_action_init_1+0x11e/0x4a0 [ 55.036813][ T4566] should_failslab+0x8c/0xb0 [ 55.036834][ T4566] __kmalloc_cache_noprof+0x4c/0x320 [ 55.036899][ T4566] tcf_action_init_1+0x11e/0x4a0 [ 55.036981][ T4566] tcf_action_init+0x267/0x6d0 [ 55.037004][ T4566] ? mark_reg_read+0x233/0x340 [ 55.037042][ T4566] tc_ctl_action+0x291/0x830 [ 55.037076][ T4566] ? __pfx_tc_ctl_action+0x10/0x10 [ 55.037107][ T4566] rtnetlink_rcv_msg+0x657/0x6d0 [ 55.037278][ T4566] netlink_rcv_skb+0x123/0x220 [ 55.037314][ T4566] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 55.037396][ T4566] rtnetlink_rcv+0x1c/0x30 [ 55.037416][ T4566] netlink_unicast+0x59e/0x670 [ 55.037446][ T4566] netlink_sendmsg+0x58b/0x6b0 [ 55.037479][ T4566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.037495][ T4566] __sock_sendmsg+0x145/0x180 [ 55.037520][ T4566] ____sys_sendmsg+0x31e/0x4e0 [ 55.037561][ T4566] ___sys_sendmsg+0x17b/0x1d0 [ 55.037636][ T4566] __x64_sys_sendmsg+0xd4/0x160 [ 55.037671][ T4566] x64_sys_call+0x2999/0x2fb0 [ 55.037718][ T4566] do_syscall_64+0xd2/0x200 [ 55.037782][ T4566] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.037808][ T4566] ? clear_bhb_loop+0x40/0x90 [ 55.037829][ T4566] ? clear_bhb_loop+0x40/0x90 [ 55.037862][ T4566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.037945][ T4566] RIP: 0033:0x7f32807fe929 [ 55.037958][ T4566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.037971][ T4566] RSP: 002b:00007f327ee67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.037987][ T4566] RAX: ffffffffffffffda RBX: 00007f3280a25fa0 RCX: 00007f32807fe929 [ 55.038070][ T4566] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 55.038109][ T4566] RBP: 00007f327ee67090 R08: 0000000000000000 R09: 0000000000000000 [ 55.038140][ T4566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.038152][ T4566] R13: 0000000000000000 R14: 00007f3280a25fa0 R15: 00007ffd68e823c8 [ 55.038171][ T4566] [ 55.419244][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 55.419258][ T29] audit: type=1400 audit(1751449736.149:1817): avc: denied { create } for pid=4577 comm="syz.5.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.480989][ T4582] FAULT_INJECTION: forcing a failure. [ 55.480989][ T4582] name failslab, interval 1, probability 0, space 0, times 0 [ 55.493671][ T4582] CPU: 0 UID: 0 PID: 4582 Comm: syz.2.321 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 55.493772][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.493781][ T4582] Call Trace: [ 55.493840][ T4582] [ 55.493846][ T4582] __dump_stack+0x1d/0x30 [ 55.493864][ T4582] dump_stack_lvl+0xe8/0x140 [ 55.493878][ T4582] dump_stack+0x15/0x1b [ 55.493891][ T4582] should_fail_ex+0x265/0x280 [ 55.493913][ T4582] ? nfnetlink_rcv+0x53d/0x1690 [ 55.493951][ T4582] should_failslab+0x8c/0xb0 [ 55.494083][ T4582] __kmalloc_cache_noprof+0x4c/0x320 [ 55.494104][ T4582] ? mutex_lock+0xd/0x30 [ 55.494124][ T4582] nfnetlink_rcv+0x53d/0x1690 [ 55.494189][ T4582] ? __kfree_skb+0x109/0x150 [ 55.494212][ T4582] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 55.494265][ T4582] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 55.494288][ T4582] ? __dev_queue_xmit+0x182/0x1fb0 [ 55.494310][ T4582] ? __account_obj_stock+0x211/0x350 [ 55.494385][ T4582] ? ref_tracker_free+0x37d/0x3e0 [ 55.494414][ T4582] netlink_unicast+0x59e/0x670 [ 55.494437][ T4582] netlink_sendmsg+0x58b/0x6b0 [ 55.494453][ T4582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.494524][ T4582] __sock_sendmsg+0x145/0x180 [ 55.494542][ T4582] ____sys_sendmsg+0x31e/0x4e0 [ 55.494574][ T4582] ___sys_sendmsg+0x17b/0x1d0 [ 55.494626][ T4582] __x64_sys_sendmsg+0xd4/0x160 [ 55.494686][ T4582] x64_sys_call+0x2999/0x2fb0 [ 55.494783][ T4582] do_syscall_64+0xd2/0x200 [ 55.494796][ T4582] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.494815][ T4582] ? clear_bhb_loop+0x40/0x90 [ 55.494831][ T4582] ? clear_bhb_loop+0x40/0x90 [ 55.494847][ T4582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.494877][ T4582] RIP: 0033:0x7f32807fe929 [ 55.494889][ T4582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.494962][ T4582] RSP: 002b:00007f327ee25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.494977][ T4582] RAX: ffffffffffffffda RBX: 00007f3280a26160 RCX: 00007f32807fe929 [ 55.494987][ T4582] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 55.494996][ T4582] RBP: 00007f327ee25090 R08: 0000000000000000 R09: 0000000000000000 [ 55.495006][ T4582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.495015][ T4582] R13: 0000000000000000 R14: 00007f3280a26160 R15: 00007ffd68e823c8 [ 55.495039][ T4582] [ 55.505919][ T29] audit: type=1400 audit(1751449736.149:1818): avc: denied { name_connect } for pid=4575 comm="syz.2.321" dest=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 55.760824][ T29] audit: type=1400 audit(1751449736.209:1819): avc: denied { create } for pid=4575 comm="syz.2.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.780151][ T29] audit: type=1400 audit(1751449736.209:1820): avc: denied { setopt } for pid=4575 comm="syz.2.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.845184][ T4586] tipc: Enabling of bearer rejected, failed to enable media [ 55.901330][ T4590] loop5: detected capacity change from 0 to 1024 [ 55.920714][ T4591] lo speed is unknown, defaulting to 1000 [ 56.131498][ T4591] loop3: detected capacity change from 0 to 512 [ 56.137994][ T4591] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.144468][ T4591] EXT4-fs: Ignoring removed bh option [ 56.161454][ T4591] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.172331][ T4576] syz.2.321 (4576) used greatest stack depth: 9768 bytes left [ 56.172997][ T29] audit: type=1400 audit(1751449736.309:1821): avc: denied { write } for pid=4577 comm="syz.5.