last executing test programs: 6m49.691680525s ago: executing program 32 (id=6955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) creat(0x0, 0x248) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) (async) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0xff3d) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000002c0)={0x0, 0xe, 0x8000003, 0x6, 0x4, "a85c45a2c25cc646300200"}) r6 = syz_open_pts(r3, 0x181002) r7 = dup3(r6, r3, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17) mount$9p_fd(0x0, 0x0, 0x0, 0x1000001, 0x0) 2m1.386085732s ago: executing program 4 (id=10352): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r2, 0x0, 0x0, 0x132, 0x0) 2m1.330053663s ago: executing program 4 (id=10353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 2m1.329375073s ago: executing program 4 (id=10354): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000010000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="8b3329bd04000000000005000000080003"], 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000001000000000300000018000180100001006574683a73797a5f74756e"], 0x2c}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b000000", 0x18}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa6366c", 0x16}], 0x2}, 0x0) 2m1.108947446s ago: executing program 4 (id=10355): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x55e, &(0x7f0000000580)="$eJzs3c9rHFUcAPDvbJL+1qZQiopIsAcrtZsm8UcFD/UoWizovS7JNJRsuiW7KU0s2B7sxYsUQcSCeNeTF4/Ff8C/oqCFIiXowcvKbGbT/NhNtuk2m7qfD0zy3szsvvnuzPfxZt8uG0DfGsn+FCJejIivk4jDEZHk2wYj3ziyvN/Sw+uT2ZJEvf7JX0ljv6zefK7m4w7mlRci4rcvI04WNrZbXVicKZXL6VxeH63NXhmtLiyeujRbmk6n08vjExNn3poYf/edt7sW6+vn//nu47sfnPnq+NK3P98/cjuJs3Eo37Y6jidwY3VlJEby12Qozq7bcawLje0mSa8PgG0ZyPN8KLI+4HAM5FkP/P99ERF1oE8l8h/6VHMc0Ly379J98DPjwfvLN0Ab4x9cfm8k9jXujQ4sJWvujLL73eEutJ+18eufd25nS3TvfQiALd24GRGnBwc39n9J3v9t3+kO9lnfhv4Pds7dbPzzRqvxT2Fl/BMtxj8HW+Tudmyd/4X7XWimrWz8917L8e/KpNXwQF57rjHmG0ouXiqnWd/2fESciKG9WX2z+ZwzS/fq69f98ury/9Xjv2zJ2m+OBfPjuD+4d+1jp0q10hMHnntwM+KlluPfZOX8Jy3Of/Z6nO+wjWPpnVfabds6/qer/mPEay3P/6MZrWTz+cnRxvUw2rwqNvr71rHf27Xf6/iz839g8/iHk9XztdXHb+OHff+m7batiT86v/73JJ82ynvydddKtdrcWMSe5KON68cfPbZZb+6fxX/i+Ob9X6vrf39EfNZh/LeO/vRyR/H36PxPPdb5f/zCvQ8//75d+531f282SifyNZ30f50e4JO8dgAAAAAAALDbFCLiUCSF4kq5UCgWlz/fcTQOFMqVau3kxcr85alofFd2OIYKzZnuw6s+DzGWfx62WR9fV5+IiCMR8c3A/ka9OFkpT/U6eAAAAAAAAAAAAAAAAAAAANglDrb5/n/mj4FeHx3w1PnJb+hfW+Z/N37pCdiV1uT/2d4dB7DzjP+hf8l/6F/yH/qX/If+Jf+hf8l/6F/yHwAAAAAAAAAAAAAAAAAAAAAAAAAAALrq/Llz2VJfenh9MqtPXV2Yn6lcPTWVVmeKs/OTxcnK3JXidKUyXU6Lk5XZrZ6vXKlcGRuP+WujtbRaG60uLF6Yrcxfrl24NFuaTi+kQzsSFQAAAAAAAAAAAAAAAAAAADxbqguLM6VyOZ1TUNhWYXB3HIZClwu97pkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4JH/AgAA//8y4DjG") syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x174) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964dee674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a7986cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25afd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) fchdir(r4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x100) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x24084011) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_delete(r7) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 2m0.968718228s ago: executing program 4 (id=10359): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xfff1, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3}}}]}]}, 0x60}, 0x1, 0x100000000000000, 0x0, 0x803}, 0x20004004) 2m0.87086066s ago: executing program 4 (id=10361): socket$inet6_tcp(0xa, 0x1, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x4, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}, 0xffffffb9}}, {{0xa, 0x4e62, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @private1={0xfc, 0x1, '\x00', 0x40}, 0x4}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000800007faee82f9d6359a257b1c7a700"/40], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) poll(&(0x7f0000000040)=[{r5, 0x4102}], 0x1, 0x3) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000240), &(0x7f0000000340)=""/86}, 0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_ACTIVATE_TARGET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2m0.85730819s ago: executing program 33 (id=10361): socket$inet6_tcp(0xa, 0x1, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x4, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}, 0xffffffb9}}, {{0xa, 0x4e62, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @private1={0xfc, 0x1, '\x00', 0x40}, 0x4}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000800007faee82f9d6359a257b1c7a700"/40], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) poll(&(0x7f0000000040)=[{r5, 0x4102}], 0x1, 0x3) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000240), &(0x7f0000000340)=""/86}, 0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_ACTIVATE_TARGET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1m45.355542309s ago: executing program 2 (id=10539): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 1m45.310853719s ago: executing program 2 (id=10541): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1m45.27250084s ago: executing program 2 (id=10542): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 1m45.23624311s ago: executing program 2 (id=10545): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x55e, &(0x7f0000000580)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x80, 0x0}, 0x20000010) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x800) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r4, 0x8, r5) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f00000008c0)='wchan\x00') pread64(r7, &(0x7f0000000280)=""/252, 0xfc, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48) syz_mount_image$msdos(&(0x7f0000001180), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7", @ANYRESDEC, @ANYRES8, @ANYRES8, @ANYRESHEX], 0x1, 0x297, &(0x7f0000001380)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x11624fc, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) open(&(0x7f0000000380)='./file1/file0\x00', 0x408980, 0x12a) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") pwrite64(r8, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r8, 0x7, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r9, 0x4) 1m45.151364572s ago: executing program 2 (id=10548): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000400)="6b04db2de0ab2b9e7c37a69b61f1ddde424f3401617d02d01e615fc7e8128ddcd65c3a7ade69b2954e743e8c32e98ff3a8b55d364d2e2a559a8769a7e57d2baca5f4573fd6cf9e2166e64df8146f3b6a", 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="340000001400b5952cbc7000ffdbdf250a0080c8", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000000000000001"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x40040) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)=ANY=[], 0x240}, 0x1, 0x0, 0x0, 0x8800}, 0x8044) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000500000000000000000000850000002a00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shutdown(r8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) fchdir(r8) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0x1d, 0x3}, {0x1, 0xe}}}, 0x24}}, 0x0) write$cgroup_subtree(r8, &(0x7f00000003c0)={[{0x2d, 'pids'}, {0x2b, 'io'}, {0x2b, 'cpuset'}, {0x2d, 'blkio'}]}, 0x19) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r13, 0x560a, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x44}}, 0x0) ioctl$TIOCL_PASTESEL(r13, 0x541c, &(0x7f0000000100)) 1m44.990937044s ago: executing program 2 (id=10550): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}, 0x1, 0x0, 0x0, 0x40810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44084) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.log\x00', 0x464002, 0x49) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000440)={0x0, 0xfff, 0x100, 0x2, 0x1, 0x8000, 0x1, 0x9, {0x0, @in6={{0xa, 0x4e21, 0x5, @mcast2, 0x7}}, 0x6, 0xa318, 0x7, 0x7, 0x76}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000300)={r3, 0x2a, "6b8b7fea7c78a1caff9af872bced9f38b3f7016b63a5df8037ff19ffecc1045f2ab079cede25b093396e"}, &(0x7f0000000500)=0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000200)={0x17, 0x4020, 0x13, 0x19, 0x3, 0x60, 0x4, 0xf5}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r5}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000e86dd606b88ef00383a00fc010000000000000000000000000000fe8000000000000000000000000000aa020090780000000060bdd7c3f2266cff000000000000000000000000000000010000000040000000000000000000000082e5143ce88f5cf6"], 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r7 = socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)) 1m44.990046254s ago: executing program 34 (id=10550): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}, 0x1, 0x0, 0x0, 0x40810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44084) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.log\x00', 0x464002, 0x49) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000440)={0x0, 0xfff, 0x100, 0x2, 0x1, 0x8000, 0x1, 0x9, {0x0, @in6={{0xa, 0x4e21, 0x5, @mcast2, 0x7}}, 0x6, 0xa318, 0x7, 0x7, 0x76}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000300)={r3, 0x2a, "6b8b7fea7c78a1caff9af872bced9f38b3f7016b63a5df8037ff19ffecc1045f2ab079cede25b093396e"}, &(0x7f0000000500)=0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000200)={0x17, 0x4020, 0x13, 0x19, 0x3, 0x60, 0x4, 0xf5}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r5}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000e86dd606b88ef00383a00fc010000000000000000000000000000fe8000000000000000000000000000aa020090780000000060bdd7c3f2266cff000000000000000000000000000000010000000040000000000000000000000082e5143ce88f5cf6"], 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r7 = socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)) 1m34.684264963s ago: executing program 6 (id=10720): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") (fail_nth: 7) 1m34.333992178s ago: executing program 6 (id=10727): syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x9d, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x27, 0x1, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0xd0, 0xff, 0x94}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x1, 0x10, 0x4, 0x10, 0x8}, 0x13b, &(0x7f0000000080)={0x5, 0xf, 0x13b, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x33, 0x4d, 0x8, 0xca, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "38651e288afff48c2f8989582ce677a6"}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0xa, 0xff0f, 0x4, [0x1b0, 0xc0, 0x3f, 0xc0, 0xc0c0]}, @generic={0xec, 0x10, 0xb, "892445907ee8a9aa5fa9113b7af2c4a395eccd6d9b4f01d6570900e4624e08ad45700ebf5aa1c023744c1dd2376a58c9d14332b06be3036df66777701ae7b5c9e7f05bc20c4a8e6edd5112db086b724901274e58dfd3d39e9aba32e42726c8d738895ddf823083ddc818d27f460ee070218325fada6bcdb54284504c88c1df001446445b967ec8db3ca060ee15a98097f80a546ce69cfd5440ef39c84068077ef2ef79a26756bb869f264e266141f3863deaf69e75ab4a6e2beead77ba8610e44682e663ea2105aa9a7c035888782a12e13849e42d075b253b60163314f0318aee7e2869be63474d53"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x0, 0x1, 0xfffb, 0x8}]}, 0x1, [{0x5f, &(0x7f00000001c0)=@string={0x5f, 0x3, "50d0aa0216b91c9fe3bdfaab294c3ecdb6221c60bba54b42cfd72a094a689a34836b6351fcf15d696fb4846c3edd8b808cecb4e795dd62b17cb9ac2be42405d375ae376690275ab73143426781b697f67de61a2e19a7e27df090d1ce9e"}}]}) rmdir(&(0x7f0000000280)='./file0\x00') link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='devices.list\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0', [{}, {0x20, 'devices.list\x00'}], 0xa, "740b4ff5fa3e0ae115687fd46beea0897037c42f841de7650e37e7d38f0d7bfcfb2ebc3e4ab8a932dcb3e38a50c04708f21d4f8386aff0505b36d049c5fa763085b009ffb937500c743c18e773201563d6a5c368"}, 0x6e) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000400)={{r1}, 0x0, 0xc, @unused=[0x3, 0xf7f6, 0x8000000000000000, 0x100000000], @subvolid=0x6}) r2 = creat(&(0x7f0000001400)='./file0\x00', 0x42) truncate(&(0x7f0000001440)='./file0\x00', 0x6) pipe2(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f00000014c0)=0x6) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001500)=@req3={0x6, 0x9, 0x5, 0x3, 0x80000001, 0x2, 0x2}, 0x1c) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) preadv2(r5, &(0x7f0000002880)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/195, 0xc3}, {&(0x7f0000002640)=""/224, 0xe0}, {&(0x7f0000002740)=""/132, 0x84}, {&(0x7f0000002800)=""/68, 0x44}], 0x5, 0x3, 0xc48, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x181400, 0x1d7}, 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000002980)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x3, 0x800, {"2bf02cbfe7862b4b5ff55496f8607d64"}, 0x9, 0x4, 0x800}}}, 0x90) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x96) fsetxattr(r6, &(0x7f0000002a40)=@known='security.selinux\x00', &(0x7f0000002a80)='devices.list\x00', 0xd, 0x2) socket$caif_stream(0x25, 0x1, 0x5) r7 = socket$netlink(0x10, 0x3, 0x9) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b00), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000002ac0), 0xc, &(0x7f0000002c00)={&(0x7f0000002b40)={0xa8, r8, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x77}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x330}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9503}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x15e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8000}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40489fb8f4382bc}, 0x4000800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000002c80)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) writev(r6, &(0x7f0000003d40)=[{&(0x7f0000002cc0)="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", 0x1000}, {&(0x7f0000003cc0)="a4f8379f985d4ff41af86e025a966ed9b689c7", 0x13}, {&(0x7f0000003d00)}], 0x3) mount$9p_tcp(&(0x7f0000003d80), &(0x7f0000003dc0)='./file0/file0\x00', &(0x7f0000003e00), 0x2, &(0x7f0000003e40)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@uname={'uname', 0x3d, 'devices.list\x00'}}, {@cache_readahead}, {@msize={'msize', 0x3d, 0xc5}}, {@cache_fscache}, {@posixacl}, {@mmap}], [{@fsname={'fsname', 0x3d, '^'}}]}}) getpeername$packet(r2, &(0x7f0000003f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003f40)=0x14) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000003f80)) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000004000)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x120, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, &(0x7f0000003fc0), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x20, 0x30, 0x10, 0x6}}, @common=@hl={{0x28}, {0x2, 0x85}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x42}, [0xff, 0xffffff00, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xffffff00], 'veth1\x00', 'netpci0\x00', {}, {}, 0x4, 0x9, 0x0, 0x18}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) 1m33.286533094s ago: executing program 6 (id=10748): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 1m33.222670395s ago: executing program 6 (id=10750): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) unshare(0x6c000600) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x120) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000100)) vmsplice(r1, 0x0, 0x4000, 0x1) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@initdev, 0x0}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', r2, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_clone3(&(0x7f0000000d80)={0xba0000, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x58) move_mount(r4, 0x0, r3, 0x0, 0x46) close(r3) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f00000002c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, r7, &(0x7f00000005c0)={0x2, 0x60, 0x800, 0x98e, 0xc101, 0x0, 0x226f, 0xfffffffffffff87d, 0x2}) 1m32.91927574s ago: executing program 6 (id=10755): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000280)=""/75, 0x4b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, &(0x7f00000005c0)}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001001d00"], 0x1c}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) 1m32.87934452s ago: executing program 6 (id=10757): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ec0)='freezer.state\x00', 0x275a, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f000043b000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xc0, &(0x7f0000000340)=0x7, 0x0, 0x4) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRESDEC=r6, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0xf}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000100110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10) sendto$inet6(r8, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1m32.856743831s ago: executing program 35 (id=10757): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ec0)='freezer.state\x00', 0x275a, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f000043b000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xc0, &(0x7f0000000340)=0x7, 0x0, 0x4) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRESDEC=r6, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0xf}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000100110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10) sendto$inet6(r8, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 42.465510866s ago: executing program 7 (id=11497): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x100) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000003c0)=0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000002d00010b04c432ff0100000008000000", @ANYRES32=r3, @ANYBLOB="100000800900b900464e3b122b000000"], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) getuid() r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) keyctl$assume_authority(0x10, 0x0) 42.371447427s ago: executing program 7 (id=11500): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 42.351913788s ago: executing program 7 (id=11501): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x5}, 0x18) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) 42.23517006s ago: executing program 7 (id=11504): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f00000001c0)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@noauto_da_alloc}]}, 0x1, 0x502, &(0x7f0000000a00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d31, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x30) write$P9_RWALK(r3, &(0x7f0000000400)={0x7e, 0x6f, 0x2, {0x9, [{0x20, 0x3}, {0x20, 0x4}, {0x40, 0x4, 0x2}, {0x40, 0x3, 0x3}, {0x8, 0x1, 0x4}, {0x20, 0x1}, {0x10, 0x4}, {0x4, 0x2, 0x4}, {0x2, 0x1, 0x4}]}}, 0x7e) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x31) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 