last executing test programs: 1m25.186283821s ago: executing program 0 (id=240): r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) 1m25.148603191s ago: executing program 0 (id=242): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) capget(&(0x7f0000000640)={0x20080522}, &(0x7f0000000680)={0x6202, 0xff, 0xe30, 0x0, 0x2, 0x20}) 1m25.093375242s ago: executing program 0 (id=243): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000340)=0x1e) 1m25.092967682s ago: executing program 0 (id=244): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x200220, 0x10000, 0xa, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4a00000000000007911b00000000000050b0001000000009500000c00000000"], &(0x7f0000000300)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap$xdp(&(0x7f0000448000/0x1000)=nil, 0x1000, 0x1000006, 0x100010, 0xffffffffffffffff, 0x80000000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="99fea24e0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095cc180828ebd08917e5b513ac87c697c036f5d6e536deaeeda486f5d7a8a5dcd5e9647cfbc40ee1c9938f5441c12948a3992f9ae316dfc10a648a7e243136050bd30bf2fd8b53fd5cfc3b4e76f1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000340), 0x2931890e, r4}, 0x38) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000041, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x570, &(0x7f00000019c0)="$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") r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x1808000, &(0x7f0000000240)=ANY=[@ANYBLOB="6d706f6c3d62696e643d72656c61746976653a3000044fa12c7760bf91e1acc1108ab62a580e495030850e4cd16706f1cfed05ff342cca809301fadb9d46bc84da54eba9fb62a73f2f5c2a0492416f206b82ab7af531a7606fbfc0af7afc10c1c82dc9aa7d517a1be986ab20f8909a7d217c03bd7353eb2ca4429aa561be885466ccf0a6e87bd33d6a7117171ebd2de3bcef1da4f0ed0dbf99057381995db06fe68c39"]) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) 1m24.55137687s ago: executing program 0 (id=253): syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x10000}}, {@resuid}]}, 0x1, 0x524, &(0x7f00000010c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000280)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@nombcache}, {@noload}, {@debug}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x53}}]}, 0xfa, 0x477, &(0x7f0000001380)="$eJzs3M9vFFUcAPDvTH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKgs1tCZCiFYPeDQk3o3/hfGkF6NeNPGqd0NCDBdQL2tmZwaWZbfd0m0X2M8nme57M6/73ndm3u6bebsbQM8ayf4kEVsj4o+IGMqztxYYyR+uX70w9c/VC1NJVKtv/53Uyl27emGqLFr+35Y8U60W+Q1N6r34XsRkpTJztsiPLZz+cGz+3PkXZ09Pnpw5OXNm4ujRQwf3DB6ZONyROLO4ru36ZG73zmPvXnpz6vil939O0sjjjoY4OmUk37tNPdPpyrpsW1066a/fsvfXm+lmZwLd1BcR2eEaqPX/oeiLTTe2DcXrn3e1ccCaqlar1SVelRerwH0siW63AOiO8o0+u/4tl3UaetwVrrySXwBlcV8vlnxLf6R5Yu9Aw/Xt1g7WPxIRxxf//TpbYo3uQwAA1Ps+G/+80Gz8l8YjeWIw+/NAMYcyHBEPRsT2iHgoInZExMMRtbKPRsRjK6y/cYbk9vFPevmOg2tDNv57uZjbunX8l5ZFhvuK3LZa/APJidnKzIFin+yPgQ0nZpOZ8SXq+OG1379sta1+/JctWf3lWLBox+X+hht005MLk6uJud6VzyJ29TeLP4lyGieJiJ0RsesO65h9rr/ltuXjX0Lrp21b9ZuIZ/PjvxgN8ZeSlvOT4y8dmTg8tjEqMwfGyrPidr/8dvGtVvWvKv4OyI7/5qbn/434h5ONEfPnzp+qzdfOr+jps64TF//8ouU1TRF/1r3aOf+PbSvO/8HkndqKwWLDx5MLC2fHIwaTN25fP3Hz2cp8WT6Lf/++5v1/e9zcE49HxO6I2BMRT2QXhUXbn4yIpyJi3xI74adXn/5gmfibHP/1mSvN4p9e7vhH/fFfeaLv1I/fLR//xohodfwP1VL7izXtvP6128DV7DsAAAC4V+SfgU/S0RvpNB0dzT/DvyM2p5W5+YXnT8x9dGY6n/cejoG0vNM1VHc/dLy4N1zmJxryB4v7xl/1barlR6fmKtPdDh563JYW/T/zV1+3WwesuQ7MowH3KP0fepf+D70p0f+hp+n/0Lua9f9PW5Ye/XZNGwOsK+//0Lva6P+L+UPrUQFwb/L+D71L/4ee1PK78emqvvK/7on/it8zvFvac/8nIr0rmnH/J/rb/jGLFSSqQ3n/z9ZsaFqm269MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfF/AAAA//8Qi+Nc") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1m24.132882267s ago: executing program 0 (id=265): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0xa4c35c, &(0x7f0000000080)={[{@nojournal_checksum}, {@jqfmt_vfsv0}, {@noacl}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f00000003c0)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) 1m24.122713817s ago: executing program 32 (id=265): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0xa4c35c, &(0x7f0000000080)={[{@nojournal_checksum}, {@jqfmt_vfsv0}, {@noacl}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f00000003c0)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) 