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.181838][ T4593] tipc: Enabled bearer , priority 0 [ 56.207225][ T4591] EXT4-fs (loop3): 1 truncate cleaned up [ 56.207453][ T4590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.213226][ T4591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.310057][ T4593] tipc: Disabling bearer [ 56.332577][ T4590] vhci_hcd: invalid port number 96 [ 56.337749][ T4590] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 56.457598][ T29] audit: type=1400 audit(1751449737.109:1822): avc: denied { create } for pid=4601 comm="syz.0.328" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 56.491315][ T29] audit: type=1400 audit(1751449737.219:1823): avc: denied { mounton } for pid=4601 comm="syz.0.328" path="/69/file0" dev="tmpfs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 56.514160][ T29] audit: type=1400 audit(1751449737.219:1824): avc: denied { mount } for pid=4601 comm="syz.0.328" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.514865][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.580927][ T29] audit: type=1400 audit(1751449737.299:1825): avc: denied { setopt } for pid=4601 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.603459][ T4604] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 56.624534][ T29] audit: type=1400 audit(1751449737.329:1826): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.647651][ T3909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.743673][ T4610] __nla_validate_parse: 5 callbacks suppressed [ 56.743701][ T4610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.333'. [ 56.782802][ T4615] tipc: Enabled bearer , priority 0 [ 56.791032][ T4615] tipc: Disabling bearer [ 56.834019][ T4623] tipc: Started in network mode [ 56.839001][ T4623] tipc: Node identity ce4dea71b383, cluster identity 4711 [ 56.846148][ T4623] tipc: Enabled bearer , priority 0 [ 56.856208][ T4623] tipc: Disabling bearer [ 56.865554][ T4621] 9pnet_fd: Insufficient options for proto=fd [ 56.980258][ T4631] lo speed is unknown, defaulting to 1000 [ 57.015969][ T4633] loop3: detected capacity change from 0 to 1024 [ 57.035603][ T4637] loop2: detected capacity change from 0 to 1024 [ 57.052257][ T4633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.075930][ T4637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.166965][ T4633] vhci_hcd: invalid port number 96 [ 57.172222][ T4633] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 57.243136][ T4647] vhci_hcd: invalid port number 96 [ 57.248283][ T4647] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 57.287497][ T4649] loop1: detected capacity change from 0 to 1024 [ 57.299294][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.318883][ T4649] EXT4-fs: Ignoring removed nobh option [ 57.324474][ T4649] EXT4-fs: Ignoring removed bh option [ 57.355878][ T4651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.345'. [ 57.436464][ T4649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.482695][ T4653] loop2: detected capacity change from 0 to 1024 [ 57.495815][ T4653] EXT4-fs: Ignoring removed bh option [ 57.504832][ T4649] gtp1: entered promiscuous mode [ 57.509601][ T4653] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.509964][ T4649] gtp1: entered allmulticast mode [ 57.521562][ T4653] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 57.534175][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.544820][ T4653] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.551451][ T4653] EXT4-fs error (device loop2): ext4_quota_enable:7124: inode #3: comm syz.2.347: iget: bad i_size value: 1407392063428608 [ 57.565129][ T4653] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.347: Bad quota inode: 3, type: 0 [ 57.576284][ T4653] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 57.590997][ T4653] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 57.598801][ T4653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.612885][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.694992][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.731590][ T4669] 9pnet_fd: Insufficient options for proto=fd [ 57.918124][ T4680] tmpfs: Unknown parameter 's' [ 58.001478][ T4684] vhci_hcd: invalid port number 96 [ 58.006657][ T4684] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 58.021230][ T4685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 58.030064][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 58.059541][ T4686] loop3: detected capacity change from 0 to 1024 [ 58.091966][ T4686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.196275][ T4686] vhci_hcd: invalid port number 96 [ 58.201473][ T4686] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 58.210150][ T4690] 9pnet_fd: Insufficient options for proto=fd [ 58.282833][ T4695] loop2: detected capacity change from 0 to 1024 [ 58.333167][ T4695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.382258][ T4695] vhci_hcd: invalid port number 96 [ 58.387447][ T4695] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 58.417027][ T4704] loop0: detected capacity change from 0 to 512 [ 58.461022][ T4704] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.510761][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.526641][ T4704] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.363: invalid indirect mapped block 4294967295 (level 0) [ 58.557028][ T4704] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.363: invalid indirect mapped block 4294967295 (level 1) [ 58.590288][ T4704] EXT4-fs (loop0): 1 orphan inode deleted [ 58.596067][ T4704] EXT4-fs (loop0): 1 truncate cleaned up [ 58.603335][ T4704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.681678][ T4704] netlink: 'syz.0.363': attribute type 1 has an invalid length. [ 58.689409][ T4704] netlink: 224 bytes leftover after parsing attributes in process `syz.0.363'. [ 58.718439][ T4712] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 58.765523][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.851282][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.857318][ T4708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'. [ 58.886116][ T4725] 9pnet_fd: Insufficient options for proto=fd [ 58.974628][ T4735] loop2: detected capacity change from 0 to 1024 [ 58.986574][ T4738] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 59.003340][ T4745] FAULT_INJECTION: forcing a failure. [ 59.003340][ T4745] name failslab, interval 1, probability 0, space 0, times 0 [ 59.025274][ T4745] CPU: 1 UID: 0 PID: 4745 Comm: syz.0.378 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 59.025310][ T4745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.025365][ T4745] Call Trace: [ 59.025370][ T4745] [ 59.025376][ T4745] __dump_stack+0x1d/0x30 [ 59.025404][ T4745] dump_stack_lvl+0xe8/0x140 [ 59.025495][ T4745] dump_stack+0x15/0x1b [ 59.025509][ T4745] should_fail_ex+0x265/0x280 [ 59.025533][ T4745] should_failslab+0x8c/0xb0 [ 59.025626][ T4745] kmem_cache_alloc_noprof+0x50/0x310 [ 59.025648][ T4745] ? alloc_empty_file+0x76/0x200 [ 59.025673][ T4745] alloc_empty_file+0x76/0x200 [ 59.025697][ T4745] alloc_file_pseudo+0xc6/0x160 [ 59.025729][ T4745] __shmem_file_setup+0x1de/0x210 [ 59.025793][ T4745] shmem_file_setup+0x3b/0x50 [ 59.025868][ T4745] __se_sys_memfd_create+0x2c3/0x590 [ 59.025923][ T4745] __x64_sys_memfd_create+0x31/0x40 [ 59.025952][ T4745] x64_sys_call+0x122f/0x2fb0 [ 59.026012][ T4745] do_syscall_64+0xd2/0x200 [ 59.026031][ T4745] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.026052][ T4745] ? clear_bhb_loop+0x40/0x90 [ 59.026069][ T4745] ? clear_bhb_loop+0x40/0x90 [ 59.026151][ T4745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.026170][ T4745] RIP: 0033:0x7f816db7e929 [ 59.026183][ T4745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.026196][ T4745] RSP: 002b:00007f816c1e6d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 59.026212][ T4745] RAX: ffffffffffffffda RBX: 00000000000005c8 RCX: 00007f816db7e929 [ 59.026228][ T4745] RDX: 00007f816c1e6dec RSI: 0000000000000000 RDI: 00007f816dc014cc [ 59.026240][ T4745] RBP: 0000200000000600 R08: 00007f816c1e6b07 R09: 0000000000000000 [ 59.026252][ T4745] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 59.026265][ T4745] R13: 00007f816c1e6dec R14: 00007f816c1e6df0 R15: 00007fff5441dff8 [ 59.026283][ T4745] [ 59.264671][ T4744] loop5: detected capacity change from 0 to 2048 [ 59.274915][ T4735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.287520][ T4749] loop1: detected capacity change from 0 to 1024 [ 59.308199][ T4735] vhci_hcd: invalid port number 96 [ 59.313434][ T4735] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 59.314868][ T4749] EXT4-fs: Ignoring removed nobh option [ 59.326060][ T4749] EXT4-fs: Ignoring removed bh option [ 59.328785][ T4744] loop5: p4 < > [ 59.339279][ T4753] FAULT_INJECTION: forcing a failure. [ 59.339279][ T4753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.352362][ T4753] CPU: 0 UID: 0 PID: 4753 Comm: syz.5.377 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 59.352390][ T4753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.352404][ T4753] Call Trace: [ 59.352410][ T4753] [ 59.352417][ T4753] __dump_stack+0x1d/0x30 [ 59.352435][ T4753] dump_stack_lvl+0xe8/0x140 [ 59.352459][ T4753] dump_stack+0x15/0x1b [ 59.352476][ T4753] should_fail_ex+0x265/0x280 [ 59.352505][ T4753] should_fail+0xb/0x20 [ 59.352562][ T4753] should_fail_usercopy+0x1a/0x20 [ 59.352653][ T4753] _copy_from_user+0x1c/0xb0 [ 59.352701][ T4753] kstrtouint_from_user+0x69/0xf0 [ 59.352727][ T4753] ? 0xffffffff81000000 [ 59.352738][ T4753] ? selinux_file_permission+0x1e4/0x320 [ 59.352844][ T4753] proc_fail_nth_write+0x50/0x160 [ 59.352873][ T4753] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 59.352901][ T4753] vfs_write+0x266/0x8e0 [ 59.352930][ T4753] ? __rcu_read_unlock+0x4f/0x70 [ 59.352988][ T4753] ? __fget_files+0x184/0x1c0 [ 59.353005][ T4753] ksys_write+0xda/0x1a0 [ 59.353036][ T4753] __x64_sys_write+0x40/0x50 [ 59.353087][ T4753] x64_sys_call+0x2cdd/0x2fb0 [ 59.353141][ T4753] do_syscall_64+0xd2/0x200 [ 59.353240][ T4753] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.353272][ T4753] ? clear_bhb_loop+0x40/0x90 [ 59.353339][ T4753] ? clear_bhb_loop+0x40/0x90 [ 59.353356][ T4753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.353373][ T4753] RIP: 0033:0x7fc34770d3df [ 59.353385][ T4753] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 59.353401][ T4753] RSP: 002b:00007fc345d56030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 59.353433][ T4753] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc34770d3df [ 59.353445][ T4753] RDX: 0000000000000001 RSI: 00007fc345d560a0 RDI: 0000000000000007 [ 59.353455][ T4753] RBP: 00007fc345d56090 R08: 0000000000000000 R09: 0000000000000000 [ 59.353465][ T4753] R10: 0000000000000012 R11: 0000000000000293 R12: 0000000000000001 [ 59.353475][ T4753] R13: 0000000000000000 R14: 00007fc347936080 R15: 00007ffc3937a3c8 [ 59.353489][ T4753] [ 59.597281][ T4757] loop5: detected capacity change from 0 to 1024 [ 59.626757][ T4754] set match dimension is over the limit! [ 59.633274][ T4749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.659912][ T4757] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.703288][ T4749] gtp2: entered promiscuous mode [ 59.708321][ T4749] gtp2: entered allmulticast mode [ 59.764980][ T4757] vhci_hcd: invalid port number 96 [ 59.770220][ T4757] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 59.789337][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.903709][ T4766] loop1: detected capacity change from 0 to 1024 [ 59.937225][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.962395][ T4766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.999261][ T4770] 9pnet_fd: Insufficient options for proto=fd [ 60.017296][ T4766] vhci_hcd: invalid port number 96 [ 60.019352][ T4773] netlink: 'syz.0.384': attribute