41.952091574s ago: executing program 7 (id=11509): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$pptp(0x18, 0x1, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x8, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x5}]}]}, {0x0, [0x0, 0x0, 0x5f, 0x61, 0x5f, 0x5f]}}, 0x0, 0x34, 0x0, 0x1}, 0x28) close_range(r1, 0xffffffffffffffff, 0x0) 41.763291677s ago: executing program 7 (id=11512): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200200, 0x0, 0x0, 0xffffffff}) (async) fchdir(r2) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000140)='syscall\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/230, 0xe6}], 0x1, 0x401, 0x2ab) (async) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000440)='./file1\x00', 0x1004088, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYRES16, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES8=0x0], 0x0, 0x7df, &(0x7f0000000600)="$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") 41.763051487s ago: executing program 36 (id=11512): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200200, 0x0, 0x0, 0xffffffff}) (async) fchdir(r2) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000140)='syscall\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/230, 0xe6}], 0x1, 0x401, 0x2ab) (async) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000440)='./file1\x00', 0x1004088, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYRES16, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES8=0x0], 0x0, 0x7df, &(0x7f0000000600)="$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") 14.743758593s ago: executing program 5 (id=11928): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 14.683219524s ago: executing program 5 (id=11931): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x4, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r3) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x14, r5, 0x20, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x808}, 0x24004c85) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xd, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e016", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) 14.531706046s ago: executing program 5 (id=11935): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = signalfd4(r0, 0x0, 0x0, 0x400) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000340)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000500)={0x8000000e}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x80, 0x4) write$selinux_validatetrans(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00'], 0x79) 14.451202597s ago: executing program 5 (id=11942): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='sched_process_fork\x00', r1, 0x0, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) close(r4) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000200)=0x8002, 0x4) sendto$inet(r3, &(0x7f0000000680)="e9618309b52acefb", 0x8, 0x4084, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) 14.055597824s ago: executing program 5 (id=11953): keyctl$assume_authority(0x10, 0x0) 13.961194085s ago: executing program 5 (id=11958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) close_range(r2, 0xffffffffffffffff, 0x0) 13.960748145s ago: executing program 37 (id=11958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) close_range(r2, 0xffffffffffffffff, 0x0) 1.719317173s ago: executing program 0 (id=12178): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) 1.622334785s ago: executing program 0 (id=12179): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000010000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000001000000000300000018000180100001006574683a73797a5f74756e"], 0x2c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b000000", 0x18}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa6366c", 0x16}], 0x2}, 0x0) 1.536821916s ago: executing program 9 (id=12181): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCGPTPEER(r0, 0x5441, 0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000740), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/201, 0xc9}, 0x4}], 0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x415}, 0x18) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0xa, 0x2400000001, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r9, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) 1.373415989s ago: executing program 0 (id=12182): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) 1.355579489s ago: executing program 0 (id=12183): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = signalfd4(r0, 0x0, 0x0, 0x400) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x80, 0x4) write$selinux_validatetrans(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00'], 0x79) 1.336410079s ago: executing program 0 (id=12184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) r1 = getpid() syz_open_dev$usbmon(&(0x7f0000000040), 0xc0c, 0x648000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) syz_usbip_server_init(0x6) syz_usbip_server_init(0x5) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) 1.211130251s ago: executing program 8 (id=12186): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 1.177527772s ago: executing program 3 (id=12187): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbb4aa468739b8508060001080206040001aaaaaaaaaaaa0a01010057330377ba25ac1414ff8846a10424b242419f83048f8e9c1009b3a5a3daa420221a84ef2f7ec7d77a0f467bc0f9caeb3701dae8fbb1ee881de8976641e5584e39251361d6ae07cbbccb76d290a249ef3f6d9ac42b271589b5a45f"], 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r7 = socket(0x15, 0x80000, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xee0e}]}}]}, 0x3c}}, 0x20040054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0xfff}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/44, 0x2c}], 0x1}}], 0x48}, 0x40000) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r11}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000001c0)='netlink_extack\x00', 0xffffffffffffffff, 0x0, 0x1000000000e61}, 0x18) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='8', 0x1}], 0x20, 0x14, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r12 = timerfd_create(0x9, 0x0) r13 = timerfd_create(0x9, 0x0) timerfd_settime(r12, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_settime(r13, 0x0, &(0x7f0000000380)={{}, {0x77359400}}, 0x0) 1.146303852s ago: executing program 8 (id=12188): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) clock_getres(0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, 0x0, 0x0) listen(r7, 0xfffffffd) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg(r8, 0x0, 0x0, 0x40000000, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r6, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) close(r6) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r5, 0x1, 0x2}}, 0x20) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b80)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001b40)=ANY=[@ANYBLOB], 0x24}], 0x4, &(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES8=r9, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYRES32, @ANYRES8=r0], 0x50, 0x24040094}, 0x80) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r9) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x5f}, 0x18) 1.109045913s ago: executing program 3 (id=12189): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='writeback_bdi_register\x00', r0, 0x0, 0x3fd}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usbip_server_init(0x1) accept$inet6(r1, &(0x7f0000000700)={0xa, 0x0, 0x0, @remote}, &(0x7f00000006c0)=0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0x0, 0xc6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) 1.074409793s ago: executing program 8 (id=12190): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580), &(0x7f00000005c0)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) close_range(r0, r3, 0x0) 1.073471853s ago: executing program 8 (id=12191): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioperm(0x7, 0x2, 0x40) 1.006983894s ago: executing program 8 (id=12192): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB="000010000095", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x22020600) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="080000000400000004000000a4"], 0x48) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010001000000000002000700", @ANYBLOB="040000000000000008ed0700", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="10000400000000002000060000000000"], 0x3c, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000d80), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x63, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000500), 0x9}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0xfff7, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000057180ce88661691192dfeb3f420ab94d7b4656eb34b5a6d05aa918223dc798962d3d3be2d2eade00403b6061549e8fc2ebbc4234133cc54df2476337ebec1a5cf2a2ae64d5a9286ddc8955fcca6c082dd79fd4f1b843f7458defb3dc58d291284dc04f2b5496ff20278a", 0xb5}, {&(0x7f00000005c0)="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", 0x13c}, {&(0x7f0000000dc0)="4a3dfc057366065560145a484cb1f78097b0bce43d7391d769edd2e5d976fe7b7969d33e2e83c86dc597c7ce3dd775d0cb0e484ddfd7fc2cce12618fa00b885f1fc92edc913e17647897133fa82e224c47a5b78470032dcfb2dde8647db6f6058116352146d6bfed039eddf2804c4116946d3acd6daaedb354298bcc750aa2efbbfd6a4beea75e8712aca3f55d5a1d", 0x8f}], 0x3}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9, 0x0, 0x2}, 0x18) time(0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) linkat(r5, &(0x7f00000003c0)='./file1\x00', r5, &(0x7f0000000400)='./file0/file0\x00', 0x1000) 641.24829ms ago: executing program 9 (id=12195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1b) 640.14241ms ago: executing program 8 (id=12196): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x3, &(0x7f00000007c0)=0x40000006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='cachefiles_io_error\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) listen(r5, 0x6) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x11, 0x148, 0x340, 0x0, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}, {0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) 593.329031ms ago: executing program 9 (id=12198): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 521.095972ms ago: executing program 9 (id=12200): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0xfffffffffffffedd, 0x7400}, 0x825) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = dup(0xffffffffffffffff) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000700), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xprtrdma_frwr_dereg\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x14, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0x8000}}, './file0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x118, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000180), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @local, [0xffffff00, 0x0, 0xffffff00, 0xff000000], [0xffffffff, 0xffffff00, 0x9b4f23409da9a8c, 0xffffffff], 'wg0\x00', 'wg0\x00', {0xff}, {}, 0x3c, 0x1, 0x2, 0x20}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x8, 0x50}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x37fd, 0x200, 'snmp_trap\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xff, 0xffffff00, 0xffffffff], [0xff, 0x0, 0xffffff00, 0xffffff00], 'lo\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x16, 0x6b, 0x2, 0x1}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x96c2, 0x1, 0x10, '\x00', {0x800}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) 520.419142ms ago: executing program 3 (id=12201): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = signalfd4(r0, 0x0, 0x0, 0x400) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x80, 0x4) write$selinux_validatetrans(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00'], 0x79) 478.751853ms ago: executing program 3 (id=12202): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x4, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r3) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x14, r5, 0x20, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x808}, 0x24004c85) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="796100000000000000007e00000033000300", @ANYBLOB], 0x1c}}, 0x4000054) 369.236114ms ago: executing program 3 (id=12204): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x3f) 287.524255ms ago: executing program 9 (id=12205): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x440}, 0x50) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x0, 0x0, 0x220, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x88000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x10}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@private=0xa010102, @rand_addr, 0x0, 0x0, 'bridge_slave_0\x00', 'gretap0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x122}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x5]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x8004) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback, 0x16, 0x0, 0xffff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0]}, 0x40) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) 236.755866ms ago: executing program 1 (id=12207): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x80000300) (fail_nth: 4) 236.099036ms ago: executing program 9 (id=12208): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') getpid() r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = epoll_create1(0x80000) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0x9, 0xe, 0x30, @mcast2, @remote, 0x10, 0x7800, 0x6, 0x8}}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000240)={0x1, 0x1, 0x7f, 0x3, @vifc_lcl_ifindex=r3, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x3641cbda46fa34f0}) sched_setscheduler(0x0, 0x6, &(0x7f00000002c0)=0x3ff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="00080000000000000000000000000000f76b5083", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000100"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='fsi_slave_init\x00', r6}, 0x18) pause() r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setlease(r7, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x1000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) 188.203977ms ago: executing program 3 (id=12209): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) getgroups(0x2, &(0x7f00000026c0)=[0x0, 0x0]) setfsgid(r1) setfsgid(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000480)=ANY=[]) lchown(&(0x7f0000000200)='./file1\x00', 0xee01, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x18) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x1000003, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000b40)={0x53, 0x0, 0x7f, 0xff, @scatter={0x4, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/68, 0x44}, {&(0x7f00000002c0)=""/41, 0x29}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000380)=""/156, 0x9c}]}, &(0x7f0000000a40)="8a044d1d414cd24e1c4ca01ce5b9d1f63c6ce1c2f595f6bc6e3517a5506e49d9095bef96828f863363369fae84f06708918626a17619a999a41c209395bd87d5828f718118a1697b24538e6c4bb780a73319d5608bd3d99a49a878ab003e3b27dc1505e52d626945ea5ccb50054e605806802c40c7178f694ee9fd9d5a9e56", &(0x7f0000000ac0)=""/82, 0x1, 0x20, 0x0, &(0x7f0000000480)}) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000540)=[{0x1, 0x3, 0x35, 0x7}]}) 187.756457ms ago: executing program 1 (id=12210): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r2 = creat(&(0x7f0000000200)='.\x00', 0xe0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x1a, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x3f}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) futex(&(0x7f00000002c0), 0x8c, 0x1, 0x0, &(0x7f00000000c0), 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r6, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 187.018837ms ago: executing program 1 (id=12211): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00'}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 145.707218ms ago: executing program 1 (id=12212): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) socket$netlink(0x10, 0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) creat(0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) 89.132549ms ago: executing program 1 (id=12213): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioperm(0x7, 0x2, 0x40) 71.266819ms ago: executing program 1 (id=12214): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r2, 0x1, 0x2e, 0x0, &(0x7f0000000000)) (async) getsockopt$sock_int(r2, 0x1, 0x2e, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESHEX], 0xe4}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)="1121e5", 0x3}, 0x1, 0x0, 0x0, 0x24008011}, 0xc0e4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$qrtrtun(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b79c00000000000085000000c300000095000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r10, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r10, 0x0) ftruncate(r10, 0xc17a) (async) ftruncate(r10, 0xc17a) io_setup(0x200, &(0x7f0000000140)) socket$inet6(0xa, 0x3, 0x8000000003c) (async) r11 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r11, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005"], 0x48) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4b2, r12}, 0x38) 0s ago: executing program 0 (id=12215): prctl$PR_SET_NAME(0xf, 0x0) pipe2(0x0, 0x80000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000001000066080000200000001800000000000000000000000b1df71eb17d75a6130000009500000000000000360a02003e1140f2892794f9cb0d28a28a030d00000000180100002091090000000000000000007b1af8ff00000000bfb500000000000007010000f8080000edfd4b99d22d321eec8634db1a00b50a0000000000008500000006000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) setfsuid(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = io_uring_setup(0x5f41, &(0x7f00000000c0)={0x0, 0xfcdc, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xfff, 0xfff, 0x9}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0093fa2fbfd13a5f167d3d19000006000000030000000000000c02000000010000000000000e05001d"], &(0x7f0000000740)=""/160, 0x3a, 0xa0, 0x1, 0xfffff001, 0x10000, @value=r3}, 0x28) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x10, &(0x7f0000000640)=ANY=[@ANYRESHEX=r1, @ANYRES64=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000209030000000000000000000a000005300002002cfcff801400030000000000000000000000ffff7f00000114000400ff0100000000000000000000000000010900010073797a3000000000"], 0x50}, 0x1, 0x0, 0x0, 0x889c}, 0x4000000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): be:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 915.165249][ T6531] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 