1m21.060812694s ago: executing program 1 (id=320): creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x1c, 0xfd, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf5, 0x40}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0xa) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1m20.999746475s ago: executing program 1 (id=323): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r2, @ANYRES32=r3], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000280)='5', 0x1}], 0x1}, 0x4040005) 1m20.845253977s ago: executing program 1 (id=327): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4180) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r1) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1m20.801271868s ago: executing program 1 (id=328): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x200220, 0x10000, 0xa, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4a00000000000007911b00000000000050b0001000000009500000c00000000"], &(0x7f0000000300)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap$xdp(&(0x7f0000448000/0x1000)=nil, 0x1000, 0x1000006, 0x100010, 0xffffffffffffffff, 0x80000000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="99fea24e0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095cc180828ebd08917e5b513ac87c697c036f5d6e536deaeeda486f5d7a8a5dcd5e9647cfbc40ee1c9938f5441c12948a3992f9ae316dfc10a648a7e243136050bd30bf2fd8b53fd5cfc3b4e76f1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090008527e8251ac99ff940004000000e27f0000016a2b875f529b0bf8d38ac14e7695ff070e2cb79ba32b1450359043b89a269ac556542fbff5034d655064c109494af560547d16a16ef55517f05b40c3809341c51e16f21e4b75a179a7956b264516af77a96ee1e4068aebef3417e2b7631dedfba5e17e4140eb6b9b5eab301cc4831e1d78e987a475c32684d7598963bf81628858cad72a3216cf383f59f76668396f18f90d6dd629f9a27fb19d0a662041cb91b3fe75d6a19642ee64e8c7c22984ee7961bcf601afd0104f2c9bd38d371109068f235178340527e5c169926be542a34634657b16d0a104d1670ff0541eaf582882569d48033dc4564359c68ce5c5947def28f53070332b0ee1b37f622982098a1c879af736ded00922c2f68d6295c1c6d64e07d5c46abe4752b9f0ab2d3d8b004eac611ca4fad8299a3a2cd4715a80f91427fc1b6eaf8ebe188ef9a9a6c54a943a5cca9444499e1e2dfb1862d994e208105411c4beae5397bfdb34cc5b2052ff5c4422ea5e5f78353c28b7db24f957c7b2404a43606c70022b70f7613b738876d1387d28cb9a42cad25354196b2da5ad45dadcd05fa3327242944ce0e31e41cd3b3d3fda00bf45"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000340), 0x2931890e, r4}, 0x38) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000041, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x570, &(0x7f00000019c0)="$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") r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x1808000, &(0x7f0000000240)=ANY=[@ANYBLOB="6d706f6c3d62696e643d72656c61746976653a3000044fa12c7760bf91e1acc1108ab62a580e495030850e4cd16706f1cfed05ff342cca809301fadb9d46bc84da54eba9fb62a73f2f5c2a0492416f206b82ab7af531a7606fbfc0af7afc10c1c82dc9aa7d517a1be986ab20f8909a7d217c03bd7353eb2ca4429aa561be885466ccf0a6e87bd33d6a7117171ebd2de3bcef1da4f0ed0dbf99057381995db06fe68c39"]) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) 1m19.98892381s ago: executing program 1 (id=337): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") creat(&(0x7f00000000c0)='./file0\x00', 0x48) (fail_nth: 7) 1m19.616450466s ago: executing program 1 (id=340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800c500fffffff20000000000fdffff0001340c8300000000000000000100", @ANYRESHEX=r1, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000080)=ANY=[], 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 1m19.596324247s ago: executing program 33 (id=340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800c500fffffff20000000000fdffff0001340c8300000000000000000100", @ANYRESHEX=r1, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000080)=ANY=[], 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 1m12.22857866s ago: executing program 6 (id=452): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="87", 0x1}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x80, 0x0, {0x8, 0x4, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0xa, 0x0, [{0x7, 0x4, '^\x00'}]}]}}}}}}}, 0x0) r4 