type 4 has an invalid length. [ 60.022512][ T4766] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 60.052719][ T4775] netlink: 112 bytes leftover after parsing attributes in process `syz.3.385'. [ 60.109756][ T4775] FAULT_INJECTION: forcing a failure. [ 60.109756][ T4775] name failslab, interval 1, probability 0, space 0, times 0 [ 60.122438][ T4775] CPU: 1 UID: 0 PID: 4775 Comm: syz.3.385 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 60.122467][ T4775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.122478][ T4775] Call Trace: [ 60.122484][ T4775] [ 60.122558][ T4775] __dump_stack+0x1d/0x30 [ 60.122643][ T4775] dump_stack_lvl+0xe8/0x140 [ 60.122660][ T4775] dump_stack+0x15/0x1b [ 60.122739][ T4775] should_fail_ex+0x265/0x280 [ 60.122768][ T4775] ? __tcf_chain_get+0x91/0x280 [ 60.122823][ T4775] should_failslab+0x8c/0xb0 [ 60.122845][ T4775] __kmalloc_cache_noprof+0x4c/0x320 [ 60.122871][ T4775] __tcf_chain_get+0x91/0x280 [ 60.122897][ T4775] ? __tcf_block_find+0x11a/0x1a0 [ 60.122929][ T4775] tc_new_tfilter+0x5ac/0x10a0 [ 60.122974][ T4775] ? avc_has_perm_noaudit+0x1b1/0x200 [ 60.123016][ T4775] ? __pfx_tc_new_tfilter+0x10/0x10 [ 60.123073][ T4775] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 60.123098][ T4775] netlink_rcv_skb+0x123/0x220 [ 60.123196][ T4775] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 60.123218][ T4775] rtnetlink_rcv+0x1c/0x30 [ 60.123233][ T4775] netlink_unicast+0x59e/0x670 [ 60.123277][ T4775] netlink_sendmsg+0x58b/0x6b0 [ 60.123357][ T4775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.123376][ T4775] __sock_sendmsg+0x145/0x180 [ 60.123396][ T4775] ____sys_sendmsg+0x31e/0x4e0 [ 60.123455][ T4775] ___sys_sendmsg+0x17b/0x1d0 [ 60.123496][ T4775] __x64_sys_sendmsg+0xd4/0x160 [ 60.123626][ T4775] x64_sys_call+0x2999/0x2fb0 [ 60.123647][ T4775] do_syscall_64+0xd2/0x200 [ 60.123665][ T4775] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.123690][ T4775] ? clear_bhb_loop+0x40/0x90 [ 60.123711][ T4775] ? clear_bhb_loop+0x40/0x90 [ 60.123787][ T4775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.123808][ T4775] RIP: 0033:0x7f784bade929 [ 60.123822][ T4775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.123836][ T4775] RSP: 002b:00007f784a147038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.123852][ T4775] RAX: ffffffffffffffda RBX: 00007f784bd05fa0 RCX: 00007f784bade929 [ 60.123916][ T4775] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 60.123928][ T4775] RBP: 00007f784a147090 R08: 0000000000000000 R09: 0000000000000000 [ 60.124004][ T4775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.124014][ T4775] R13: 0000000000000000 R14: 00007f784bd05fa0 R15: 00007ffc3d47b858 [ 60.124030][ T4775] [ 60.428732][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 60.428747][ T29] audit: type=1326 audit(1751449741.149:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f784bade929 code=0x7ffc0000 [ 60.460149][ T4784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.390'. [ 60.494352][ T29] audit: type=1326 audit(1751449741.189:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784bade929 code=0x7ffc0000 [ 60.510459][ T4788] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 60.517680][ T29] audit: type=1326 audit(1751449741.189:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f784bade929 code=0x7ffc0000 [ 60.549428][ T29] audit: type=1326 audit(1751449741.189:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784bade929 code=0x7ffc0000 [ 60.572809][ T29] audit: type=1326 audit(1751449741.189:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784bade929 code=0x7ffc0000 [ 60.596290][ T29] audit: type=1326 audit(1751449741.189:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f784bade929 code=0x7ffc0000 [ 60.619508][ T29] audit: type=1326 audit(1751449741.189:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784bade929 code=0x7ffc0000 [ 60.642915][ T29] audit: type=1326 audit(1751449741.189:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784bade929 code=0x7ffc0000 [ 60.643907][ T4782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 60.666243][ T29] audit: type=1326 audit(1751449741.189:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f784bade929 code=0x7ffc0000 [ 60.666285][ T29] audit: type=1326 audit(1751449741.189:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784bade929 code=0x7ffc0000 [ 61.151916][ T4817] loop1: detected capacity change from 0 to 128 [ 61.167942][ T4815] loop0: detected capacity change from 0 to 1024 [ 61.189711][ T4817] FAT-fs (loop1): FAT read failed (blocknr 54816) [ 61.193702][ T4819] loop5: detected capacity change from 0 to 2048 [ 61.239336][ T4824] FAULT_INJECTION: forcing a failure. [ 61.239336][ T4824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.252470][ T4824] CPU: 0 UID: 0 PID: 4824 Comm: syz.1.401 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 61.252494][ T4824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.252505][ T4824] Call Trace: [ 61.252512][ T4824] [ 61.252520][ T4824] __dump_stack+0x1d/0x30 [ 61.252607][ T4824] dump_stack_lvl+0xe8/0x140 [ 61.252626][ T4824] dump_stack+0x15/0x1b [ 61.252640][ T4824] should_fail_ex+0x265/0x280 [ 61.252714][ T4824] should_fail+0xb/0x20 [ 61.252747][ T4824] should_fail_usercopy+0x1a/0x20 [ 61.252771][ T4824] strncpy_from_user+0x25/0x230 [ 61.252793][ T4824] ? should_fail_ex+0xdb/0x280 [ 61.252895][ T4824] strncpy_from_user_nofault+0x68/0xf0 [ 61.252917][ T4824] bpf_probe_read_user_str+0x2a/0x70 [ 61.252949][ T4824] bpf_prog_78f9c3f13797e2ae+0x3e/0x44 [ 61.252966][ T4824] bpf_trace_run3+0x10f/0x1d0 [ 61.252994][ T4824] ? skb_free_head+0x87/0x150 [ 61.253050][ T4824] ? skb_free_head+0x87/0x150 [ 61.253065][ T4824] kmem_cache_free+0x257/0x300 [ 61.253087][ T4824] ? pcpu_memcg_post_alloc_hook+0xf8/0x150 [ 61.253117][ T4824] skb_free_head+0x87/0x150 [ 61.253185][ T4824] skb_release_data+0x33b/0x370 [ 61.253210][ T4824] ? __pfx_sock_wfree+0x10/0x10 [ 61.253273][ T4824] ? tun_get_user+0xb37/0x2500 [ 61.253300][ T4824] __kfree_skb+0x44/0x150 [ 61.253324][ T4824] sk_skb_reason_drop+0xbd/0x270 [ 61.253436][ T4824] tun_get_user+0xb37/0x2500 [ 61.253465][ T4824] ? ref_tracker_alloc+0x1f2/0x2f0 [ 61.253571][ T4824] ? selinux_file_permission+0x1e4/0x320 [ 61.253595][ T4824] tun_chr_write_iter+0x15e/0x210 [ 61.253621][ T4824] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 61.253686][ T4824] vfs_write+0x4a0/0x8e0 [ 61.253714][ T4824] ksys_write+0xda/0x1a0 [ 61.253749][ T4824] __x64_sys_write+0x40/0x50 [ 61.253773][ T4824] x64_sys_call+0x2cdd/0x2fb0 [ 61.253795][ T4824] do_syscall_64+0xd2/0x200 [ 61.253813][ T4824] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.253901][ T4824] ? clear_bhb_loop+0x40/0x90 [ 61.253964][ T4824] ? clear_bhb_loop+0x40/0x90 [ 61.253981][ T4824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.253998][ T4824] RIP: 0033:0x7f5dfabee929 [ 61.254010][ T4824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.254077][ T4824] RSP: 002b:00007f5df9257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.254092][ T4824] RAX: ffffffffffffffda RBX: 00007f5dfae15fa0 RCX: 00007f5dfabee929 [ 61.254103][ T4824] RDX: 0000000000000036 RSI: 0000200000000280 RDI: 0000000000000005 [ 61.254116][ T4824] RBP: 00007f5df9257090 R08: 0000000000000000 R09: 0000000000000000 [ 61.254128][ T4824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.254161][ T4824] R13: 0000000000000000 R14: 00007f5dfae15fa0 R15: 00007ffca9502f18 [ 61.254176][ T4824] [ 61.255381][ T4819] loop5: p1 < > p4 [ 61.282251][ T4815] vhci_hcd: invalid port number 96 [ 61.326785][ T4819] loop5: p4 size 8388608 extends beyond EOD, [ 61.332068][ T4815] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 61.558089][ T4819] truncated [ 61.566459][ T4828] IPVS: Error joining to the multicast group [ 61.652468][ T4832] Illegal XDP return value 4294967274 on prog (id 452) dev syz_tun, expect packet loss! [ 61.666991][ T3387] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 61.674475][ T3387] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 61.674517][ T3387] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 61.681421][ T3387] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 61.790996][ T4845] loop1: detected capacity change from 0 to 512 [ 61.806364][ T4845] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.408: Parent and EA inode have the same ino 15 [ 61.819576][ T4845] EXT4-fs (loop1): Remounting filesystem read-only [ 61.829328][ T4850] __nla_validate_parse: 2 callbacks suppressed [ 61.829341][ T4850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 61.844290][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 61.857652][ T4845] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 61.890861][ T4845] EXT4-fs (loop1): 1 orphan inode deleted [ 61.901694][ T4845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.408'. [ 61.910745][ T4845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.408'. [ 61.917906][ T4842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'. [ 61.919713][ T4845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.408'. [ 61.937751][ T4845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.408'. [ 61.946678][ T4845] netlink: 'syz.1.408': attribute type 6 has an invalid length. [ 61.968512][ T4845] netlink: 36 bytes leftover after parsing attributes in process `syz.1.408'. [ 62.082681][ T4863] netlink: 'syz.0.415': attribute type 10 has an invalid length. [ 62.090833][ T4863] bridge0: port 3(dummy0) entered disabled state [ 62.097269][ T4863] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.104525][ T4863] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.141261][ T4863] bridge0: port 3(dummy0) entered blocking state [ 62.147735][ T4863] bridge0: port 3(dummy0) entered forwarding state [ 62.154383][ T4863] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.161468][ T4863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.168776][ T4863] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.175923][ T4863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.193490][ T4863] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 62.221883][ T4874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.418'. [ 62.238494][ T4874] IPVS: Error joining to the multicast group [ 62.270364][ T4881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.414'. [ 62.280570][ T4882] loop0: detected capacity change from 0 to 128 [ 62.289602][ T4882] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.314411][ T4882] random: crng reseeded on system resumption [ 62.383614][ T4891] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.407648][ T4893] loop0: detected capacity change from 0 to 512 [ 62.414723][ T4893] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.427075][ T4893] EXT4-fs (loop0): 1 truncate cleaned up [ 62.436461][ T4891] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.466306][ T4900] loop0: detected capacity change from 0 to 512 [ 62.473337][ T4900] EXT4-fs: Ignoring removed i_version option [ 62.479800][ T4900] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 62.490447][ T4900] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 62.498491][ T4900] System zones: 1-12 [ 62.502855][ T4900] EXT4-fs (loop0): orphan cleanup on readonly fs [ 62.509640][ T4900] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.423: invalid indirect mapped block 12 (level 1) [ 62.510247][ T4891] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.523754][ T4900] EXT4-fs (loop0): Remounting filesystem read-only [ 62.540016][ T4900] EXT4-fs (loop0): 1 truncate cleaned up [ 62.602353][ T4891] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.655949][ T4891] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.666853][ T4891] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.677671][ T4891] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.689319][ T4891] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.617513][ T4934] loop0: detected capacity change from 0 to 1024 [ 63.638696][ T4934] vhci_hcd: invalid port number 96 [ 63.643852][ T4934] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 63.746103][ T4945] xt_hashlimit: size too large, truncated to 1048576 [ 63.752879][ T4945] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 63.799287][ T4947] lo speed is unknown, defaulting to 1000 [ 64.157118][ T4957] tmpfs: Unknown parameter 's' [ 64.922085][ T4962] ipt_REJECT: TCP_RESET invalid for non-tcp [ 64.947082][ T4962] loop2: detected capacity change from 0 to 128 [ 64.972853][ T4962] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.039370][ T4965] loop0: detected capacity change from 0 to 1024 [ 65.142438][ T4973] tipc: Enabling of bearer rejected, failed to enable media [ 65.151458][ T4965] vhci_hcd: invalid port number 96 [ 65.156570][ T4965] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 65.517599][ T4985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.547140][ T4985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.606173][ T4990] loop5: detected capacity change from 0 to 1024 [ 65.623176][ T4990] EXT4-fs: Ignoring removed nobh option [ 65.628808][ T4990] EXT4-fs: Ignoring removed bh option [ 65.670095][ T4990] gtp0: entered promiscuous mode [ 65.675135][ T4990] gtp0: entered allmulticast mode [ 65.682580][ T4997] FAULT_INJECTION: forcing a failure. [ 65.682580][ T4997] name failslab, interval 1, probability 0, space 0, times 0 [ 65.695260][ T4997] CPU: 1 UID: 0 PID: 4997 Comm: syz.0.457 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 65.695286][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.695296][ T4997] Call Trace: [ 65.695302][ T4997] [ 65.695308][ T4997] __dump_stack+0x1d/0x30 [ 65.695369][ T4997] dump_stack_lvl+0xe8/0x140 [ 65.695388][ T4997] dump_stack+0x15/0x1b [ 65.695404][ T4997] should_fail_ex+0x265/0x280 [ 65.695490][ T4997] should_failslab+0x8c/0xb0 [ 65.695514][ T4997] kmem_cache_alloc_noprof+0x50/0x310 [ 65.695539][ T4997] ? radix_tree_node_alloc+0x8a/0x1f0 [ 65.695623][ T4997] radix_tree_node_alloc+0x8a/0x1f0 [ 65.695705][ T4997] radix_tree_extend+0xcf/0x370 [ 65.695734][ T4997] idr_get_free+0x12d/0x550 [ 65.695774][ T4997] idr_alloc_u32+0xca/0x180 [ 65.695792][ T4997] ? __pfx_loop_control_ioctl+0x10/0x10 [ 65.695821][ T4997] idr_alloc+0x6e/0xd0 [ 65.695839][ T4997] loop_add+0x145/0x590 [ 65.695913][ T4997] ? __pfx_loop_control_ioctl+0x10/0x10 [ 65.695942][ T4997] loop_control_ioctl+0xd0/0x3f0 [ 65.695967][ T4997] ? __pfx_loop_control_ioctl+0x10/0x10 [ 65.696018][ T4997] __se_sys_ioctl+0xce/0x140 [ 65.696045][ T4997] __x64_sys_ioctl+0x43/0x50 [ 65.696077][ T4997] x64_sys_call+0x19a8/0x2fb0 [ 65.696094][ T4997] do_syscall_64+0xd2/0x200 [ 65.696108][ T4997] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.696129][ T4997] ? clear_bhb_loop+0x40/0x90 [ 65.696184][ T4997] ? clear_bhb_loop+0x40/0x90 [ 65.696202][ T4997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.696219][ T4997] RIP: 0033:0x7f816db7e929 [ 65.696300][ T4997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.696315][ T4997] RSP: 002b:00007f816c1e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.696333][ T4997] RAX: ffffffffffffffda RBX: 00007f816dda5fa0 RCX: 00007f816db7e929 [ 65.696344][ T4997] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000005 [ 65.696355][ T4997] RBP: 00007f816c1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.696366][ T4997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.696378][ T4997] R13: 0000000000000000 R14: 00007f816dda5fa0 R15: 00007fff5441dff8 [ 65.696413][ T4997] [ 65.953765][ T4995] loop2: detected capacity change from 0 to 8192 [ 65.972089][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 65.972104][ T29] audit: type=1400 audit(1751449746.689:2141): avc: denied { mount } for pid=4994 comm="syz.2.456" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 65.974273][ T4995] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 66.007913][ T4995] FAT-fs (loop2): Filesystem has been set read-only [ 66.030855][ T29] audit: type=1400 audit(1751449746.749:2142): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 66.170414][ T5015] 9pnet_fd: Insufficient options for proto=fd [ 66.309744][ T5021] IPVS: Error joining to the multicast group [ 66.463148][ T5027] tmpfs: Unknown parameter 's' [ 66.559685][ T29] audit: type=1326 audit(1751449747.249:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32807fe929 code=0x7ffc0000 [ 66.583112][ T29] audit: type=1326 audit(1751449747.249:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32807fe929 code=0x7ffc0000 [ 66.606459][ T29] audit: type=1326 audit(1751449747.249:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32807fe929 code=0x7ffc0000 [ 66.629806][ T29] audit: type=1326 audit(1751449747.249:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32807fe929 code=0x7ffc0000 [ 66.653123][ T29] audit: type=1326 audit(1751449747.249:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f32807fe929 code=0x7ffc0000 [ 66.676715][ T29] audit: type=1326 audit(1751449747.249:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32807fe929 code=0x7ffc0000 [ 66.700110][ T29] audit: type=1326 audit(1751449747.249:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32807fe929 code=0x7ffc0000 [ 66.723614][ T29] audit: type=1326 audit(1751449747.249:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f32807fe929 code=0x7ffc0000 [ 66.865505][ T5036] netlink: 'syz.1.473': attribute type 4 has an invalid length. [ 66.876089][ T5036] netlink: 'syz.1.473': attribute type 4 has an invalid length. [ 66.955582][ T5045] __nla_validate_parse: 12 callbacks suppressed [ 66.955618][ T5045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 66.962175][ T5047] loop1: detected capacity change from 0 to 1024 [ 66.980356][ T5047] EXT4-fs mount: 20 callbacks suppressed [ 66.980371][ T5047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.092012][ T5047] vhci_hcd: invalid port number 96 [ 67.097231][ T5047] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 67.127842][ T5052] program syz.3.479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.203215][ T5055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.480'. [ 67.370834][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.416937][ T5069] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.483'. [ 67.426035][ T5069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.483'. [ 67.436502][ T5069] netlink: 112 bytes leftover after parsing attributes in process `syz.2.483'. [ 67.532183][ T5076] loop3: detected capacity change from 0 to 1024 [ 67.538981][ T5076] EXT4-fs: Ignoring removed nobh option [ 67.544610][ T5076] EXT4-fs: Ignoring removed bh option [ 67.576683][ T5068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 67.589817][ T5076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.590439][ T5080] loop5: detected capacity change from 0 to 512 [ 67.611539][ T5080] journal_path: Lookup failure for './file0/../file0' [ 67.618396][ T5080] EXT4-fs: error: could not find journal device path [ 67.619704][ T5076] gtp0: entered promiscuous mode [ 67.630060][ T5076] gtp0: entered allmulticast mode [ 67.657793][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.759826][ T5089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 67.883261][ T5101] tipc: Enabling of bearer rejected, failed to enable media [ 68.091277][ T5114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 68.113096][ T5114] IPVS: Error joining to the multicast group [ 68.200987][ T5117] loop3: detected capacity change from 0 to 1024 [ 68.211254][ T5117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.233693][ T5117] vhci_hcd: invalid port number 96 [ 68.238922][ T5117] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 68.440206][ T5130] ipt_REJECT: TCP_RESET invalid for non-tcp [ 68.514076][ T5131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 68.725361][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.380206][ T5151] block device autoloading is deprecated and will be removed. [ 69.411417][ T5156] vhci_hcd: invalid port number 96 [ 69.416573][ T5156] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 69.888372][ T5165] vhci_hcd: invalid port number 96 [ 69.893559][ T5165] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 70.417584][ T5186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.523'. [ 70.796420][ T5205] tmpfs: Unknown parameter 's' [ 71.299039][ T5214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.328982][ T5214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.614035][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 71.614049][ T29] audit: type=1326 audit(1751449752.339:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5234 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfabee929 code=0x7ffc0000 [ 71.658500][ T29] audit: type=1326 audit(1751449752.379:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5234 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfabee929 code=0x7ffc0000 [ 71.681912][ T29] audit: type=1326 audit(1751449752.379:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5234 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dfabee929 code=0x7ffc0000 [ 71.705235][ T29] audit: type=1326 audit(1751449752.379:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5234 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfabee929 code=0x7ffc0000 [ 71.728666][ T29] audit: type=1326 audit(1751449752.379:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5234 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfabee929 code=0x7ffc0000 [ 71.752093][ T29] audit: type=1326 audit(1751449752.379:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5234 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5dfabee929 code=0x7ffc0000 [ 71.775322][ T29] audit: type=1326 audit(1751449752.379:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5234 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfabee929 code=0x7ffc0000 [ 71.798670][ T29] audit: type=1326 audit(1751449752.379:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5234 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5dfabee929 code=0x7ffc0000 [ 71.822082][ T5235] vhci_hcd: invalid port number 96 [ 71.822092][ T5235] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 71.834391][ T29] audit: type=1326 audit(1751449752.379:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5234 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfabee929 code=0x7ffc0000 [ 71.857819][ T29] audit: type=1326 audit(1751449752.379:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5234 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5dfabed290 code=0x7ffc0000 [ 72.227604][ T5269] netlink: 'syz.0.556': attribute type 1 has an invalid length. [ 72.242569][ T5269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.256434][ T5269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.265119][ T5269] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 72.277004][ T5269] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 72.393239][ T5278] __nla_validate_parse: 5 callbacks suppressed [ 72.393253][ T5278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'. [ 72.428796][ T5278] IPVS: Error joining to the multicast group [ 72.499234][ T5288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.507781][ T5288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.632823][ T5299] tipc: Enabled bearer , priority 0 [ 72.646009][ T5299] tipc: Disabling bearer [ 72.665576][ T5297] netlink: 16 bytes leftover after parsing attributes in process `syz.5.566'. [ 72.685170][ T5301] gtp1: entered promiscuous mode [ 72.690201][ T5301] gtp1: entered allmulticast mode [ 72.755309][ T5305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'. [ 72.783947][ T5305] IPVS: Error joining to the multicast group [ 72.885404][ T5314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 72.894780][ T5314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.574'. [ 72.982864][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 72.992643][ T5325] IPVS: Error joining to the multicast group [ 73.112486][ T5331] gtp0: entered promiscuous mode [ 73.117466][ T5331] gtp0: entered allmulticast mode [ 73.140348][ T5339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.582'. [ 73.184185][ T5341] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 73.250953][ T5347] syz!: rxe_newlink: already configured on team_slave_0 [ 73.293476][ T5349] vhci_hcd: invalid port number 96 [ 73.298644][ T5349] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 73.491535][ T5357] tipc: Enabled bearer , priority 0 [ 73.499841][ T5357] tipc: Disabling bearer [ 73.598424][ T5363] gtp1: entered promiscuous mode [ 73.603487][ T5363] gtp1: entered allmulticast mode [ 73.675152][ T5367] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 73.890905][ T5382] tmpfs: Unknown parameter 's' [ 74.156060][ T5390] block device autoloading is deprecated and will be removed. [ 74.429611][ T5409] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 74.531578][ T5416] loop5: detected capacity change from 0 to 512 [ 74.556943][ T5416] journal_path: Lookup failure for './file0/../file0' [ 74.563779][ T5416] EXT4-fs: error: could not find journal device path [ 74.597569][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 74.670843][ T5425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.615'. [ 74.804232][ T5433] tipc: Started in network mode [ 74.809158][ T5433] tipc: Node identity 629a298749de, cluster identity 4711 [ 74.816366][ T5433] tipc: Enabled bearer , priority 0 [ 74.927398][ T5433] tipc: Disabling bearer [ 75.020037][ T5439] loop5: detected capacity change from 0 to 1024 [ 75.099716][ T5439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.121679][ T5439] vhci_hcd: invalid port number 96 [ 75.126958][ T5439] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 75.333469][ T3909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.419925][ T5489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 75.541658][ T5495] IPVS: Error joining to the multicast group [ 75.717208][ T5514] loop5: detected capacity change from 0 to 512 [ 75.725568][ T5514] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.645: bg 0: block 5: invalid block bitmap [ 75.738230][ T5514] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 75.748843][ T5514] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.645: invalid indirect mapped block 3 (level 2) [ 75.768650][ T5514] EXT4-fs (loop5): 1 orphan inode deleted [ 75.774428][ T5514] EXT4-fs (loop5): 1 truncate cleaned up [ 75.780541][ T5514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.859744][ T3909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.971619][ T5527] 9pnet_fd: Insufficient options for proto=fd [ 76.155236][ T5540] loop5: detected capacity change from 0 to 1024 [ 76.162438][ T5540] EXT4-fs: Ignoring removed nobh option [ 76.168193][ T5540] EXT4-fs: Ignoring removed bh option [ 76.192647][ T5544] block device autoloading is deprecated and will be removed. [ 76.230707][ T5540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.247869][ T5540] gtp1: entered promiscuous mode [ 76.253054][ T5540] gtp1: entered allmulticast mode [ 76.280787][ T3909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.310198][ T5553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.318713][ T5553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.552480][ T5577] gtp2: entered promiscuous mode [ 76.557467][ T5577] gtp2: entered allmulticast mode [ 76.569313][ T5580] ================================================================== [ 76.577409][ T5580] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 76.586360][ T5580] [ 76.588685][ T5580] read to 0xffff88812d3da420 of 4 bytes by task 5571 on cpu 0: [ 76.596234][ T5580] selinux_inode_permission+0x2a7/0x620 [ 76.601790][ T5580] security_inode_permission+0x6d/0xb0 [ 76.607268][ T5580] inode_permission+0x106/0x310 [ 76.612122][ T5580] link_path_walk+0x162/0x900 [ 76.616798][ T5580] path_openat+0x1de/0x2170 [ 76.621298][ T5580] do_filp_open+0x109/0x230 [ 76.625804][ T5580] do_sys_openat2+0xa6/0x110 [ 76.630391][ T5580] __x64_sys_openat+0xf2/0x120 [ 76.635150][ T5580] x64_sys_call+0x1af/0x2fb0 [ 76.639728][ T5580] do_syscall_64+0xd2/0x200 [ 76.644227][ T5580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.650114][ T5580] [ 76.652427][ T5580] write to 0xffff88812d3da420 of 4 bytes by task 5580 on cpu 1: [ 76.660044][ T5580] selinux_inode_permission+0x31b/0x620 [ 76.665581][ T5580] security_inode_permission+0x6d/0xb0 [ 76.671038][ T5580] inode_permission+0x106/0x310 [ 76.675877][ T5580] link_path_walk+0x162/0x900 [ 76.680542][ T5580] path_openat+0x1de/0x2170 [ 76.685040][ T5580] do_filp_open+0x109/0x230 [ 76.689535][ T5580] do_sys_openat2+0xa6/0x110 [ 76.694116][ T5580] __x64_sys_openat+0xf2/0x120 [ 76.698872][ T5580] x64_sys_call+0x1af/0x2fb0 [ 76.703458][ T5580] do_syscall_64+0xd2/0x200 [ 76.707947][ T5580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.713829][ T5580] [ 76.716141][ T5580] value changed: 0x00000000 -> 0x00000002 [ 76.721841][ T5580] [ 76.724151][ T5580] Reported by Kernel Concurrency Sanitizer on: [ 76.730286][ T5580] CPU: 1 UID: 0 PID: 5580 Comm: syz.5.666 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 76.742597][ T5580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.752640][ T5580] ==================================================================