915.175693][ T6531] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.11638: Corrupt directory, running e2fsck is recommended [ 915.194264][ T6531] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 915.204610][ T6531] EXT4-fs error (device loop9): ext4_iget_extra_inode:5035: inode #15: comm syz.9.11638: corrupted in-inode xattr: invalid ea_ino [ 915.238823][ T6537] __nla_validate_parse: 4 callbacks suppressed [ 915.238836][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11644'. [ 915.279815][ T6531] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.11638: couldn't read orphan inode 15 (err -117) [ 915.309500][ T6531] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 915.337158][ T6531] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 915.348827][ T6531] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 915.358945][ T6531] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.11638: Corrupt directory, running e2fsck is recommended [ 915.451923][ T6542] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 915.458647][ T6542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 915.466193][ T6542] vhci_hcd vhci_hcd.0: Device attached [ 915.498235][ T6546] FAULT_INJECTION: forcing a failure. [ 915.498235][ T6546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.511381][ T6546] CPU: 0 UID: 0 PID: 6546 Comm: syz.8.11647 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 915.511412][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 915.511426][ T6546] Call Trace: [ 915.511433][ T6546] [ 915.511441][ T6546] __dump_stack+0x1d/0x30 [ 915.511465][ T6546] dump_stack_lvl+0xe8/0x140 [ 915.511556][ T6546] dump_stack+0x15/0x1b [ 915.511576][ T6546] should_fail_ex+0x265/0x280 [ 915.511615][ T6546] should_fail+0xb/0x20 [ 915.511722][ T6546] should_fail_usercopy+0x1a/0x20 [ 915.511757][ T6546] _copy_from_user+0x1c/0xb0 [ 915.511780][ T6546] __copy_msghdr+0x244/0x300 [ 915.511816][ T6546] ___sys_sendmsg+0x109/0x1d0 [ 915.512075][ T6546] __x64_sys_sendmsg+0xd4/0x160 [ 915.512124][ T6546] x64_sys_call+0x2999/0x2fb0 [ 915.512193][ T6546] do_syscall_64+0xd2/0x200 [ 915.512216][ T6546] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 915.512250][ T6546] ? clear_bhb_loop+0x40/0x90 [ 915.512333][ T6546] ? clear_bhb_loop+0x40/0x90 [ 915.512361][ T6546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.512440][ T6546] RIP: 0033:0x7f5ed1fbe929 [ 915.512510][ T6546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 915.512532][ T6546] RSP: 002b:00007f5ed0627038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 915.512554][ T6546] RAX: ffffffffffffffda RBX: 00007f5ed21e5fa0 RCX: 00007f5ed1fbe929 [ 915.512628][ T6546] RDX: 0000000000000004 RSI: 0000200000001000 RDI: 0000000000000003 [ 915.512644][ T6546] RBP: 00007f5ed0627090 R08: 0000000000000000 R09: 0000000000000000 [ 915.512659][ T6546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.512674][ T6546] R13: 0000000000000000 R14: 00007f5ed21e5fa0 R15: 00007ffcac369288 [ 915.512698][ T6546] [ 915.596285][ T6543] vhci_hcd: connection closed [ 915.763526][ T6552] netlink: 1347 bytes leftover after parsing attributes in process `syz.8.11648'. [ 915.785812][ T6413] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 915.822732][ T2669] usb 1-1: new low-speed USB device number 3 using vhci_hcd [ 915.830474][ T6544] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 915.844290][T21040] vhci_hcd: stop threads [ 915.848596][T21040] vhci_hcd: release socket [ 915.853203][T21040] vhci_hcd: disconnect device [ 915.862648][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 915.862660][ T29] audit: type=1326 audit(1751285526.813:54247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6555 comm="syz.1.11651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef01c0e929 code=0x7ffc0000 [ 915.892554][ T29] audit: type=1326 audit(1751285526.813:54248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6555 comm="syz.1.11651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef01c0e929 code=0x7ffc0000 [ 915.916201][ T29] audit: type=1326 audit(1751285526.813:54249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6555 comm="syz.1.11651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef01c0e929 code=0x7ffc0000 [ 915.944550][ T29] audit: type=1326 audit(1751285526.813:54250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6555 comm="syz.1.11651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fef01c0e929 code=0x7ffc0000 [ 915.968253][ T29] audit: type=1326 audit(1751285526.813:54251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6555 comm="syz.1.11651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef01c0e929 code=0x7ffc0000 [ 915.991930][ T29] audit: type=1326 audit(1751285526.813:54252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6555 comm="syz.1.11651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef01c0e929 code=0x7ffc0000 [ 916.016932][ T29] audit: type=1326 audit(1751285526.813:54253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6555 comm="syz.1.11651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef01c0e929 code=0x7ffc0000 [ 916.040556][ T29] audit: type=1326 audit(1751285526.813:54254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6555 comm="syz.1.11651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef01c0e929 code=0x7ffc0000 [ 916.064250][ T29] audit: type=1326 audit(1751285526.813:54255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6555 comm="syz.1.11651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef01c0e929 code=0x7ffc0000 [ 916.087868][ T29] audit: type=1326 audit(1751285526.813:54256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6555 comm="syz.1.11651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fef01c0e929 code=0x7ffc0000 [ 916.114477][ T6161] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.583540][ T6582] openvswitch: netlink: Message has 6 unknown bytes. [ 916.696761][ T6587] block device autoloading is deprecated and will be removed. [ 916.708496][ T6591] SET target dimension over the limit! [ 916.796997][ T6594] FAULT_INJECTION: forcing a failure. [ 916.796997][ T6594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 916.810248][ T6594] CPU: 1 UID: 0 PID: 6594 Comm: syz.8.11666 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 916.810306][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 916.810323][ T6594] Call Trace: [ 916.810330][ T6594] [ 916.810339][ T6594] __dump_stack+0x1d/0x30 [ 916.810394][ T6594] dump_stack_lvl+0xe8/0x140 [ 916.810419][ T6594] dump_stack+0x15/0x1b [ 916.810441][ T6594] should_fail_ex+0x265/0x280 [ 916.810513][ T6594] should_fail+0xb/0x20 [ 916.810546][ T6594] should_fail_usercopy+0x1a/0x20 [ 916.810589][ T6594] copy_to_user_nofault+0x7f/0x120 [ 916.810647][ T6594] bpf_probe_write_user+0x83/0xc0 [ 916.810691][ T6594] bpf_prog_19072b5a3fcf5d64+0x41/0x49 [ 916.810795][ T6594] bpf_trace_run3+0x10f/0x1d0 [ 916.810899][ T6594] ? getname_flags+0x2be/0x3b0 [ 916.810931][ T6594] ? getname_flags+0x2be/0x3b0 [ 916.810986][ T6594] kmem_cache_free+0x257/0x300 [ 916.811025][ T6594] getname_flags+0x2be/0x3b0 [ 916.811052][ T6594] user_path_create+0x27/0x130 [ 916.811110][ T6594] bpf_obj_pin_user+0xe0/0x230 [ 916.811140][ T6594] bpf_obj_pin+0xac/0xd0 [ 916.811206][ T6594] __sys_bpf+0x6a7/0x790 [ 916.811245][ T6594] __x64_sys_bpf+0x41/0x50 [ 916.811277][ T6594] x64_sys_call+0x2478/0x2fb0 [ 916.811352][ T6594] do_syscall_64+0xd2/0x200 [ 916.811375][ T6594] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 916.811463][ T6594] ? clear_bhb_loop+0x40/0x90 [ 916.811491][ T6594] ? clear_bhb_loop+0x40/0x90 [ 916.811519][ T6594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.811546][ T6594] RIP: 0033:0x7f5ed1fbe929 [ 916.811565][ T6594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 916.811626][ T6594] RSP: 002b:00007f5ed0627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 916.811652][ T6594] RAX: ffffffffffffffda RBX: 00007f5ed21e5fa0 RCX: 00007f5ed1fbe929 [ 916.811668][ T6594] RDX: 0000000000000018 RSI: 0000200000000080 RDI: 0000000000000006 [ 916.811685][ T6594] RBP: 00007f5ed0627090 R08: 0000000000000000 R09: 0000000000000000 [ 916.811731][ T6594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.811746][ T6594] R13: 0000000000000000 R14: 00007f5ed21e5fa0 R15: 00007ffcac369288 [ 916.811770][ T6594] [ 917.101112][ T6598] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 917.107683][ T6598] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 917.115274][ T6598] vhci_hcd vhci_hcd.0: Device attached [ 917.149303][ T6604] FAULT_INJECTION: forcing a failure. [ 917.149303][ T6604] name failslab, interval 1, probability 0, space 0, times 0 [ 917.162081][ T6604] CPU: 1 UID: 0 PID: 6604 Comm: syz.8.11670 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 917.162108][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 917.162120][ T6604] Call Trace: [ 917.162149][ T6604] [ 917.162156][ T6604] __dump_stack+0x1d/0x30 [ 917.162178][ T6604] dump_stack_lvl+0xe8/0x140 [ 917.162203][ T6604] dump_stack+0x15/0x1b [ 917.162225][ T6604] should_fail_ex+0x265/0x280 [ 917.162264][ T6604] should_failslab+0x8c/0xb0 [ 917.162306][ T6604] kmem_cache_alloc_node_noprof+0x57/0x320 [ 917.162339][ T6604] ? __alloc_skb+0x101/0x320 [ 917.162391][ T6604] __alloc_skb+0x101/0x320 [ 917.162467][ T6604] netlink_alloc_large_skb+0xba/0xf0 [ 917.162552][ T6604] netlink_sendmsg+0x3cf/0x6b0 [ 917.162642][ T6604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 917.162666][ T6604] __sock_sendmsg+0x145/0x180 [ 917.162699][ T6604] ____sys_sendmsg+0x31e/0x4e0 [ 917.162747][ T6604] ___sys_sendmsg+0x17b/0x1d0 [ 917.162838][ T6604] __x64_sys_sendmsg+0xd4/0x160 [ 917.162984][ T6604] x64_sys_call+0x2999/0x2fb0 [ 917.163012][ T6604] do_syscall_64+0xd2/0x200 [ 917.163035][ T6604] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 917.163067][ T6604] ? clear_bhb_loop+0x40/0x90 [ 917.163088][ T6604] ? clear_bhb_loop+0x40/0x90 [ 917.163229][ T6604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.163250][ T6604] RIP: 0033:0x7f5ed1fbe929 [ 917.163268][ T6604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.163292][ T6604] RSP: 002b:00007f5ed0627038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 917.163317][ T6604] RAX: ffffffffffffffda RBX: 00007f5ed21e5fa0 RCX: 00007f5ed1fbe929 [ 917.163333][ T6604] RDX: 00000000040080d0 RSI: 0000200000000240 RDI: 0000000000000003 [ 917.163394][ T6604] RBP: 00007f5ed0627090 R08: 0000000000000000 R09: 0000000000000000 [ 917.163477][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.163493][ T6604] R13: 0000000000000000 R14: 00007f5ed21e5fa0 R15: 00007ffcac369288 [ 917.163516][ T6604] [ 917.210845][ T6605] loop9: detected capacity change from 0 to 164 [ 917.267606][ T6607] netlink: 'syz.8.11671': attribute type 21 has an invalid length. [ 917.357381][ T6598] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 917.362509][ T6607] netlink: 100 bytes leftover after parsing attributes in process `syz.8.11671'. [ 917.407537][ T6600] vhci_hcd: connection closed [ 917.408351][ T5516] vhci_hcd: stop threads [ 917.417365][ T5516] vhci_hcd: release socket [ 917.421816][ T5516] vhci_hcd: disconnect device [ 917.473251][ T2638] usb 19-1: new low-speed USB device number 2 using vhci_hcd [ 917.480806][ T2638] usb 19-1: enqueue for inactive port 0 [ 917.490634][ T2638] usb 19-1: enqueue for inactive port 0 [ 917.508837][ T2638] usb 19-1: enqueue for inactive port 0 [ 917.588058][ T2638] vhci_hcd: vhci_device speed not set [ 917.768349][ T6626] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6626 comm=syz.0.11678 [ 917.780986][ T6626] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6626 comm=syz.0.11678 [ 917.796072][ T6626] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6626 comm=syz.0.11678 [ 917.917908][ T6631] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 917.924522][ T6631] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 917.932125][ T6631] vhci_hcd vhci_hcd.0: Device attached [ 917.962569][ T6636] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 917.969133][ T6636] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 917.976806][ T6636] vhci_hcd vhci_hcd.0: Device attached [ 917.980838][ T6631] loop0: detected capacity change from 0 to 164 [ 917.994762][ T6636] loop9: detected capacity change from 0 to 164 [ 918.010174][ T6636] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 918.018064][ T6638] vhci_hcd: connection closed [ 918.018298][T21040] vhci_hcd: stop threads [ 918.027236][ T6631] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 918.034789][T21040] vhci_hcd: release socket [ 918.039238][T21040] vhci_hcd: disconnect device [ 918.044036][ T6633] vhci_hcd: connection closed [ 918.044498][T21040] vhci_hcd: stop threads [ 918.053510][T21040] vhci_hcd: release socket [ 918.058048][T21040] vhci_hcd: disconnect device [ 918.095292][ T6643] netlink: 'syz.1.11683': attribute type 21 has an invalid length. [ 918.103326][ T6643] netlink: 100 bytes leftover after parsing attributes in process `syz.1.11683'. [ 918.568640][ T6666] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11692'. [ 918.585305][ T6669] netlink: 'syz.0.11694': attribute type 21 has an invalid length. [ 918.593409][ T6669] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11694'. [ 918.618851][ T6672] SET target dimension over the limit! [ 918.747533][ T6691] loop0: detected capacity change from 0 to 1024 [ 918.756337][ T6691] EXT4-fs: Ignoring removed nobh option [ 918.761967][ T6691] EXT4-fs: Ignoring removed bh option [ 918.766387][ T6694] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 918.773907][ T6694] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 918.781583][ T6694] vhci_hcd vhci_hcd.0: Device attached [ 918.790713][ T6695] vhci_hcd: connection closed [ 918.791964][T21042] vhci_hcd: stop threads [ 918.801042][T21042] vhci_hcd: release socket [ 918.805474][T21042] vhci_hcd: disconnect device [ 918.812398][ T6691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 919.089877][T30912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.204215][ T6712] netlink: 'syz.0.11709': attribute type 21 has an invalid length. [ 919.212289][ T6712] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11709'. [ 919.278730][ T6718] loop0: detected capacity change from 0 to 128 [ 919.285292][ T6718] EXT4-fs: Ignoring removed nobh option [ 919.297521][ T6718] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 919.310957][ T6718] ext4 filesystem being mounted at /584/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 919.341582][T30912] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 919.452752][ T6733] tmpfs: Bad value for 'mpol' [ 919.647023][ T6739] loop0: detected capacity change from 0 to 128 [ 919.653799][ T6727] netlink: 'syz.8.11716': attribute type 1 has an invalid length. [ 919.661889][ T6727] netlink: 224 bytes leftover after parsing attributes in process `syz.8.11716'. [ 919.671613][ T6739] EXT4-fs: test_dummy_encryption option not supported [ 919.692786][ T6739] xt_hashlimit: max too large, truncated to 1048576 [ 919.954436][ T6763] random: crng reseeded on system resumption [ 920.041939][ T6769] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 920.048652][ T6769] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 920.056183][ T6769] vhci_hcd vhci_hcd.0: Device attached [ 920.159752][ T6770] vhci_hcd: connection closed [ 920.159955][ T5516] vhci_hcd: stop threads [ 920.169139][ T5516] vhci_hcd: release socket [ 920.173584][ T5516] vhci_hcd: disconnect device [ 920.230924][ T3383] vhci_hcd: vhci_device speed not set [ 920.379273][ T6780] FAULT_INJECTION: forcing a failure. [ 920.379273][ T6780] name failslab, interval 1, probability 0, space 0, times 0 [ 920.392233][ T6780] CPU: 0 UID: 0 PID: 6780 Comm: syz.1.11732 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 920.392270][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 920.392287][ T6780] Call Trace: [ 920.392294][ T6780] [ 920.392303][ T6780] __dump_stack+0x1d/0x30 [ 920.392329][ T6780] dump_stack_lvl+0xe8/0x140 [ 920.392348][ T6780] dump_stack+0x15/0x1b [ 920.392385][ T6780] should_fail_ex+0x265/0x280 [ 920.392421][ T6780] should_failslab+0x8c/0xb0 [ 920.392444][ T6780] kmem_cache_alloc_noprof+0x50/0x310 [ 920.392472][ T6780] ? getname_flags+0x80/0x3b0 [ 920.392547][ T6780] getname_flags+0x80/0x3b0 [ 920.392570][ T6780] do_sys_openat2+0x60/0x110 [ 920.392664][ T6780] __x64_sys_openat+0xf2/0x120 [ 920.392702][ T6780] x64_sys_call+0x1af/0x2fb0 [ 920.392809][ T6780] do_syscall_64+0xd2/0x200 [ 920.392829][ T6780] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 920.392964][ T6780] ? clear_bhb_loop+0x40/0x90 [ 920.392986][ T6780] ? clear_bhb_loop+0x40/0x90 [ 920.393052][ T6780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.393082][ T6780] RIP: 0033:0x7fef01c0e929 [ 920.393103][ T6780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.393123][ T6780] RSP: 002b:00007fef00256038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 920.393141][ T6780] RAX: ffffffffffffffda RBX: 00007fef01e36080 RCX: 00007fef01c0e929 [ 920.393159][ T6780] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 920.393172][ T6780] RBP: 00007fef00256090 R08: 0000000000000000 R09: 0000000000000000 [ 920.393195][ T6780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 920.393212][ T6780] R13: 0000000000000000 R14: 00007fef01e36080 R15: 00007ffda0565b08 [ 920.393239][ T6780] [ 920.580398][ T6784] loop0: detected capacity change from 0 to 512 [ 920.589499][ T6784] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 920.599021][ T6784] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #13: comm syz.0.11736: iget: bad i_size value: 12154757448730 [ 920.606788][ T6788] netlink: 'syz.9.11737': attribute type 21 has an invalid length. [ 920.612285][ T6784] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.11736: couldn't read orphan inode 13 (err -117) [ 920.619767][ T6788] netlink: 100 bytes leftover after parsing attributes in process `syz.9.11737'. [ 920.642796][ T6784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.659377][ T6784] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 920.675014][ T2669] usb 1-1: enqueue for inactive port 0 [ 920.680589][ T2669] usb 1-1: enqueue for inactive port 0 [ 920.694310][T30912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.746937][ T2669] vhci_hcd: vhci_device speed not set [ 920.772516][ T6800] loop9: detected capacity change from 0 to 1024 [ 920.779509][ T6800] EXT4-fs: inline encryption not supported [ 920.785638][ T6800] EXT4-fs: Ignoring removed i_version option [ 920.792611][ T6800] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 920.803042][ T6800] EXT4-fs (loop9): group descriptors corrupted! [ 920.809895][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 920.809907][ T29] audit: type=1400 audit(1751285531.990:54720): avc: denied { bind } for pid=6801 comm="syz.0.11743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 920.836522][ T29] audit: type=1326 audit(1751285532.000:54721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6801 comm="syz.0.11743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41439de929 code=0x7ffc0000 [ 920.860332][ T29] audit: type=1326 audit(1751285532.000:54722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6801 comm="syz.0.11743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41439de929 code=0x7ffc0000 [ 920.884249][ T29] audit: type=1326 audit(1751285532.000:54723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6801 comm="syz.0.11743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f41439de929 code=0x7ffc0000 [ 920.908216][ T29] audit: type=1326 audit(1751285532.000:54724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6801 comm="syz.0.11743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41439de929 code=0x7ffc0000 [ 920.931972][ T29] audit: type=1326 audit(1751285532.000:54725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6801 comm="syz.0.11743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41439de929 code=0x7ffc0000 [ 920.955827][ T29] audit: type=1326 audit(1751285532.000:54726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6801 comm="syz.0.11743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41439de929 code=0x7ffc0000 [ 920.979701][ T29] audit: type=1326 audit(1751285532.000:54727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6801 comm="syz.0.11743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41439de929 code=0x7ffc0000 [ 921.003639][ T29] audit: type=1326 audit(1751285532.000:54728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6801 comm="syz.0.11743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41439de929 code=0x7ffc0000 [ 921.027444][ T29] audit: type=1326 audit(1751285532.000:54729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6801 comm="syz.0.11743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41439de929 code=0x7ffc0000 [ 921.091706][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11747'. [ 921.100821][ T6813] tipc: Enabling of bearer rejected, failed to enable media [ 921.134067][ T6813] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11747'. [ 921.208854][ T6812] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.11746'. [ 921.236718][ T6811] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.11746'. [ 921.273008][ T6822] loop9: detected capacity change from 0 to 512 [ 921.276268][ T6820] netlink: 'syz.0.11749': attribute type 21 has an invalid length. [ 921.287658][ T6820] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11749'. [ 921.299717][ T6822] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -13 [ 921.324635][ T6822] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #13: comm syz.9.11750: iget: bad i_size value: 12154757448730 [ 921.339746][ T6822] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.11750: couldn't read orphan inode 13 (err -117) [ 921.353162][ T6822] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 921.376955][ T6822] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 921.400094][ T6818] xt_hashlimit: max too large, truncated to 1048576 [ 921.418664][ T6161] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.657486][ T6852] netlink: 'syz.8.11763': attribute type 21 has an invalid length. [ 921.665480][ T6852] netlink: 100 bytes leftover after parsing attributes in process `syz.8.11763'. [ 921.682634][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11765'. [ 921.691660][ T6854] tipc: Enabling of bearer rejected, failed to enable media [ 921.703468][ T6854] netlink: 14 bytes leftover after parsing attributes in process `syz.5.11765'. [ 922.192781][ T6877] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11773'. [ 922.390375][ T6883] netlink: 'syz.5.11776': attribute type 21 has an invalid length. [ 923.008219][ T6915] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 923.014829][ T6915] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 923.022539][ T6915] vhci_hcd vhci_hcd.0: Device attached [ 923.170762][ T6916] vhci_hcd: connection closed [ 923.171008][T21042] vhci_hcd: stop threads [ 923.180178][T21042] vhci_hcd: release socket [ 923.184695][T21042] vhci_hcd: disconnect device [ 923.217210][ T2638] vhci_hcd: vhci_device speed not set [ 923.412429][ T6933] loop5: detected capacity change from 0 to 128 [ 923.427787][ T6933] EXT4-fs: Ignoring removed nobh option [ 923.441993][ T6933] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 923.462999][ T6933] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 923.510439][ T1779] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 923.709150][ T6939] netlink: 'syz.5.11798': attribute type 1 has an invalid length. [ 923.762854][ T6939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 923.776413][ T6939] bond3: (slave batadv0): Enslaving as a backup interface with an up link [ 924.054197][T21040] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.073929][T21040] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.093914][T21040] $H (unregistering): (slave dummy0): Releasing backup interface [ 924.113486][T21040] $H (unregistering): Released all slaves [ 924.145631][ T6974] bond4: entered promiscuous mode [ 924.150757][ T6974] bond4: entered allmulticast mode [ 924.156478][ T6974] 8021q: adding VLAN 0 to HW filter on device bond4 [ 924.167782][ T6974] bond4 (unregistering): Released all slaves [ 924.178292][ T6987] tipc: Started in network mode [ 924.183500][ T6987] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 924.190881][ T6987] tipc: Enabled bearer , priority 10 [ 924.217699][ T6991] tipc: Resetting bearer [ 924.242623][ T6991] tipc: Disabling bearer [ 924.282636][T21040] tipc: Disabling bearer [ 924.286977][ T6993] FAULT_INJECTION: forcing a failure. [ 924.286977][ T6993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.288012][T21040] tipc: Left network mode [ 924.301038][ T6993] CPU: 0 UID: 0 PID: 6993 Comm: syz.5.11815 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 924.301076][ T6993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 924.301094][ T6993] Call Trace: [ 924.301102][ T6993] [ 924.301112][ T6993] __dump_stack+0x1d/0x30 [ 924.301154][ T6993] dump_stack_lvl+0xe8/0x140 [ 924.301179][ T6993] dump_stack+0x15/0x1b [ 924.301234][ T6993] should_fail_ex+0x265/0x280 [ 924.301275][ T6993] should_fail+0xb/0x20 [ 924.301311][ T6993] should_fail_usercopy+0x1a/0x20 [ 924.301432][ T6993] _copy_from_iter+0xcf/0xe40 [ 924.301474][ T6993] ? __build_skb_around+0x1a0/0x200 [ 924.301590][ T6993] ? __alloc_skb+0x223/0x320 [ 924.301631][ T6993] netlink_sendmsg+0x471/0x6b0 [ 924.301660][ T6993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 924.301686][ T6993] __sock_sendmsg+0x145/0x180 [ 924.301729][ T6993] ____sys_sendmsg+0x31e/0x4e0 [ 924.301922][ T6993] ___sys_sendmsg+0x17b/0x1d0 [ 924.302015][ T6993] __x64_sys_sendmsg+0xd4/0x160 [ 924.302065][ T6993] x64_sys_call+0x2999/0x2fb0 [ 924.302140][ T6993] do_syscall_64+0xd2/0x200 [ 924.302163][ T6993] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 924.302197][ T6993] ? clear_bhb_loop+0x40/0x90 [ 924.302253][ T6993] ? clear_bhb_loop+0x40/0x90 [ 924.302283][ T6993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.302321][ T6993] RIP: 0033:0x7f442291e929 [ 924.302381][ T6993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.302402][ T6993] RSP: 002b:00007f4420f87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 924.302426][ T6993] RAX: ffffffffffffffda RBX: 00007f4422b45fa0 RCX: 00007f442291e929 [ 924.302442][ T6993] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000004 [ 924.302459][ T6993] RBP: 00007f4420f87090 R08: 0000000000000000 R09: 0000000000000000 [ 924.302476][ T6993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.302492][ T6993] R13: 0000000000000000 R14: 00007f4422b45fa0 R15: 00007ffe5c9a2b58 [ 924.302580][ T6993] [ 924.525989][ T6951] chnl_net:caif_netlink_parms(): no params data found [ 924.630751][ T6951] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.637942][ T6951] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.660051][ T6951] bridge_slave_0: entered allmulticast mode [ 924.667086][ T6951] bridge_slave_0: entered promiscuous mode [ 924.690780][ T6951] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.697939][ T6951] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.711542][ T6951] bridge_slave_1: entered allmulticast mode [ 924.719414][ T6951] bridge_slave_1: entered promiscuous mode [ 924.742196][T21040] hsr_slave_0: left promiscuous mode [ 924.760760][ T7014] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 924.767226][T21040] hsr_slave_1: left promiscuous mode [ 924.767312][ T7014] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 924.780176][ T7014] vhci_hcd vhci_hcd.0: Device attached [ 924.795608][ T7014] loop5: detected capacity change from 0 to 164 [ 924.832557][T21040] team0 (unregistering): Port device team_slave_1 removed [ 924.847961][T21040] team0 (unregistering): Port device team_slave_0 removed [ 924.938251][ T6951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.974361][ T6951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.990264][ T7015] vhci_hcd: connection closed [ 924.991204][T21042] vhci_hcd: stop threads [ 925.000283][T21042] vhci_hcd: release socket [ 925.004743][T21042] vhci_hcd: disconnect device [ 925.011407][T32293] usb 11-1: new low-speed USB device number 3 using vhci_hcd [ 925.024437][T32293] usb 11-1: enqueue for inactive port 0 [ 925.043338][T32293] usb 11-1: enqueue for inactive port 0 [ 925.061033][T32293] usb 11-1: enqueue for inactive port 0 [ 925.072628][ T6951] team0: Port device team_slave_0 added [ 925.092986][ T6951] team0: Port device team_slave_1 added [ 925.125839][T32293] vhci_hcd: vhci_device speed not set [ 925.139815][ T6951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.146853][ T6951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.172945][ T6951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.189011][ T6951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.196020][ T6951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.222157][ T6951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.266746][T21040] IPVS: stop unused estimator thread 0... [ 925.276040][ T7039] loop9: detected capacity change from 0 to 128 [ 925.282890][ T6951] hsr_slave_0: entered promiscuous mode [ 925.283324][ T7039] EXT4-fs: Ignoring removed nobh option [ 925.293795][ T6951] hsr_slave_1: entered promiscuous mode [ 925.300266][ T6951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 925.300994][ T7039] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 925.307959][ T6951] Cannot create hsr debugfs directory [ 925.330211][ T7041] FAULT_INJECTION: forcing a failure. [ 925.330211][ T7041] name failslab, interval 1, probability 0, space 0, times 0 [ 925.343118][ T7041] CPU: 1 UID: 0 PID: 7041 Comm: +}[@ Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 925.343152][ T7041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 925.343217][ T7041] Call Trace: [ 925.343232][ T7041] [ 925.343241][ T7041] __dump_stack+0x1d/0x30 [ 925.343308][ T7041] dump_stack_lvl+0xe8/0x140 [ 925.343334][ T7041] dump_stack+0x15/0x1b [ 925.343362][ T7041] should_fail_ex+0x265/0x280 [ 925.343400][ T7041] should_failslab+0x8c/0xb0 [ 925.343433][ T7041] kmem_cache_alloc_noprof+0x50/0x310 [ 925.343579][ T7041] ? alloc_empty_file+0x76/0x200 [ 925.343611][ T7041] alloc_empty_file+0x76/0x200 [ 925.343645][ T7041] alloc_file_pseudo+0xc6/0x160 [ 925.343691][ T7041] __shmem_file_setup+0x1de/0x210 [ 925.343748][ T7041] shmem_file_setup+0x3b/0x50 [ 925.343789][ T7041] __se_sys_memfd_create+0x2c3/0x590 [ 925.343830][ T7041] __x64_sys_memfd_create+0x31/0x40 [ 925.343905][ T7041] x64_sys_call+0x122f/0x2fb0 [ 925.344007][ T7041] do_syscall_64+0xd2/0x200 [ 925.344033][ T7041] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 925.344081][ T7041] ? clear_bhb_loop+0x40/0x90 [ 925.344104][ T7041] ? clear_bhb_loop+0x40/0x90 [ 925.344134][ T7041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.344163][ T7041] RIP: 0033:0x7fef01c0e929 [ 925.344190][ T7041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.344214][ T7041] RSP: 002b:00007fef00276e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 925.344288][ T7041] RAX: ffffffffffffffda RBX: 000000000000061f RCX: 00007fef01c0e929 [ 925.344394][ T7041] RDX: 00007fef00276ef0 RSI: 0000000000000000 RDI: 00007fef01c914cc [ 925.344409][ T7041] RBP: 0000200000001680 R08: 00007fef00276bb7 R09: 00007fef00276e40 [ 925.344421][ T7041] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 925.344436][ T7041] R13: 00007fef00276ef0 R14: 00007fef00276eb0 R15: 0000200000000000 [ 925.344534][ T7041] [ 925.542679][ T7039] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 925.554584][ T7041] random: crng reseeded on system resumption [ 925.583753][ T29] kauditd_printk_skb: 455 callbacks suppressed [ 925.583769][ T29] audit: type=1326 audit(1751285537.000:55183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.9.11830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275fd5e929 code=0x7ffc0000 [ 925.677991][ T29] audit: type=1326 audit(1751285537.042:55184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.9.11830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f275fd5e929 code=0x7ffc0000 [ 925.701549][ T29] audit: type=1326 audit(1751285537.094:55185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.9.11830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275fd5e929 code=0x7ffc0000 [ 925.725450][ T29] audit: type=1326 audit(1751285537.094:55186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.9.11830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275fd5e929 code=0x7ffc0000 [ 925.749028][ T29] audit: type=1326 audit(1751285537.094:55187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.9.11830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f275fd5e929 code=0x7ffc0000 [ 925.772609][ T29] audit: type=1326 audit(1751285537.094:55188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.9.11830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275fd5e929 code=0x7ffc0000 [ 925.796247][ T29] audit: type=1326 audit(1751285537.094:55189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.9.11830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275fd5e929 code=0x7ffc0000 [ 925.819888][ T29] audit: type=1326 audit(1751285537.094:55190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.9.11830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f275fd5e929 code=0x7ffc0000 [ 925.843627][ T29] audit: type=1326 audit(1751285537.094:55191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.9.11830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275fd5e929 code=0x7ffc0000 [ 925.867332][ T29] audit: type=1326 audit(1751285537.094:55192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.9.11830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275fd5e929 code=0x7ffc0000 [ 925.939721][ T7039] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 925.972810][ T7053] tun0: tun_chr_ioctl cmd 1074025675 [ 925.978196][ T7053] tun0: persist enabled [ 926.020230][ T7055] loop9: detected capacity change from 0 to 128 [ 926.027526][ T7055] EXT4-fs: Ignoring removed nobh option [ 926.036629][ T7055] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 926.049243][ T7055] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 926.115542][ T7062] __nla_validate_parse: 23 callbacks suppressed [ 926.115559][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11838'. [ 926.132078][ T7062] bridge_slave_1: left allmulticast mode [ 926.138009][ T7062] bridge_slave_1: left promiscuous mode [ 926.143867][ T7062] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.152787][ T7062] bridge_slave_0: left allmulticast mode [ 926.158601][ T7062] bridge_slave_0: left promiscuous mode [ 926.164452][ T7062] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.169030][ T7055] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 926.229488][ T7067] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.11840' sets config #0 [ 926.330519][ T6951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 926.341338][ T6951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 926.352588][ T6951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 926.363285][ T6951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 926.413423][ T6951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 926.431104][ T6951] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.445624][T21040] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.452782][T21040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.476730][T21040] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.483842][T21040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.563797][ T6951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 926.667071][ T6951] veth0_vlan: entered promiscuous mode [ 926.678381][ T6951] veth1_vlan: entered promiscuous mode [ 926.695473][ T6951] veth0_macvtap: entered promiscuous mode [ 926.703464][ T6951] veth1_macvtap: entered promiscuous mode [ 926.721837][ T6951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.734865][ T6951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.764637][ T6951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.773468][ T6951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.782306][ T6951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.791062][ T6951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.855355][ T7102] loop5: detected capacity change from 0 to 128 [ 926.863951][ T7102] EXT4-fs: Ignoring removed nobh option [ 926.874302][ T7102] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 926.892885][ T7102] ext4 filesystem being mounted at /311/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 927.025145][ T7119] netlink: 32 bytes leftover after parsing attributes in process `syz.8.11853'. [ 927.039388][ T7119] netlink: 'syz.8.11853': attribute type 1 has an invalid length. [ 927.089013][ T7127] FAULT_INJECTION: forcing a failure. [ 927.089013][ T7127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 927.102364][ T7127] CPU: 1 UID: 0 PID: 7127 Comm: syz.1.11856 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 927.102395][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 927.102410][ T7127] Call Trace: [ 927.102417][ T7127] [ 927.102425][ T7127] __dump_stack+0x1d/0x30 [ 927.102533][ T7127] dump_stack_lvl+0xe8/0x140 [ 927.102551][ T7127] dump_stack+0x15/0x1b [ 927.102566][ T7127] should_fail_ex+0x265/0x280 [ 927.102598][ T7127] should_fail+0xb/0x20 [ 927.102672][ T7127] should_fail_usercopy+0x1a/0x20 [ 927.102765][ T7127] _copy_from_iter+0xcf/0xe40 [ 927.102805][ T7127] ? __build_skb_around+0x1a0/0x200 [ 927.102874][ T7127] ? __alloc_skb+0x223/0x320 [ 927.102910][ T7127] netlink_sendmsg+0x471/0x6b0 [ 927.103012][ T7127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 927.103036][ T7127] __sock_sendmsg+0x145/0x180 [ 927.103111][ T7127] ____sys_sendmsg+0x31e/0x4e0 [ 927.103207][ T7127] ___sys_sendmsg+0x17b/0x1d0 [ 927.103271][ T7127] __x64_sys_sendmsg+0xd4/0x160 [ 927.103341][ T7127] x64_sys_call+0x2999/0x2fb0 [ 927.103363][ T7127] do_syscall_64+0xd2/0x200 [ 927.103411][ T7127] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 927.103439][ T7127] ? clear_bhb_loop+0x40/0x90 [ 927.103462][ T7127] ? clear_bhb_loop+0x40/0x90 [ 927.103492][ T7127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.103558][ T7127] RIP: 0033:0x7fef01c0e929 [ 927.103577][ T7127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 927.103601][ T7127] RSP: 002b:00007fef00277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 927.103622][ T7127] RAX: ffffffffffffffda RBX: 00007fef01e35fa0 RCX: 00007fef01c0e929 [ 927.103639][ T7127] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000004 [ 927.103651][ T7127] RBP: 00007fef00277090 R08: 0000000000000000 R09: 0000000000000000 [ 927.103673][ T7127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.103693][ T7127] R13: 0000000000000000 R14: 00007fef01e35fa0 R15: 00007ffda0565b08 [ 927.103790][ T7127] [ 927.165217][ T7131] loop0: detected capacity change from 0 to 512 [ 927.183706][ T7131] EXT4-fs (loop0): too many log groups per flexible block group [ 927.183737][ T7131] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 927.183841][ T7131] EXT4-fs (loop0): mount failed [ 927.393827][ T7102] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 927.719810][ T7164] loop5: detected capacity change from 0 to 128 [ 927.727322][ T7164] EXT4-fs: Ignoring removed nobh option [ 927.736023][ T7164] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 927.748513][ T7164] ext4 filesystem being mounted at /316/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 927.847376][ T7164] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 927.889082][ T7171] loop5: detected capacity change from 0 to 512 [ 927.904310][ T7171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.918194][ T7171] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 927.942666][ T7177] loop0: detected capacity change from 0 to 128 [ 927.956612][ T7177] EXT4-fs: Ignoring removed nobh option [ 927.964985][ T7177] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 927.977524][ T7177] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 928.007722][ T7182] FAULT_INJECTION: forcing a failure. [ 928.007722][ T7182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.020972][ T7182] CPU: 1 UID: 0 PID: 7182 Comm: syz.1.11878 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 928.021001][ T7182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 928.021015][ T7182] Call Trace: [ 928.021021][ T7182] [ 928.021043][ T7182] __dump_stack+0x1d/0x30 [ 928.021068][ T7182] dump_stack_lvl+0xe8/0x140 [ 928.021092][ T7182] dump_stack+0x15/0x1b [ 928.021125][ T7182] should_fail_ex+0x265/0x280 [ 928.021200][ T7182] should_fail+0xb/0x20 [ 928.021278][ T7182] should_fail_usercopy+0x1a/0x20 [ 928.021345][ T7182] _copy_to_user+0x20/0xa0 [ 928.021386][ T7182] simple_read_from_buffer+0xb5/0x130 [ 928.021419][ T7182] proc_fail_nth_read+0x100/0x140 [ 928.021462][ T7182] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 928.021568][ T7182] vfs_read+0x1a0/0x6f0 [ 928.021598][ T7182] ? __rcu_read_unlock+0x4f/0x70 [ 928.021618][ T7182] ? __fget_files+0x184/0x1c0 [ 928.021647][ T7182] ksys_read+0xda/0x1a0 [ 928.021688][ T7182] __x64_sys_read+0x40/0x50 [ 928.021786][ T7182] x64_sys_call+0x2d77/0x2fb0 [ 928.021806][ T7182] do_syscall_64+0xd2/0x200 [ 928.021903][ T7182] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 928.021927][ T7182] ? clear_bhb_loop+0x40/0x90 [ 928.021976][ T7182] ? clear_bhb_loop+0x40/0x90 [ 928.022010][ T7182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.022060][ T7182] RIP: 0033:0x7fef01c0d33c [ 928.022077][ T7182] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 928.022138][ T7182] RSP: 002b:00007fef00277030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 928.022159][ T7182] RAX: ffffffffffffffda RBX: 00007fef01e35fa0 RCX: 00007fef01c0d33c [ 928.022173][ T7182] RDX: 000000000000000f RSI: 00007fef002770a0 RDI: 0000000000000007 [ 928.022186][ T7182] RBP: 00007fef00277090 R08: 0000000000000000 R09: 0000000000000000 [ 928.022278][ T7182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.022291][ T7182] R13: 0000000000000000 R14: 00007fef01e35fa0 R15: 00007ffda0565b08 [ 928.022310][ T7182] [ 928.247110][ T6951] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 928.775146][ T1779] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.147327][ T7212] SELinux: failed to load policy [ 929.207923][ T7222] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.263071][ T7225] FAULT_INJECTION: forcing a failure. [ 929.263071][ T7225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.276284][ T7225] CPU: 0 UID: 0 PID: 7225 Comm: syz.9.11895 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 929.276368][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 929.276382][ T7225] Call Trace: [ 929.276390][ T7225] [ 929.276400][ T7225] __dump_stack+0x1d/0x30 [ 929.276482][ T7225] dump_stack_lvl+0xe8/0x140 [ 929.276508][ T7225] dump_stack+0x15/0x1b [ 929.276530][ T7225] should_fail_ex+0x265/0x280 [ 929.276610][ T7225] should_fail+0xb/0x20 [ 929.276718][ T7225] should_fail_usercopy+0x1a/0x20 [ 929.276781][ T7225] _copy_from_user+0x1c/0xb0 [ 929.276817][ T7225] ___sys_sendmsg+0xc1/0x1d0 [ 929.276881][ T7225] __x64_sys_sendmsg+0xd4/0x160 [ 929.276935][ T7225] x64_sys_call+0x2999/0x2fb0 [ 929.276963][ T7225] do_syscall_64+0xd2/0x200 [ 929.277073][ T7225] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 929.277107][ T7225] ? clear_bhb_loop+0x40/0x90 [ 929.277154][ T7225] ? clear_bhb_loop+0x40/0x90 [ 929.277176][ T7225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.277197][ T7225] RIP: 0033:0x7f275fd5e929 [ 929.277222][ T7225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 929.277242][ T7225] RSP: 002b:00007f275e3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.277259][ T7225] RAX: ffffffffffffffda RBX: 00007f275ff85fa0 RCX: 00007f275fd5e929 [ 929.277271][ T7225] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 929.277286][ T7225] RBP: 00007f275e3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 929.277302][ T7225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.277351][ T7225] R13: 0000000000000000 R14: 00007f275ff85fa0 R15: 00007ffc4ed951e8 [ 929.277372][ T7225] [ 929.764219][ T7244] program syz.9.11901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 929.926877][ T7247] loop5: detected capacity change from 0 to 128 [ 929.937033][ T7247] EXT4-fs: Ignoring removed nobh option [ 929.945165][ T7247] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 929.958716][ T7247] ext4 filesystem being mounted at /320/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 930.017189][ T1779] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 930.090648][ T7252] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 930.097337][ T7252] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 930.104922][ T7252] vhci_hcd vhci_hcd.0: Device attached [ 930.133031][ T7252] loop9: detected capacity change from 0 to 164 [ 930.151981][ T7252] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 930.165125][ T7253] vhci_hcd: connection closed [ 930.165339][T21040] vhci_hcd: stop threads [ 930.174401][T21040] vhci_hcd: release socket [ 930.178880][T21040] vhci_hcd: disconnect device [ 930.298420][ T7267] FAULT_INJECTION: forcing a failure. [ 930.298420][ T7267] name failslab, interval 1, probability 0, space 0, times 0 [ 930.311123][ T7267] CPU: 1 UID: 0 PID: 7267 Comm: syz.8.11910 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 930.311249][ T7267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 930.311267][ T7267] Call Trace: [ 930.311275][ T7267] [ 930.311284][ T7267] __dump_stack+0x1d/0x30 [ 930.311308][ T7267] dump_stack_lvl+0xe8/0x140 [ 930.311330][ T7267] dump_stack+0x15/0x1b [ 930.311422][ T7267] should_fail_ex+0x265/0x280 [ 930.311453][ T7267] should_failslab+0x8c/0xb0 [ 930.311477][ T7267] __kmalloc_cache_node_noprof+0x54/0x320 [ 930.311590][ T7267] ? __get_vm_area_node+0x106/0x1d0 [ 930.311621][ T7267] __get_vm_area_node+0x106/0x1d0 [ 930.311653][ T7267] __vmalloc_node_range_noprof+0x273/0xe00 [ 930.311728][ T7267] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 930.311761][ T7267] ? mntput_no_expire+0x6f/0x3c0 [ 930.311821][ T7267] ? __rcu_read_unlock+0x4f/0x70 [ 930.311854][ T7267] ? selinux_capable+0x1f9/0x270 [ 930.311892][ T7267] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 930.311972][ T7267] __vmalloc_noprof+0x83/0xc0 [ 930.312007][ T7267] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 930.312110][ T7267] bpf_prog_alloc_no_stats+0x47/0x390 [ 930.312149][ T7267] ? bpf_prog_alloc+0x2a/0x150 [ 930.312211][ T7267] bpf_prog_alloc+0x3c/0x150 [ 930.312249][ T7267] bpf_prog_load+0x514/0x1070 [ 930.312290][ T7267] ? security_bpf+0x2b/0x90 [ 930.312318][ T7267] __sys_bpf+0x51d/0x790 [ 930.312478][ T7267] __x64_sys_bpf+0x41/0x50 [ 930.312579][ T7267] x64_sys_call+0x2478/0x2fb0 [ 930.312600][ T7267] do_syscall_64+0xd2/0x200 [ 930.312675][ T7267] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 930.312708][ T7267] ? clear_bhb_loop+0x40/0x90 [ 930.312735][ T7267] ? clear_bhb_loop+0x40/0x90 [ 930.312762][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.312855][ T7267] RIP: 0033:0x7f5ed1fbe929 [ 930.312951][ T7267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.312978][ T7267] RSP: 002b:00007f5ed0627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 930.312997][ T7267] RAX: ffffffffffffffda RBX: 00007f5ed21e5fa0 RCX: 00007f5ed1fbe929 [ 930.313010][ T7267] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 930.313022][ T7267] RBP: 00007f5ed0627090 R08: 0000000000000000 R09: 0000000000000000 [ 930.313039][ T7267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.313055][ T7267] R13: 0000000000000000 R14: 00007f5ed21e5fa0 R15: 00007ffcac369288 [ 930.313144][ T7267] [ 930.313155][ T7267] syz.8.11910: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 930.576969][ T7267] CPU: 1 UID: 0 PID: 7267 Comm: syz.8.11910 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 930.577082][ T7267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 930.577098][ T7267] Call Trace: [ 930.577105][ T7267] [ 930.577114][ T7267] __dump_stack+0x1d/0x30 [ 930.577141][ T7267] dump_stack_lvl+0xe8/0x140 [ 930.577166][ T7267] dump_stack+0x15/0x1b [ 930.577185][ T7267] warn_alloc+0x12b/0x1a0 [ 930.577278][ T7267] __vmalloc_node_range_noprof+0x297/0xe00 [ 930.577320][ T7267] ? mntput_no_expire+0x6f/0x3c0 [ 930.577415][ T7267] ? __rcu_read_unlock+0x4f/0x70 [ 930.577448][ T7267] ? selinux_capable+0x1f9/0x270 [ 930.577575][ T7267] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 930.577644][ T7267] __vmalloc_noprof+0x83/0xc0 [ 930.577715][ T7267] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 930.577753][ T7267] bpf_prog_alloc_no_stats+0x47/0x390 [ 930.577847][ T7267] ? bpf_prog_alloc+0x2a/0x150 [ 930.577898][ T7267] bpf_prog_alloc+0x3c/0x150 [ 930.577932][ T7267] bpf_prog_load+0x514/0x1070 [ 930.578001][ T7267] ? security_bpf+0x2b/0x90 [ 930.578025][ T7267] __sys_bpf+0x51d/0x790 [ 930.578073][ T7267] __x64_sys_bpf+0x41/0x50 [ 930.578109][ T7267] x64_sys_call+0x2478/0x2fb0 [ 930.578161][ T7267] do_syscall_64+0xd2/0x200 [ 930.578178][ T7267] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 930.578208][ T7267] ? clear_bhb_loop+0x40/0x90 [ 930.578236][ T7267] ? clear_bhb_loop+0x40/0x90 [ 930.578331][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.578358][ T7267] RIP: 0033:0x7f5ed1fbe929 [ 930.578378][ T7267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.578400][ T7267] RSP: 002b:00007f5ed0627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 930.578462][ T7267] RAX: ffffffffffffffda RBX: 00007f5ed21e5fa0 RCX: 00007f5ed1fbe929 [ 930.578478][ T7267] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 930.578494][ T7267] RBP: 00007f5ed0627090 R08: 0000000000000000 R09: 0000000000000000 [ 930.578541][ T7267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.578553][ T7267] R13: 0000000000000000 R14: 00007f5ed21e5fa0 R15: 00007ffcac369288 [ 930.578571][ T7267] [ 930.578579][ T7267] Mem-Info: [ 930.802508][ T7267] active_anon:10323 inactive_anon:7 isolated_anon:0 [ 930.802508][ T7267] active_file:23148 inactive_file:2810 isolated_file:0 [ 930.802508][ T7267] unevictable:0 dirty:461 writeback:0 [ 930.802508][ T7267] slab_reclaimable:3460 slab_unreclaimable:22307 [ 930.802508][ T7267] mapped:30310 shmem:533 pagetables:977 [ 930.802508][ T7267] sec_pagetables:0 bounce:0 [ 930.802508][ T7267] kernel_misc_reclaimable:0 [ 930.802508][ T7267] free:1835598 free_pcp:12084 free_cma:0 [ 930.847585][ T7267] Node 0 active_anon:41640kB inactive_anon:28kB active_file:92592kB inactive_file:11240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121240kB dirty:1844kB writeback:0kB shmem:2132kB writeback_tmp:0kB kernel_stack:3840kB pagetables:3908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 930.876785][ T7267] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 930.905431][ T7267] lowmem_reserve[]: 0 2882 7860 7860 [ 930.910833][ T7267] Node 0 DMA32 free:2947728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3528kB free_cma:0kB [ 930.941251][ T7267] lowmem_reserve[]: 0 0 4978 4978 [ 930.946353][ T7267] Node 0 Normal free:4379304kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42568kB inactive_anon:28kB active_file:92592kB inactive_file:11240kB unevictable:0kB writepending:1844kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:43424kB local_pcp:33264kB free_cma:0kB [ 930.978701][ T7267] lowmem_reserve[]: 0 0 0 0 [ 930.983442][ T7267] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 930.996262][ T7267] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947728kB [ 931.012517][ T7267] Node 0 Normal: 190*4kB (UME) 3512*8kB (UME) 2919*16kB (UME) 1258*32kB (UME) 1029*64kB (UME) 880*128kB (UME) 691*256kB (UM) 413*512kB (UME) 246*1024kB (UME) 78*2048kB (UM) 802*4096kB (UM) = 4379304kB [ 931.032565][ T7267] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 931.041896][ T7267] 26443 total pagecache pages [ 931.046687][ T7267] 11 pages in swap cache [ 931.051154][ T7267] Free swap = 124952kB [ 931.055345][ T7267] Total swap = 124996kB [ 931.059582][ T7267] 2097051 pages RAM [ 931.063443][ T7267] 0 pages HighMem/MovableOnly [ 931.068142][ T7267] 80812 pages reserved [ 931.091444][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 931.091467][ T29] audit: type=1326 audit(1751285542.755:55693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.5.11904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442291e929 code=0x7ffc0000 [ 931.121285][ T29] audit: type=1326 audit(1751285542.755:55694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.5.11904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442291e929 code=0x7ffc0000 [ 931.144888][ T29] audit: type=1326 audit(1751285542.755:55695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.5.11904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f442291e929 code=0x7ffc0000 [ 931.168519][ T29] audit: type=1326 audit(1751285542.755:55696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.5.11904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442291e929 code=0x7ffc0000 [ 931.192261][ T29] audit: type=1326 audit(1751285542.755:55697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.5.11904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442291e929 code=0x7ffc0000 [ 931.215860][ T29] audit: type=1326 audit(1751285542.755:55698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.5.11904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f442291e929 code=0x7ffc0000 [ 931.239490][ T29] audit: type=1326 audit(1751285542.755:55699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.5.11904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442291e929 code=0x7ffc0000 [ 931.263316][ T29] audit: type=1326 audit(1751285542.755:55700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.5.11904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442291e929 code=0x7ffc0000 [ 931.287119][ T29] audit: type=1326 audit(1751285542.755:55701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.5.11904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f442291e929 code=0x7ffc0000 [ 931.310712][ T29] audit: type=1326 audit(1751285542.755:55702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.5.11904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442291e929 code=0x7ffc0000 [ 931.361285][ T7271] loop5: detected capacity change from 0 to 128 [ 931.370787][ T7271] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 931.378742][ T7271] FAT-fs (loop5): Filesystem has been set read-only [ 931.386421][ T7271] bio_check_eod: 9139 callbacks suppressed [ 931.386517][ T7271] syz.5.11912: attempt to access beyond end of device [ 931.386517][ T7271] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 931.407614][ T7271] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 931.415752][ T7271] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 931.424259][ T7271] syz.5.11912: attempt to access beyond end of device [ 931.424259][ T7271] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 931.438566][ T7271] syz.5.11912: attempt to access beyond end of device [ 931.438566][ T7271] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 931.452386][ T7271] syz.5.11912: attempt to access beyond end of device [ 931.452386][ T7271] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 931.472367][ T7271] syz.5.11912: attempt to access beyond end of device [ 931.472367][ T7271] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 931.486066][ T7271] syz.5.11912: attempt to access beyond end of device [ 931.486066][ T7271] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 931.507147][ T7271] syz.5.11912: attempt to access beyond end of device [ 931.507147][ T7271] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 931.523056][ T7271] syz.5.11912: attempt to access beyond