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000053"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4002000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000000)={0x14a, 0x9, 0xff, 0xdee, 0x6, "3c63907426109b89"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x7}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x5, &(0x7f0000000380)=@framed={{}, [@map_val={0x18, 0x7, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r8, 0x8, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r2, 0x4, '\x00', r7, r8, 0x1, 0x4, 0x5}, 0x50) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x40012141) 1m12.140345561s ago: executing program 6 (id=453): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) unshare(0x2040400) r3 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) unshare(0x22000400) fsmount(r3, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x400, '\x00', 0x0, r2, 0x5, 0x2, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) fadvise64(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 1m11.989384054s ago: executing program 6 (id=454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) capget(&(0x7f0000000640)={0x20080522}, &(0x7f0000000680)={0x6202, 0xff, 0xe30, 0x0, 0x2, 0x20}) 1m11.988825893s ago: executing program 6 (id=455): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x200220, 0x10000, 0xa, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4a00000000000007911b00000000000050b0001000000009500000c00000000"], &(0x7f0000000300)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap$xdp(&(0x7f0000448000/0x1000)=nil, 0x1000, 0x1000006, 0x100010, 0xffffffffffffffff, 0x80000000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="99fea24e0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095cc180828ebd08917e5b513ac87c697c036f5d6e536deaeeda486f5d7a8a5dcd5e9647cfbc40ee1c9938f5441c12948a3992f9ae316dfc10a648a7e243136050bd30bf2fd8b53fd5cfc3b4e76f1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000340), 0x2931890e, r4}, 0x38) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000041, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x570, &(0x7f00000019c0)="$eJzs3c1rHOUfAPDvbF76+vs1hVJURAI9WNFumsSXCh7qUbRY0HtdkjGUbLoluylNLLQ92IsXKYKIBfHgTe8ei/+Af0VBi0VK0IOXyGxm022zm2zTbXbrfj4w4XlmZvM835l5nn1mn1k2gIE1nv0pRDwfEV8mEYciIsm3DUe+cXx9v9X7V2ayJYm1tY/+TOr7ZfnG/2q87kCeeS4ifvk84tXC5nKryyvzpXI5XczzE7WFixPV5ZUT5xdKc+lcemFqevrUG9NTb7/1ZtdifeXs3998ePu9U18cW/36p7uHbyZxOg7m25rjeALXmjPjMZ4fk5E4/ciOk10orJ8kva4AOzKUt/ORyPqAQzGUt3rgv+9qRKwBAyrR/mFANcYBjXv7Lt0HPzPuvbt+A7Q5/uH1z0Zib/3eaP9q8tCdUXa/O9aF8rMyfv791s1sie59DgGwrWvXI+Lk8PDm/i/J+7+dO9nBPo+Wof+D3XM7G/+81mr8U9gY/0SL8c+BFm13J7Zv/4W7XSimrWz8907L8e/GpNXYUJ77X33MN5J8er6cZn3b/yPieIzsyfJbzeecWr2z1m5b8/gvW7LyG2PBvB53h/c8/JrZUq30JDE3u3c94oWW499k4/wnLc5/djzOdljG0fTWS+22bR//07X2fcTLLc//gxmtZOv5yYn69TDRuCo2++vG0V/blb85/tHYzfiz879/6/jHkub52urjl/Hd3n/Sdtseij86v/5Hk4/r6dF83eVSrbY4GTGafLB5/dSD1zbyjf2z+I8f27r/a3X974uITzqM/8aRH1/sKP4eXP9Z/LOPdf4fP3Hn/c++bVd+Z/3f6/XU8XxNJ/1fpxV8kmMHAAAAAAAA/aYQEQcjKRQ30oVCsbj+fMeR2F8oj60//xGzUf+u7FiMFBoz3YeanoeYzJ+HbeSnHslPR8ThiPhqaF89X5yplGd7HTwAAAAAAAAAAAAAAAAAAAD0iQNtvv+f+W2o17UDnjo/+Q2Da9v2341fegL6kvd/GFzaPwwu7R8Gl/YPg6up/e/pZT2A3ef9HwaX9g+DS/sHAAAAAAAAAAAAAAAAAAAAAAAAAACArjp75ky2rK3evzKT5WcvLS/NVy6dmE2r88WFpZniTGXxYnGuUpkrp8WZysJ2/69cqVycnIqlyxO1tFqbqC6vnFuoLF2onTu/UJpLz6UjuxIVAAAAAAAAAAAAAAAAAAAAPFuqyyvzpXI5XZSQ2FFiuD+qsZ7ILummNVd7XZ+tEn/80BfVaJfodc8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/8GwAA//9ITzKe") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x1808000, &(0x7f0000000240)=ANY=[@ANYBLOB="6d706f6c3d62696e643d72656c61746976653a3000044fa12c7760bf91e1acc1108ab62a580e495030850e4cd16706f1cfed05ff342cca809301fadb9d46bc84da54eba9fb62a73f2f5c2a0492416f206b82ab7af531a7606fbfc0af7afc10c1c82dc9aa7d517a1be986ab20f8909a7d217c03bd7353eb2ca4429aa561be885466ccf0a6e87bd33d6a7117171ebd2de3bcef1da4f0ed0dbf99057381995db06fe68c39"]) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) 1m11.784254156s ago: executing program 6 (id=456): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1) renameat2(r0, 0x0, r0, 0x0, 