end of device [ 931.523056][ T7271] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 931.547399][ T7271] syz.5.11912: attempt to access beyond end of device [ 931.547399][ T7271] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 931.561338][ T7271] syz.5.11912: attempt to access beyond end of device [ 931.561338][ T7271] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 931.780048][ T7288] xt_hashlimit: max too large, truncated to 1048576 [ 931.863793][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11919'. [ 931.872858][ T7295] tipc: Enabling of bearer rejected, failed to enable media [ 931.882440][ T7295] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11919'. [ 932.184307][ T7303] loop5: detected capacity change from 0 to 512 [ 932.192649][ T7303] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 932.201115][ T7303] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #13: comm syz.5.11922: iget: bad i_size value: 12154757448730 [ 932.214316][ T7303] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.11922: couldn't read orphan inode 13 (err -117) [ 932.227136][ T7303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 932.244926][ T7222] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.244981][ T7303] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 932.285929][ T1779] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.303242][ T7222] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.342417][ T7222] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.361152][ T7311] FAULT_INJECTION: forcing a failure. [ 932.361152][ T7311] name failslab, interval 1, probability 0, space 0, times 0 [ 932.373882][ T7311] CPU: 0 UID: 0 PID: 7311 Comm: wޣ Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 932.373930][ T7311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 932.373942][ T7311] Call Trace: [ 932.373948][ T7311] [ 932.373966][ T7311] __dump_stack+0x1d/0x30 [ 932.373985][ T7311] dump_stack_lvl+0xe8/0x140 [ 932.374003][ T7311] dump_stack+0x15/0x1b [ 932.374018][ T7311] should_fail_ex+0x265/0x280 [ 932.374122][ T7311] should_failslab+0x8c/0xb0 [ 932.374154][ T7311] kmem_cache_alloc_node_noprof+0x57/0x320 [ 932.374194][ T7311] ? __alloc_skb+0x101/0x320 [ 932.374234][ T7311] __alloc_skb+0x101/0x320 [ 932.374287][ T7311] netlink_alloc_large_skb+0xba/0xf0 [ 932.374320][ T7311] netlink_sendmsg+0x3cf/0x6b0 [ 932.374350][ T7311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 932.374430][ T7311] __sock_sendmsg+0x145/0x180 [ 932.374512][ T7311] ____sys_sendmsg+0x31e/0x4e0 [ 932.374546][ T7311] ___sys_sendmsg+0x17b/0x1d0 [ 932.374592][ T7311] __x64_sys_sendmsg+0xd4/0x160 [ 932.374628][ T7311] x64_sys_call+0x2999/0x2fb0 [ 932.374712][ T7311] do_syscall_64+0xd2/0x200 [ 932.374727][ T7311] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 932.374751][ T7311] ? clear_bhb_loop+0x40/0x90 [ 932.374770][ T7311] ? clear_bhb_loop+0x40/0x90 [ 932.374790][ T7311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.374835][ T7311] RIP: 0033:0x7f442291e929 [ 932.374848][ T7311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 932.374863][ T7311] RSP: 002b:00007f4420f87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.374880][ T7311] RAX: ffffffffffffffda RBX: 00007f4422b45fa0 RCX: 00007f442291e929 [ 932.374954][ T7311] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 932.374970][ T7311] RBP: 00007f4420f87090 R08: 0000000000000000 R09: 0000000000000000 [ 932.374985][ T7311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.375001][ T7311] R13: 0000000000000000 R14: 00007f4422b45fa0 R15: 00007ffe5c9a2b58 [ 932.375068][ T7311] [ 932.590533][ T7222] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.602028][ T7222] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.615803][ T7222] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.627928][ T7222] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.680075][ T7317] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.11928' sets config #0 [ 932.680233][ T7315] SELinux: failed to load policy [ 932.763082][ T7330] loop9: detected capacity change from 0 to 512 [ 932.776168][ T7328] bond1: entered promiscuous mode [ 932.779681][ T7330] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -13 [ 932.781209][ T7328] bond1: entered allmulticast mode [ 932.794652][ T7328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 932.797655][ T7330] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #13: comm syz.9.11933: iget: bad i_size value: 12154757448730 [ 932.815995][ T7328] bond1 (unregistering): Released all slaves [ 932.829196][ T7330] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.11933: couldn't read orphan inode 13 (err -117) [ 932.846515][ T7330] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 932.917493][ T6161] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.965070][ T7345] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11937'. [ 932.974275][ T7345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11937'. [ 932.983379][ T7345] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11937'. [ 932.998248][ T7353] loop5: detected capacity change from 0 to 512 [ 933.004257][ T7345] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11937'. [ 933.021644][ T7355] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11943'. [ 933.030771][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11943'. [ 933.039926][ T7355] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11943'. [ 933.051858][ T7355] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11943'. [ 933.115087][ T7353] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.127877][ T7353] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 933.148117][ T7353] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.11942: corrupted inode contents [ 933.166377][ T7353] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.11942: mark_inode_dirty error [ 933.179016][ T7353] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.11942: corrupted inode contents [ 933.197308][ T7368] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.11942: corrupted inode contents [ 933.218542][ T7368] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.11942: mark_inode_dirty error [ 933.221196][ T7370] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 933.238843][ T7368] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.11942: corrupted inode contents [ 933.239437][ T7367] xt_hashlimit: max too large, truncated to 1048576 [ 933.252291][ T7368] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.11942: mark_inode_dirty error [ 933.269359][ T7368] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.11942: corrupted inode contents [ 933.282234][ T7368] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.11942: mark_inode_dirty error [ 933.305889][ T7353] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.11942: corrupted inode contents [ 933.390404][ T7375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.404224][ T5524] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.423338][ T7391] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.456029][ T5524] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.466144][ T7394] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7394 comm=syz.9.11960 [ 933.480821][ T7391] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.521309][ T5524] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.555585][ T7391] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.573666][ T5524] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.593530][ T7404] bond0: entered promiscuous mode [ 933.598621][ T7404] bond0: entered allmulticast mode [ 933.603898][ T7404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.613930][ T7404] bond0 (unregistering): Released all slaves [ 933.623879][ T7391] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.706967][ T5524] dvmrp1 (unregistering): left allmulticast mode [ 933.715246][ T5524] bond2 (unregistering): (slave geneve2): Releasing active interface [ 933.788610][ T5524] bond0 (unregistering): Released all slaves [ 933.799168][ T5524] bond1 (unregistering): Released all slaves [ 933.808516][ T5524] bond2 (unregistering): Released all slaves [ 933.818617][ T5524] bond3 (unregistering): (slave batadv0): Releasing backup interface [ 933.827957][ T5524] bond3 (unregistering): Released all slaves [ 933.882472][ T7395] chnl_net:caif_netlink_parms(): no params data found [ 933.889603][ T7415] FAULT_INJECTION: forcing a failure. [ 933.889603][ T7415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.902783][ T7415] CPU: 1 UID: 0 PID: 7415 Comm: syz.1.11963 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 933.902884][ T7415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 933.902902][ T7415] Call Trace: [ 933.902909][ T7415] [ 933.902919][ T7415] __dump_stack+0x1d/0x30 [ 933.902955][ T7415] dump_stack_lvl+0xe8/0x140 [ 933.903025][ T7415] dump_stack+0x15/0x1b [ 933.903047][ T7415] should_fail_ex+0x265/0x280 [ 933.903088][ T7415] should_fail+0xb/0x20 [ 933.903201][ T7415] should_fail_usercopy+0x1a/0x20 [ 933.903241][ T7415] _copy_from_user+0x1c/0xb0 [ 933.903262][ T7415] ___sys_recvmsg+0xaa/0x370 [ 933.903304][ T7415] do_recvmmsg+0x1ef/0x540 [ 933.903329][ T7415] ? fput+0x8f/0xc0 [ 933.903360][ T7415] __x64_sys_recvmmsg+0xe5/0x170 [ 933.903408][ T7415] x64_sys_call+0x1c6a/0x2fb0 [ 933.903475][ T7415] do_syscall_64+0xd2/0x200 [ 933.903497][ T7415] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 933.903528][ T7415] ? clear_bhb_loop+0x40/0x90 [ 933.903605][ T7415] ? clear_bhb_loop+0x40/0x90 [ 933.903635][ T7415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.903680][ T7415] RIP: 0033:0x7fef01c0e929 [ 933.903762][ T7415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 933.903817][ T7415] RSP: 002b:00007fef00256038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 933.903913][ T7415] RAX: ffffffffffffffda RBX: 00007fef01e36080 RCX: 00007fef01c0e929 [ 933.903935][ T7415] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000003 [ 933.903952][ T7415] RBP: 00007fef00256090 R08: 0000000000000000 R09: 0000000000000000 [ 933.903968][ T7415] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 933.903985][ T7415] R13: 0000000000000001 R14: 00007fef01e36080 R15: 00007ffda0565b08 [ 933.904080][ T7415] [ 934.116013][ T5524] hsr_slave_0: left promiscuous mode [ 934.122125][ T5524] hsr_slave_1: left promiscuous mode [ 934.132088][ T5524] veth1_macvtap: left promiscuous mode [ 934.137574][ T5524] veth0_macvtap: left promiscuous mode [ 934.144056][ T5524] veth1_vlan: left promiscuous mode [ 934.191087][ T5524] team0 (unregistering): Port device vlan0 removed [ 934.241988][ T7395] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.249199][ T7395] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.257137][ T7395] bridge_slave_0: entered allmulticast mode [ 934.264683][ T7395] bridge_slave_0: entered promiscuous mode [ 934.271438][ T7395] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.278629][ T7395] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.285805][ T7395] bridge_slave_1: entered allmulticast mode [ 934.292260][ T7395] bridge_slave_1: entered promiscuous mode [ 934.308684][ T7395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.319429][ T7395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.339757][ T7395] team0: Port device team_slave_0 added [ 934.346381][ T7395] team0: Port device team_slave_1 added [ 934.362242][ T7395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.369292][ T7395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.395334][ T7395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.406475][ T7395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.413482][ T7395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.439500][ T7395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.466481][ T7395] hsr_slave_0: entered promiscuous mode [ 934.472416][ T7395] hsr_slave_1: entered promiscuous mode [ 934.478502][ T7395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 934.486139][ T7395] Cannot create hsr debugfs directory [ 934.810209][ T7447] loop9: detected capacity change from 0 to 128 [ 934.825590][ T7447] EXT4-fs: test_dummy_encryption option not supported [ 934.849261][ T7395] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 934.859402][ T7395] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 934.872614][ T7447] xt_hashlimit: max too large, truncated to 1048576 [ 934.876411][ T7395] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 934.905657][ T7395] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 935.022826][ T7395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.050205][ T7395] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.079889][ T5524] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.087076][ T5524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.128788][ T5524] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.135928][ T5524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.210461][ T7395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 935.334041][ T7395] veth0_vlan: entered promiscuous mode [ 935.343442][ T7395] veth1_vlan: entered promiscuous mode [ 935.362065][ T7395] veth0_macvtap: entered promiscuous mode [ 935.369394][ T7395] veth1_macvtap: entered promiscuous mode [ 935.382570][ T7395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 935.397324][ T7395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.404820][ T7485] tipc: Enabled bearer , priority 0 [ 935.414182][ T7395] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.422951][ T7395] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.431743][ T7395] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.440584][ T7395] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.454017][ T7484] tipc: Disabling bearer [ 935.558339][ T7494] SELinux: failed to load policy [ 935.638223][ T7503] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 935.644850][ T7503] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 935.652440][ T7503] vhci_hcd vhci_hcd.0: Device attached [ 935.712339][ T7514] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 935.718926][ T7514] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 935.726496][ T7514] vhci_hcd vhci_hcd.0: Device attached [ 935.802102][ T7505] vhci_hcd: connection closed [ 935.802515][ T5524] vhci_hcd: stop threads [ 935.811603][ T5524] vhci_hcd: release socket [ 935.816066][ T5524] vhci_hcd: disconnect device [ 935.827651][ T2649] vhci_hcd: vhci_device speed not set [ 935.863565][ T7515] vhci_hcd: connection closed [ 935.863815][ T5524] vhci_hcd: stop threads [ 935.872816][ T5524] vhci_hcd: release socket [ 935.877283][ T5524] vhci_hcd: disconnect device [ 935.913733][ T2668] vhci_hcd: vhci_device speed not set [ 936.292887][ T7525] xt_hashlimit: max too large, truncated to 1048576 [ 936.630646][ T29] kauditd_printk_skb: 446 callbacks suppressed [ 936.630699][ T29] audit: type=1326 audit(1751285548.585:56149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.3.12009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb781e929 code=0x7ffc0000 [ 936.688873][ T29] audit: type=1326 audit(1751285548.616:56150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.3.12009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4eb781e929 code=0x7ffc0000 [ 936.712638][ T29] audit: type=1326 audit(1751285548.616:56151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.3.12009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb781e929 code=0x7ffc0000 [ 936.731747][ T7552] __nla_validate_parse: 4 callbacks suppressed [ 936.731820][ T7552] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12010'. [ 936.736349][ T29] audit: type=1326 audit(1751285548.616:56152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.3.12009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f4eb781e929 code=0x7ffc0000 [ 936.775181][ T29] audit: type=1326 audit(1751285548.616:56153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.3.12009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb781e929 code=0x7ffc0000 [ 936.798989][ T29] audit: type=1326 audit(1751285548.616:56154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.3.12009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4eb781e929 code=0x7ffc0000 [ 936.822605][ T29] audit: type=1326 audit(1751285548.616:56155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.3.12009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb781e929 code=0x7ffc0000 [ 936.846208][ T29] audit: type=1326 audit(1751285548.616:56156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.3.12009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4eb781e929 code=0x7ffc0000 [ 936.869840][ T29] audit: type=1326 audit(1751285548.616:56157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.3.12009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb781e929 code=0x7ffc0000 [ 936.878633][ T7555] loop3: detected capacity change from 0 to 512 [ 936.893442][ T29] audit: type=1326 audit(1751285548.616:56158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.3.12009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4eb781e929 code=0x7ffc0000 [ 936.982621][ T7555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.995752][ T7555] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 937.033130][ T7555] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.12011: corrupted inode contents [ 937.035472][ T7391] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.055166][ T7555] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.12011: mark_inode_dirty error [ 937.068268][ T7555] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.12011: corrupted inode contents [ 937.075768][ T7391] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.092935][ T7391] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.105539][ T7391] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.127136][ T7570] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.12011: corrupted inode contents [ 937.177427][ T7570] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.12011: mark_inode_dirty error [ 937.216314][ T7570] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.12011: corrupted inode contents [ 937.236514][ T7570] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.12011: mark_inode_dirty error [ 937.273626][ T7570] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.12011: corrupted inode contents [ 937.296669][ T7570] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.12011: mark_inode_dirty error [ 937.327232][ T7589] bond1: entered promiscuous mode [ 937.332338][ T7589] bond1: entered allmulticast mode [ 937.354766][ T7589] 8021q: adding VLAN 0 to HW filter