0x4) write$cgroup_subtree(r0, &(0x7f0000000600), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000050000000000400000850000000800000018110000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffdfffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x45e}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x8bb}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000580)=@assoc_value={r5, 0x9}, &(0x7f00000005c0)=0x8) writev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {&(0x7f00000002c0)="0324bcc700924f9557d3b0bd", 0xc}], 0x2) 1m11.57728265s ago: executing program 6 (id=459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a3000000000090002007379"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r0, &(0x7f0000000040), 0x2) 1m11.57689091s ago: executing program 34 (id=459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a3000000000090002007379"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r0, &(0x7f0000000040), 0x2) 2.339419674s ago: executing program 4 (id=1606): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000ac0)=@rc={0x1f, @none, 0x7}, 0x80, &(0x7f0000000ec0)}, 0x801) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x30000001}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYRES64=r1], 0x48}}, 0x40000) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000100), &(0x7f0000000140), 0x0) r4 = openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) write(r4, &(0x7f0000000180)="01010101", 0x4) close(r4) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000340), &(0x7f0000000380), 0x0) 2.133181377s ago: executing program 5 (id=1613): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x4c58, 0x10000, 0xc18f, 0x1, 0x8, 0x8, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9dc7e9513fdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d00000000030005000000000002000000ac1414000000000000000000"], 0x78}, 0x1, 0x7}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, 0x0, &(0x7f0000000280)=@udp}, 0x20) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) 2.019746629s ago: executing program 5 (id=1616): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) (fail_nth: 3) 1.577269046s ago: executing program 5 (id=1619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48050}, 0x40004) recvmmsg(r5, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) 1.542787847s ago: executing program 4 (id=1622): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) gettid() timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYRES16=r2], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) preadv2(r0, &(0x7f0000000240)=[{&(0x7f0000000680)=""/168, 0xa8}], 0x1, 0x0, 0x4, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, 0x0) bind$inet6(r7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r8, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}}, 0x0) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0xfffffff7, 0x4, &(0x7f00000004c0)="9940df46e0bcb0bb99e2d60630f456399e26007ea1a4c9fd57d9e23d61d642e1213f8d0fd46bb65cf3a2349ac72525dc16931d6a35e4c3d73df4062eebf86202d45383a77fc28c39d2f785b614f892d25f8ba0c0192768a4909438990d20f58ad4c712ba530047c69738a2e0fe65a9a6e54731eeef641ff64c48e1e234f0e8128910c94def9a90956f26dfab60d201da2980d64053e0945d1b3d45dcd22d53923984a0"}) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) 1.514308627s ago: executing program 2 (id=1624): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e0, 0x200, 0x200, 0x300, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1c, 0x14, 0x0, 0x0, 0x3, 0x89, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782db44b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a80016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040", 0xa2}], 0x1}, 0x48084) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000840)={0x0, r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09000000fe3f1400e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b546461281731e10b93e4101c6d99b2bbcde42e9e6be69ab0b80debca570623347b1affae17eb26f579350ea00f54527c5cd487778d0a0c7a08284bef4565f2824e5f54cf3625747e9c4b32fc8fe0d5a7da85bd071423d1f545c1706c7b2217a8dff68ed4f52745445e9abdf71be394185327325090bcb7a313e547e7de6068585c7612605c551e2927996065ea581b03be9f7f885c90de3a89bea03500ba4af918acec3b2386eecef2a97f64cc0a2ddab715e03df5692a8d3207294518002da5f073978849e9ebd4dcff75010c706f5e2b1196a75b1698e070cf346ab997506c50d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x8, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_open_dev$hiddev(&(0x7f00000004c0), 0x3fe000000000000, 0x4a00) ioctl$HIDIOCSREPORT(r6, 0x400c4808, &(0x7f0000000800)={0x1, 0x200, 0x6}) wait4(0x0, 0x0, 0x40000000, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r5, &(0x7f0000000180), 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$key(0xf, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES32=r3, @ANYRESOCT=0x0, @ANYBLOB="660e9cd343ab8fb22c807827a2cb399a2c52055d90bf0358f664819f358c615786c2f8654e05309f3438b8c2af2fb6c6358e2fbfefea5ed18d070897ce032deef3524b8cb10e5951036f3f2b86b5fbf1bac895"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r9], 0xc4}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x400008a, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r10, 0xee01}}, './file1\x00'}) 1.349318299s ago: executing program 3 (id=1627): socket(0x40000000015, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e0000008500000007"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x1808000, &(0x7f0000000240)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) 1.32407103s ago: executing program 3 (id=1629): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 1.31870639s ago: executing program 2 (id=1630): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000380)=@abs={0x1, 0x0, 0x1004e23}, 0xc6) setgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x8, 0x6}]}, 0x10) 1.29452675s ago: executing program 3 (id=1631): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000380)='GPL\x00', 0xe1c, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getattr(r5, &(0x7f0000000240)={0x38}, 0x38, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000600)=@newtaction={0xa0, 0x30, 0x9, 0x2, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x0, 0x0, 0x0, 0xffff0000}, {}, {0x3}, {0x0, 0x7, 0x1}, {0x8}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x6, 0xfe}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x9, 0xfffffff7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0017019ac1"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r8, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r8, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000001840), 0x3b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1.28212261s ago: executing program 2 (id=1632): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000080)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 796.504168ms ago: executing program 7 (id=1642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x101882, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000500)=0x1b) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r3 = syz_io_uring_setup(0xd3, &(0x7f0000000380)={0x0, 0xfffffffc, 0x1000, 0xffeffffe, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x2, {0x2}}) io_uring_enter(r3, 0x4502, 0xec7c, 0x4, 0x0, 0x0) 779.255208ms ago: executing program 7 (id=1643): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000380)=@abs={0x1, 0x0, 0x1004e23}, 0xc6) setgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x8, 0x6}]}, 0x10) 756.073359ms ago: executing program 7 (id=1644): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) setresuid(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) 749.760908ms ago: executing program 3 (id=1645): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000380)=@abs={0x1, 0x0, 0x1004e23}, 0xc6) setgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x8, 0x6}]}, 0x10) 747.470528ms ago: executing program 2 (id=1646): creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x1c, 0xfd, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf5, 0x40}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0xa) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 728.118479ms ago: executing program 7 (id=1647): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x800}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xd}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x2}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}, @TCA_RATE={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 