on device bond1 [ 937.364547][ T7395] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.388111][ T7589] bond1 (unregistering): Released all slaves [ 937.442895][ T7606] loop9: detected capacity change from 0 to 128 [ 937.453021][ T7606] EXT4-fs: Ignoring removed nobh option [ 937.486690][ T7606] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 937.503686][ T7612] loop3: detected capacity change from 0 to 512 [ 937.506535][ T7606] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 937.521158][ T7614] FAULT_INJECTION: forcing a failure. [ 937.521158][ T7614] name failslab, interval 1, probability 0, space 0, times 0 [ 937.527060][ T7615] 9pnet: p9_errstr2errno: server reported unknown error pA; [ 937.533893][ T7614] CPU: 1 UID: 0 PID: 7614 Comm: syz.8.12034 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 937.533932][ T7614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 937.533973][ T7614] Call Trace: [ 937.533982][ T7614] [ 937.533992][ T7614] __dump_stack+0x1d/0x30 [ 937.534022][ T7614] dump_stack_lvl+0xe8/0x140 [ 937.534117][ T7614] dump_stack+0x15/0x1b [ 937.534141][ T7614] should_fail_ex+0x265/0x280 [ 937.534189][ T7614] should_failslab+0x8c/0xb0 [ 937.534222][ T7614] kmem_cache_alloc_noprof+0x50/0x310 [ 937.534324][ T7614] ? security_file_alloc+0x32/0x100 [ 937.534356][ T7614] security_file_alloc+0x32/0x100 [ 937.534383][ T7614] init_file+0x5c/0x1d0 [ 937.534418][ T7614] alloc_empty_file+0x8b/0x200 [ 937.534515][ T7614] path_openat+0x68/0x2170 [ 937.534558][ T7614] ? _parse_integer_limit+0x170/0x190 [ 937.534602][ T7614] ? kstrtoull+0x111/0x140 [ 937.534652][ T7614] ? kstrtouint+0x76/0xc0 [ 937.534723][ T7614] do_filp_open+0x109/0x230 [ 937.534775][ T7614] do_sys_openat2+0xa6/0x110 [ 937.534813][ T7614] __x64_sys_openat+0xf2/0x120 [ 937.534916][ T7614] x64_sys_call+0x1af/0x2fb0 [ 937.534947][ T7614] do_syscall_64+0xd2/0x200 [ 937.534973][ T7614] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 937.535035][ T7614] ? clear_bhb_loop+0x40/0x90 [ 937.535066][ T7614] ? clear_bhb_loop+0x40/0x90 [ 937.535097][ T7614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.535197][ T7614] RIP: 0033:0x7f5ed1fbe929 [ 937.535378][ T7614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.535402][ T7614] RSP: 002b:00007f5ed0627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 937.535428][ T7614] RAX: ffffffffffffffda RBX: 00007f5ed21e5fa0 RCX: 00007f5ed1fbe929 [ 937.535451][ T7614] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 937.535469][ T7614] RBP: 00007f5ed0627090 R08: 0000000000000000 R09: 0000000000000000 [ 937.535485][ T7614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.535502][ T7614] R13: 0000000000000000 R14: 00007f5ed21e5fa0 R15: 00007ffcac369288 [ 937.535527][ T7614] [ 937.568158][ T7612] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.12033: casefold flag without casefold feature [ 937.757398][ T7630] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 937.775948][ T7630] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 937.783669][ T7630] vhci_hcd vhci_hcd.0: Device attached [ 937.784377][ T7612] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.12033: couldn't read orphan inode 15 (err -117) [ 937.791736][ T6161] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 937.803560][ T7612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 937.818176][ T7631] vhci_hcd: connection closed [ 937.832319][T21042] vhci_hcd: stop threads [ 937.841301][T21042] vhci_hcd: release socket [ 937.845727][T21042] vhci_hcd: disconnect device [ 937.928717][ T7395] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.982478][ T7651] loop9: detected capacity change from 0 to 512 [ 937.993549][ T7651] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 938.041427][ T6161] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 938.070980][ T7663] loop9: detected capacity change from 0 to 512 [ 938.083258][ T7666] netlink: 'syz.8.12053': attribute type 13 has an invalid length. [ 938.094313][ T7666] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 938.103967][ T7663] EXT4-fs error (device loop9): ext4_xattr_inode_iget:433: comm syz.9.12052: Parent and EA inode have the same ino 15 [ 938.104839][ T7666] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 938.123925][ T7663] EXT4-fs error (device loop9): ext4_xattr_inode_iget:433: comm syz.9.12052: Parent and EA inode have the same ino 15 [ 938.124835][ T7666] gretap1: entered promiscuous mode [ 938.141990][ T7666] gretap1: entered allmulticast mode [ 938.151907][ T7663] EXT4-fs (loop9): 1 orphan inode deleted [ 938.157926][ T7669] loop3: detected capacity change from 0 to 512 [ 938.163954][ T7663] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 938.177274][ T7669] EXT4-fs (loop3): orphan cleanup on readonly fs [ 938.185531][ T7669] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.12054: bg 0: block 248: padding at end of block bitmap is not set [ 938.200420][ T7669] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.12054: Failed to acquire dquot type 1 [ 938.213501][ T7669] EXT4-fs (loop3): 1 truncate cleaned up [ 938.219992][ T7669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 938.233670][ T7669] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.319635][ T6161] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.561232][ T7701] SELinux: failed to load policy [ 938.613265][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12067'. [ 938.643575][ T7708] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 938.650231][ T7708] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 938.657807][ T7708] vhci_hcd vhci_hcd.0: Device attached [ 938.667654][ T7708] loop3: detected capacity change from 0 to 164 [ 938.676462][ T7708] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 938.688507][ T7709] vhci_hcd: connection closed [ 938.689145][T21040] vhci_hcd: stop threads [ 938.698205][T21040] vhci_hcd: release socket [ 938.702708][T21040] vhci_hcd: disconnect device [ 938.799842][ T7715] loop9: detected capacity change from 0 to 512 [ 938.814954][ T7715] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.828735][ T7715] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 938.840483][ T7715] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.12072: corrupted inode contents [ 938.854776][ T7715] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #2: comm syz.9.12072: mark_inode_dirty error [ 938.866639][ T7715] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.12072: corrupted inode contents [ 938.881517][ T7715] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.12072: corrupted inode contents [ 938.894598][ T7715] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #2: comm syz.9.12072: mark_inode_dirty error [ 938.907094][ T7715] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.12072: corrupted inode contents [ 938.920656][ T7715] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.12072: mark_inode_dirty error [ 938.932494][ T7715] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.12072: corrupted inode contents [ 938.946287][ T7715] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #2: comm syz.9.12072: mark_inode_dirty error [ 938.977428][ T7715] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.12072: corrupted inode contents [ 939.046334][ T6161] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.290517][ T7734] hub 1-0:1.0: USB hub found [ 939.305077][ T7734] hub 1-0:1.0: 8 ports detected [ 939.456804][ T7748] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12082'. [ 939.537172][ T7751] loop3: detected capacity change from 0 to 512 [ 939.555606][ T7753] loop9: detected capacity change from 0 to 512 [ 939.609425][ T7753] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 939.610293][ T7751] EXT4-fs (loop3): 1 orphan inode deleted [ 939.622213][ T7753] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 939.638622][ T5524] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 939.662098][ T7751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 939.682284][ T7753] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.12084: corrupted inode contents [ 939.695604][ T7753] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #2: comm syz.9.12084: mark_inode_dirty error [ 939.713619][ T7751] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 939.729786][ T7753] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.12084: corrupted inode contents [ 939.752043][ T7760] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.12084: corrupted inode contents [ 939.886139][ T7760] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #2: comm syz.9.12084: mark_inode_dirty error [ 939.898811][ T7760] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.12084: corrupted inode contents [ 939.915337][ T7760] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.12084: mark_inode_dirty error [ 939.928195][ T7760] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.12084: corrupted inode contents [ 939.941782][ T7760] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #2: comm syz.9.12084: mark_inode_dirty error [ 939.982999][ T7765] FAULT_INJECTION: forcing a failure. [ 939.982999][ T7765] name failslab, interval 1, probability 0, space 0, times 0 [ 939.995702][ T7765] CPU: 0 UID: 0 PID: 7765 Comm: syz.1.12086 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 939.995734][ T7765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 939.995749][ T7765] Call Trace: [ 939.995756][ T7765] [ 939.995764][ T7765] __dump_stack+0x1d/0x30 [ 939.995854][ T7765] dump_stack_lvl+0xe8/0x140 [ 939.995879][ T7765] dump_stack+0x15/0x1b [ 939.995900][ T7765] should_fail_ex+0x265/0x280 [ 939.995958][ T7765] ? __hw_addr_add_ex+0x162/0x440 [ 939.996020][ T7765] should_failslab+0x8c/0xb0 [ 939.996048][ T7765] __kmalloc_cache_noprof+0x4c/0x320 [ 939.996118][ T7765] __hw_addr_add_ex+0x162/0x440 [ 939.996154][ T7765] dev_addr_init+0xb1/0x120 [ 939.996214][ T7765] alloc_netdev_mqs+0x212/0xab0 [ 939.996312][ T7765] ? __pfx_batadv_meshif_init_early+0x10/0x10 [ 939.996420][ T7765] rtnl_create_link+0x239/0x710 [ 939.996462][ T7765] rtnl_newlink_create+0x14c/0x620 [ 939.996511][ T7765] ? security_capable+0x83/0x90 [ 939.996549][ T7765] ? netlink_ns_capable+0x86/0xa0 [ 939.996611][ T7765] rtnl_newlink+0xf29/0x12d0 [ 939.996647][ T7765] ? bpf_trace_run3+0x12c/0x1d0 [ 939.996745][ T7765] ? __kfree_skb+0x109/0x150 [ 939.996772][ T7765] ? xa_load+0xb1/0xe0 [ 939.996791][ T7765] ? __kfree_skb+0x109/0x150 [ 939.996819][ T7765] ? __rcu_read_unlock+0x4f/0x70 [ 939.996918][ T7765] ? avc_has_perm_noaudit+0x1b1/0x200 [ 939.996950][ T7765] ? selinux_capable+0x1f9/0x270 [ 939.996990][ T7765] ? security_capable+0x83/0x90 [ 939.997066][ T7765] ? ns_capable+0x7d/0xb0 [ 939.997088][ T7765] ? __pfx_rtnl_newlink+0x10/0x10 [ 939.997115][ T7765] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 939.997168][ T7765] netlink_rcv_skb+0x120/0x220 [ 939.997280][ T7765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 939.997313][ T7765] rtnetlink_rcv+0x1c/0x30 [ 939.997331][ T7765] netlink_unicast+0x59e/0x670 [ 939.997360][ T7765] netlink_sendmsg+0x58b/0x6b0 [ 939.997378][ T7765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.997433][ T7765] __sock_sendmsg+0x145/0x180 [ 939.997462][ T7765] ____sys_sendmsg+0x31e/0x4e0 [ 939.997574][ T7765] ___sys_sendmsg+0x17b/0x1d0 [ 939.997629][ T7765] __x64_sys_sendmsg+0xd4/0x160 [ 939.997673][ T7765] x64_sys_call+0x2999/0x2fb0 [ 939.997743][ T7765] do_syscall_64+0xd2/0x200 [ 939.997759][ T7765] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 939.997788][ T7765] ? clear_bhb_loop+0x40/0x90 [ 939.997812][ T7765] ? clear_bhb_loop+0x40/0x90 [ 939.997947][ T7765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.998034][ T7765] RIP: 0033:0x7fef01c0e929 [ 939.998051][ T7765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 939.998112][ T7765] RSP: 002b:00007fef00277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.998163][ T7765] RAX: ffffffffffffffda RBX: 00007fef01e35fa0 RCX: 00007fef01c0e929 [ 939.998179][ T7765] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 939.998195][ T7765] RBP: 00007fef00277090 R08: 0000000000000000 R09: 0000000000000000 [ 939.998209][ T7765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.998224][ T7765] R13: 0000000000000000 R14: 00007fef01e35fa0 R15: 00007ffda0565b08 [ 939.998244][ T7765] [ 940.001447][ T6161] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.368805][ T7768] 9pnet_fd: Insufficient options for proto=fd [ 940.420645][ T7772] FAULT_INJECTION: forcing a failure. [ 940.420645][ T7772] name failslab, interval 1, probability 0, space 0, times 0 [ 940.433336][ T7772] CPU: 1 UID: 0 PID: 7772 Comm: syz.8.12088 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 940.433437][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 940.433454][ T7772] Call Trace: [ 940.433463][ T7772] [ 940.433472][ T7772] __dump_stack+0x1d/0x30 [ 940.433500][ T7772] dump_stack_lvl+0xe8/0x140 [ 940.433528][ T7772] dump_stack+0x15/0x1b [ 940.433618][ T7772] should_fail_ex+0x265/0x280 [ 940.433661][ T7772] should_failslab+0x8c/0xb0 [ 940.433692][ T7772] __kmalloc_noprof+0xa5/0x3e0 [ 940.433783][ T7772] ? security_inode_init_security+0xc5/0x330 [ 940.433827][ T7772] ? current_umask+0x2f/0x40 [ 940.433939][ T7772] security_inode_init_security+0xc5/0x330 [ 940.433978][ T7772] ? __pfx_shmem_initxattrs+0x10/0x10 [ 940.434156][ T7772] shmem_mknod+0xad/0x180 [ 940.434180][ T7772] shmem_create+0x34/0x50 [ 940.434207][ T7772] ? __pfx_shmem_create+0x10/0x10 [ 940.434241][ T7772] path_openat+0x1102/0x2170 [ 940.434289][ T7772] do_filp_open+0x109/0x230 [ 940.434422][ T7772] do_sys_openat2+0xa6/0x110 [ 940.434461][ T7772] __x64_sys_openat+0xf2/0x120 [ 940.434575][ T7772] x64_sys_call+0x1af/0x2fb0 [ 940.434605][ T7772] do_syscall_64+0xd2/0x200 [ 940.434629][ T7772] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 940.434720][ T7772] ? clear_bhb_loop+0x40/0x90 [ 940.434748][ T7772] ? clear_bhb_loop+0x40/0x90 [ 940.434779][ T7772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.434926][ T7772] RIP: 0033:0x7f5ed1fbe929 [ 940.434946][ T7772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.434971][ T7772] RSP: 002b:00007f5ed0627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 940.434996][ T7772] RAX: ffffffffffffffda RBX: 00007f5ed21e5fa0 RCX: 00007f5ed1fbe929 [ 940.435010][ T7772] RDX: 000000000000275a RSI: 0000200000000280 RDI: ffffffffffffff9c [ 940.435023][ T7772] RBP: 00007f5ed0627090 R08: 0000000000000000 R09: 0000000000000000 [ 940.435040][ T7772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.435059][ T7772] R13: 0000000000000000 R14: 00007f5ed21e5fa0 R15: 00007ffcac369288 [ 940.435085][ T7772] [ 940.677474][ T7395] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.711992][ T7782] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12091'. [ 940.770929][ T7782] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 940.790035][ T7791] bond1: entered promiscuous mode [ 940.795100][ T7791] bond1: entered allmulticast mode [ 940.803851][ T7791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 940.823567][ T7791] bond1 (unregistering): Released all slaves [ 940.853954][ T7799] lo speed is unknown, defaulting to 1000 [ 940.860063][ T7799] lo speed is unknown, defaulting to 1000 [ 940.868745][ T7799] lo speed is unknown, defaulting to 1000 [ 940.876232][ T7799] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 940.887657][ T7801] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.12099' sets config #1 [ 940.892528][ T7799] lo speed is unknown, defaulting to 1000 [ 940.912025][ T7799] lo speed is unknown, defaulting to 1000 [ 940.918853][ T7799] lo speed is unknown, defaulting to 1000 [ 940.925959][ T7799] lo speed is unknown, defaulting to 1000 [ 940.935274][ T7803] bond1: entered promiscuous mode [ 940.940367][ T7803] bond1: entered allmulticast mode [ 940.947110][ T7803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 940.959835][ T7803] bond1 (unregistering): Released all slaves [ 940.973756][ T7799] lo speed is unknown, defaulting to 1000 [ 940.981702][ T7799] lo speed is unknown, defaulting to 1000 [ 940.987990][ T7799] lo speed is unknown, defaulting to 1000 [ 941.066303][ T7805] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 941.072959][ T7805] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 941.081809][ T7805] vhci_hcd vhci_hcd.0: Device attached [ 941.092018][ T7805] vhci_hcd vhci_hcd.0: port 0 already used [ 941.127174][ T7820] 9pnet_fd: Insufficient options for proto=fd [ 941.170203][ T7809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 941.300460][ T7834] FAULT_INJECTION: forcing a failure. [ 941.300460][ T7834] name failslab, interval 1, probability 0, space 0, times 0 [ 941.313369][ T7834] CPU: 1 UID: 0 PID: 7834 Comm: syz.0.12108 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 941.313398][ T7834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 941.313412][ T7834] Call Trace: [ 941.313419][ T7834] [ 941.313427][ T7834] __dump_stack+0x1d/0x30 [ 941.313587][ T7834] dump_stack_lvl+0xe8/0x140 [ 941.313613][ T7834] dump_stack+0x15/0x1b [ 941.313692][ T7834] should_fail_ex+0x265/0x280 [ 941.313785][ T7834] should_failslab+0x8c/0xb0 [ 941.313848][ T7834] kmem_cache_alloc_noprof+0x50/0x310 [ 941.313878][ T7834] ? getname_flags+0x80/0x3b0 [ 941.313926][ T7834] getname_flags+0x80/0x3b0 [ 941.313956][ T7834] user_path_at+0x28/0x130 [ 941.313991][ T7834] do_fchmodat+0x9c/0x180 [ 941.314048][ T7834] __x64_sys_chmod+0x38/0x50 [ 941.314076][ T7834] x64_sys_call+0x1529/0x2fb0 [ 941.314104][ T7834] do_syscall_64+0xd2/0x200 [ 941.314128][ T7834] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 941.314164][ T7834] ? clear_bhb_loop+0x40/0x90 [ 941.314215][ T7834] ? clear_bhb_loop+0x40/0x90 [ 941.314245][ T7834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.314275][ T7834] RIP: 0033:0x7f111f04e929 [ 941.314295][ T7834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 941.314315][ T7834] RSP: 002b:00007f111d6b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 941.314434][ T7834] RAX: ffffffffffffffda RBX: 00007f111f275fa0 RCX: 00007f111f04e929 [ 941.314452][ T7834] RDX: 0000000000000000 RSI: 0000000000000060 RDI: 00002000000001c0 [ 941.314475][ T7834] RBP: 00007f111d6b7090 R08: 0000000000000000 R09: 0000000000000000 [ 941.314492][ T7834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.314505][ T7834] R13: 0000000000000000 R14: 00007f111f275fa0 R15: 00007fff64bdacb8 [ 941.314531][ T7834] [ 941.535372][ T7838] vlan2: entered promiscuous mode [ 941.540538][ T7838] vlan2: entered allmulticast mode [ 941.545691][ T7838] hsr_slave_1: entered allmulticast mode [ 941.579423][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12110'. [ 941.600097][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 941.600113][ T29] audit: type=1326 audit(1751285553.786:56453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.0.12111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111f04e929 code=0x7ffc0000 [ 941.661302][ T29] audit: type=1326 audit(1751285553.828:56454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.0.12111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f111f04e929 code=0x7ffc0000 [ 941.685012][ T29] audit: type=1326 audit(1751285553.828:56455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.0.12111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111f04e929 code=0x7ffc0000 [ 941.708725][ T29] audit: type=1326 audit(1751285553.828:56456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.0.12111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f111f04e929 code=0x7ffc0000 [ 941.732543][ T29] audit: type=1326 audit(1751285553.828:56457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.0.12111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111f04e929 code=0x7ffc0000 [ 941.756351][ T29] audit: type=1326 audit(1751285553.828:56458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.0.12111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f111f04e929 code=0x7ffc0000 [ 941.779985][ T29] audit: type=1326 audit(1751285553.828:56459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.0.12111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111f04e929 code=0x7ffc0000 [ 941.803639][ T29] audit: type=1326 audit(1751285553.828:56460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.0.12111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f111f04e929 code=0x7ffc0000 [ 941.827309][ T29] audit: type=1326 audit(1751285553.828:56461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.0.12111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111f04e929 code=0x7ffc0000 [ 941.851043][ T29] audit: type=1326 audit(1751285553.828:56462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.0.12111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f111f04e929 code=0x7ffc0000 [ 941.900105][ T7846] bond1: entered promiscuous mode [ 941.905326][ T7846] bond1: entered allmulticast mode [ 941.911952][ T7846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 941.933514][ T7854] 9pnet_fd: Insufficient options for proto=fd [ 941.943315][ T7846] bond1 (unregistering): Released all slaves [ 942.042940][ T7856] Falling back ldisc for ttyS3. [ 942.245869][ T7812] vhci_hcd: connection closed [ 942.257471][ T5524] vhci_hcd: stop threads [ 942.266610][ T5524] vhci_hcd: release socket [ 942.271109][ T5524] vhci_hcd: disconnect device [ 942.391000][ T7875] SELinux: failed to load policy [ 942.779432][ T7888] bond1: entered promiscuous mode [ 942.784536][ T7888] bond1: entered allmulticast mode [ 942.809783][ T7888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 942.864648][ T7893] FAULT_INJECTION: forcing a failure. [ 942.864648][ T7893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 942.878065][ T7893] CPU: 0 UID: 0 PID: 7893 Comm: syz.3.12129 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 942.878176][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 942.878198][ T7893] Call Trace: [ 942.878204][ T7893] [ 942.878214][ T7893] __dump_stack+0x1d/0x30 [ 942.878236][ T7893] dump_stack_lvl+0xe8/0x140 [ 942.878271][ T7893] dump_stack+0x15/0x1b [ 942.878293][ T7893] should_fail_ex+0x265/0x280 [ 942.878333][ T7893] should_fail_alloc_page+0xf2/0x100 [ 942.878415][ T7893] __alloc_frozen_pages_noprof+0xff/0x360 [ 942.878512][ T7893] alloc_pages_mpol+0xb3/0x250 [ 942.878610][ T7893] alloc_pages_noprof+0x90/0x130 [ 942.878643][ T7893] pte_alloc_one+0x2d/0x120 [ 942.878672][ T7893] __do_fault+0x7b/0x200 [ 942.878721][ T7893] handle_mm_fault+0xd69/0x2be0 [ 942.878789][ T7893] ? __rcu_read_unlock+0x4f/0x70 [ 942.878831][ T7893] do_user_addr_fault+0x3fe/0x1090 [ 942.878881][ T7893] exc_page_fault+0x62/0xa0 [ 942.878916][ T7893] asm_exc_page_fault+0x26/0x30 [ 942.878950][ T7893] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 942.878985][ T7893] Code: e9 84 f1 01 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d f1 01 00 66 2e 0f 1f [ 942.879008][ T7893] RSP: 0018:ffffc900025a7da8 EFLAGS: 00050202 [ 942.879080][ T7893] RAX: ffff88811631ece9 RBX: 0000000000000002 RCX: 0000000000000002 [ 942.879097][ T7893] RDX: 0000000000000000 RSI: ffffffff8585edd0 RDI: 0000200000001300 [ 942.879114][ T7893] RBP: ffffc900025a7ec8 R08: 0000000000000b71 R09: 0000000000000000 [ 942.879203][ T7893] R10: 0001ffff8585edd0 R11: 0001ffff8585edd1 R12: 0000200000001302 [ 942.879219][ T7893] R13: 00007ffffffff000 R14: 0000200000001300 R15: ffffffff8585edd0 [ 942.879245][ T7893] _copy_to_user+0x7c/0xa0 [ 942.879272][ T7893] __se_sys_keyctl+0x3e8/0xb80 [ 942.879300][ T7893] ? save_fpregs_to_fpstate+0x100/0x160 [ 942.879329][ T7893] ? _raw_spin_unlock+0x26/0x50 [ 942.879432][ T7893] ? finish_task_switch+0xad/0x2b0 [ 942.879452][ T7893] ? xfd_validate_state+0x45/0xf0 [ 942.879513][ T7893] __x64_sys_keyctl+0x67/0x80 [ 942.879550][ T7893] x64_sys_call+0x2e7f/0x2fb0 [ 942.879578][ T7893] do_syscall_64+0xd2/0x200 [ 942.879600][ T7893] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 942.879681][ T7893] ? clear_bhb_loop+0x40/0x90 [ 942.879708][ T7893] ? clear_bhb_loop+0x40/0x90 [ 942.879731][ T7893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.879751][ T7893] RIP: 0033:0x7f4eb781e929 [ 942.879765][ T7893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 942.879830][ T7893] RSP: 002b:00007f4eb5e87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 942.879916][ T7893] RAX: ffffffffffffffda RBX: 00007f4eb7a45fa0 RCX: 00007f4eb781e929 [ 942.879936][ T7893] RDX: 0000000000001000 RSI: 0000200000001300 RDI: 000000000000001f [ 942.879952][ T7893] RBP: 00007f4eb5e87090 R08: 0000000000000000 R09: 0000000000000000 [ 942.879964][ T7893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.879977][ T7893] R13: 0000000000000000 R14: 00007f4eb7a45fa0 R15: 00007ffcd6ae34d8 [ 942.880028][ T7893] [ 942.881705][ T7888] bond1 (unregistering): Released all slaves [ 943.370762][ T7906] loop9: detected capacity change from 0 to 128 [ 943.384616][ T7906] EXT4-fs: Ignoring removed nobh option [ 943.404092][ T7906] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 943.420460][ T7906] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 943.518024][ T7906] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 943.559223][ T7920] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12140'. [ 943.601768][ T7927] loop3: detected capacity change from 0 to 128 [ 943.608300][ T7927] EXT4-fs: Ignoring removed nobh option [ 943.630565][ T7927] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 943.657684][ T7927] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 943.721253][ T7395] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 943.775945][ T7945] bridge: RTM_NEWNEIGH with invalid ether address [ 943.826250][ T7945] loop3: detected capacity change from 0 to 8192 [ 943.834435][ T7945] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 944.127631][ T7953] loop3: detected capacity change from 0 to 1024 [ 944.163066][ T7953] EXT4-fs: Ignoring removed nobh option [ 944.168776][ T7953] EXT4-fs: Ignoring removed bh option [ 944.213821][ T7953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 944.671307][ T7966] random: crng reseeded on system resumption [ 944.782174][ T7395] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.818610][ T7978] FAULT_INJECTION: forcing a failure. [ 944.818610][ T7978] name failslab, interval 1, probability 0, space 0, times 0 [ 944.831511][ T7978] CPU: 0 UID: 0 PID: 7978 Comm: syz.1.12161 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 944.831543][ T7978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 944.831558][ T7978] Call Trace: [ 944.831613][ T7978] [ 944.831623][ T7978] __dump_stack+0x1d/0x30 [ 944.831649][ T7978] dump_stack_lvl+0xe8/0x140 [ 944.831668][ T7978] dump_stack+0x15/0x1b [ 944.831690][ T7978] should_fail_ex+0x265/0x280 [ 944.831754][ T7978] should_failslab+0x8c/0xb0 [ 944.831780][ T7978] __kvmalloc_node_noprof+0x123/0x4e0 [ 944.831812][ T7978] ? alloc_netdev_mqs+0x8b7/0xab0 [ 944.831853][ T7978] ? __kmalloc_cache_noprof+0x22e/0x320 [ 944.831960][ T7978] alloc_netdev_mqs+0x8b7/0xab0 [ 944.832067][ T7978] rtnl_create_link+0x239/0x710 [ 944.832106][ T7978] rtnl_newlink_create+0x14c/0x620 [ 944.832141][ T7978] ? security_capable+0x83/0x90 [ 944.832251][ T7978] ? netlink_ns_capable+0x86/0xa0 [ 944.832283][ T7978] rtnl_newlink+0xf29/0x12d0 [ 944.832313][ T7978] ? __kfree_skb+0x109/0x150 [ 944.832343][ T7978] ? __memcg_slab_free_hook+0x135/0x230 [ 944.832444][ T7978] ? __kfree_skb+0x109/0x150 [ 944.832472][ T7978] ? __rcu_read_unlock+0x4f/0x70 [ 944.832645][ T7978] ? avc_has_perm_noaudit+0x1b1/0x200 [ 944.832684][ T7978] ? selinux_capable+0x1f9/0x270 [ 944.832722][ T7978] ? security_capable+0x83/0x90 [ 944.832764][ T7978] ? ns_capable+0x7d/0xb0 [ 944.832819][ T7978] ? __pfx_rtnl_newlink+0x10/0x10 [ 944.832845][ T7978] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 944.832872][ T7978] netlink_rcv_skb+0x120/0x220 [ 944.832916][ T7978] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 944.832991][ T7978] rtnetlink_rcv+0x1c/0x30 [ 944.833103][ T7978] netlink_unicast+0x59e/0x670 [ 944.833166][ T7978] netlink_sendmsg+0x58b/0x6b0 [ 944.833192][ T7978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 944.833213][ T7978] __sock_sendmsg+0x145/0x180 [ 944.833256][ T7978] ____sys_sendmsg+0x31e/0x4e0 [ 944.833368][ T7978] ___sys_sendmsg+0x17b/0x1d0 [ 944.833445][ T7978] __x64_sys_sendmsg+0xd4/0x160 [ 944.833488][ T7978] x64_sys_call+0x2999/0x2fb0 [ 944.833588][ T7978] do_syscall_64+0xd2/0x200 [ 944.833612][ T7978] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 944.833647][ T7978] ? clear_bhb_loop+0x40/0x90 [ 944.833723][ T7978] ? clear_bhb_loop+0x40/0x90 [ 944.833753][ T7978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.833785][ T7978] RIP: 0033:0x7fef01c0e929 [ 944.833800][ T7978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 944.833818][ T7978] RSP: 002b:00007fef00277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 944.833841][ T7978] RAX: ffffffffffffffda RBX: 00007fef01e35fa0 RCX: 00007fef01c0e929 [ 944.833857][ T7978] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000012 [ 944.833873][ T7978] RBP: 00007fef00277090 R08: 0000000000000000 R09: 0000000000000000 [ 944.833925][ T7978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 944.833937][ T7978] R13: 0000000000000000 R14: 00007fef01e35fa0 R15: 00007ffda0565b08 [ 944.833957][ T7978] [ 945.310329][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12168'. [ 945.319352][ T7992] tipc: Enabling of bearer rejected, failed to enable media [ 945.328581][ T7992] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12168'. [ 945.338269][ T7993] loop3: detected capacity change from 0 to 512 [ 945.389211][ T7993] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 945.407525][ T7993] EXT4-fs (loop3): invalid journal inode [ 945.426633][ T7993] EXT4-fs (loop3): can't get journal size [ 945.450864][ T7993] EXT4-fs (loop3): 1 truncate cleaned up [ 945.459114][ T8003] loop9: detected capacity change from 0 to 512 [ 945.472492][ T7993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 945.523668][ T8003] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.12172: Failed to acquire dquot type 1 [ 945.553329][ T8003] EXT4-fs (loop9): 1 truncate cleaned up [ 945.589131][ T8003] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 945.637280][ T8003] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 945.754024][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12179'. [ 945.763063][ T8022] tipc: Started in network mode [ 945.767955][ T8022] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 945.775155][ T8022] tipc: Enabled bearer , priority 10 [ 945.781649][ T8003] 8021q: VLANs not supported on nlmon0 [ 945.786468][ T8022] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12179'. [ 945.796448][ T8022] tipc: Resetting bearer [ 945.809210][ T8022] tipc: Disabling bearer [ 945.837799][ T6161] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.176063][ T7395] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.211498][ T8035] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 946.218144][ T8035] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 946.226504][ T8035] vhci_hcd vhci_hcd.0: Device attached [ 946.234504][ T8035] vhci_hcd vhci_hcd.0: port 0 already used [ 946.242589][ T8038] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.12186' sets config #0 [ 946.282815][ T8048] siw: device registration error -23 [ 946.291660][ T8036] xt_CT: You must specify a L4 protocol and not use inversions on it [ 946.305621][ T8050] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 946.312177][ T8050] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 946.320054][ T8050] vhci_hcd vhci_hcd.0: Device attached [ 946.329384][ T8052] vhci_hcd: connection closed [ 946.329576][T21041] vhci_hcd: stop threads [ 946.338832][T21041] vhci_hcd: release socket [ 946.343360][T21041] vhci_hcd: disconnect device [ 946.374598][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 946.374613][ T29] audit: type=1326 audit(1751285558.799:56848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.8.12192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed1fbe929 code=0x7ffc0000 [ 946.404903][ T29] audit: type=1326 audit(1751285558.799:56849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.8.12192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed1fbe929 code=0x7ffc0000 [ 946.428568][ T29] audit: type=1326 audit(1751285558.799:56850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.8.12192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ed1fbe929 code=0x7ffc0000 [ 946.452306][ T29] audit: type=1326 audit(1751285558.799:56851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.8.12192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed1fbe929 code=0x7ffc0000 [ 946.476073][ T29] audit: type=1326 audit(1751285558.799:56852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.8.12192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f5ed1fbe929 code=0x7ffc0000 [ 946.499759][ T29] audit: type=1326 audit(1751285558.799:56853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.8.12192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed1fbe929 code=0x7ffc0000 [ 946.523478][ T29] audit: type=1326 audit(1751285558.799:56854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.8.12192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ed1fbe929 code=0x7ffc0000 [ 946.547142][ T29] audit: type=1326 audit(1751285558.799:56855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.8.12192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed1fbe929 code=0x7ffc0000 [ 946.570828][ T29] audit: type=1326 audit(1751285558.799:56856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.8.12192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5ed1fbe929 code=0x7ffc0000 [ 946.574760][ T2634] usb 2-1: SetAddress Request (2) to port 0 [ 946.594405][ T29] audit: type=1326 audit(1751285558.799:56857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.8.12192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed1fbe929 code=0x7ffc0000 [ 946.616039][ T2634] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 946.681374][ T8064] xt_CT: No such helper "snmp_trap" [ 946.862545][ T8072] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.12198' sets config #0 [ 946.968490][ T8076] syzkaller0: entered promiscuous mode [ 946.974028][ T8076] syzkaller0: entered allmulticast mode [ 947.033273][ T8076] netlink: 14593 bytes leftover after parsing attributes in process `syz.9.12200'. [ 947.110411][ T8080] xt_hashlimit: max too large, truncated to 1048576 [ 947.189527][ T8104] loop3: detected capacity change from 0 to 512 [ 947.191828][ T8102] dvmrp1: entered allmulticast mode [ 947.210905][ T8104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 947.224025][ T8104] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 947.244229][ T8111] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.12211' sets config #0 [ 947.244978][ T8104] program syz.3.12209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 947.269847][ T8104] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.12209: Failed to acquire dquot type 0 [ 947.280393][ T8114] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.12212' sets config #1 [ 947.378531][ T8040] vhci_hcd: connection reset by peer [ 947.384248][ T5520] vhci_hcd: stop threads [ 947.388541][ T5520] vhci_hcd: release socket [ 947.392981][ T5520] vhci_hcd: disconnect device [ 947.421225][ T8125] ================================================================== [ 947.429348][ T8125] BUG: KCSAN: data-race in getrusage / vms_clear_ptes [ 947.436147][ T8125] [ 947.438481][ T8125] write to 0xffff88810bb5e8b0 of 8 bytes by task 8124 on cpu 1: [ 947.446119][ T8125] vms_clear_ptes+0x18f/0x2d0 [ 947.450817][ T8125] mmap_region+0x6e8/0x1580 [ 947.455348][ T8125] do_mmap+0x9b3/0xbe0 [ 947.459445][ T8125] vm_mmap_pgoff+0x17a/0x2e0 [ 947.464055][ T8125] ksys_mmap_pgoff+0x2d0/0x310 [ 947.468846][ T8125] x64_sys_call+0x1602/0x2fb0 [ 947.473540][ T8125] do_syscall_64+0xd2/0x200 [ 947.478054][ T8125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.483964][ T8125] [ 947.486299][ T8125] read to 0xffff88810bb5e8b0 of 8 bytes by task 8125 on cpu 0: [ 947.493860][ T8125] getrusage+0xa52/0xbb0 [ 947.498134][ T8125] io_sq_thread+0x5dd/0x1180 [ 947.502744][ T8125] ret_from_fork+0xda/0x150 [ 947.507267][ T8125] ret_from_fork_asm+0x1a/0x30 [ 947.512051][ T8125] [ 947.514388][ T8125] value changed: 0x00000000000014ea -> 0x00000000000016b4 [ 947.521509][ T8125] [ 947.523842][ T8125] Reported by Kernel Concurrency Sanitizer on: [ 947.530008][ T8125] CPU: 0 UID: 0 PID: 8125 Comm: iou-sqp-8124 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 947.540885][ T8125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 947.550959][ T8125] ================================================================== [ 947.580594][ T7395] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 951.494953][ T2634] usb 2-1: device descriptor read/8, error -110 [ 951.599872][ T2634] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 951.618848][ T2634] usb 2-1: enqueue for inactive port 0 [ 951.624381][ T2634] usb 2-1: enqueue for inactive port 0 [ 951.629898][ T2634] usb 2-1: enqueue for inactive port 0 [ 952.610148][ T2634] usb usb2-port1: attempt power cycle [ 954.345611][ T2634] usb usb2-port1: unable to enumerate USB device