727.683269ms ago: executing program 2 (id=1648): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)={0x28, 0x12, 0x1, 0x70bd29, 0x25dfdbfd, "", [@nested={0x18, 0x147, 0x0, 0x1, [@nested={0x14, 0xb3, 0x0, 0x1, [@typed={0x8, 0xc4, 0x0, 0x0, @uid}, @typed={0x8, 0x3f, 0x0, 0x0, @uid}]}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x20044000}, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) mkdir(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x200000000001, 0x0) write$P9_RSYMLINK(r4, &(0x7f0000000540)={0x14, 0x11, 0x2, {0x81, 0x0, 0x2}}, 0x14) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 697.460949ms ago: executing program 5 (id=1649): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000000440)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) memfd_secret(0x0) 697.088279ms ago: executing program 3 (id=1650): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x800}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xd}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x2}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}, @TCA_RATE={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 684.90312ms ago: executing program 7 (id=1651): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0x1, 0x52e, &(0x7f0000000e00)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008581937cb70000000600000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x4e, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000009, 0x5, 0x30000009, 0x10005, 0x8}, @private=0xa010100, @loopback, 0xff000000, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) fcntl$setlease(r2, 0x400, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x2000, 0xe, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4000000000]}, 0x8, 0x0) faccessat2(r7, &(0x7f0000000040)='\x00', 0x2, 0x1200) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x25dfdbff, {0x0, 0x0, 0x300}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x9, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x15, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x400000, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0xff, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x7, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3f7, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0xffff40a5, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x5ebe, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0xfffffffe, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x4, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x6e, 0x100, 0x3, 0x100, 0xe60a}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x8}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xde6, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x2, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1800000, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x70e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x6b8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x7, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x3, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x0, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x8000401, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x8, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0xa5a, 0x10001, 0x9c29, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x200, 0x103, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x1, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x1000024, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x80000000, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x800008, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x6}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) 681.480609ms ago: executing program 5 (id=1652): socket(0x40000000015, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e0000008500000007"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x1808000, &(0x7f0000000240)=ANY=[@ANYBLOB="6d706f6c3d62696e643d72656c61746976653a3000044fa12c7760bf91e1acc1108ab62a580e495030850e4cd16706f1cfed05ff342cca809301fadb9d46bc84da54eba9fb62a73f2f5c2a0492416f206b82"]) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) 642.35278ms ago: executing program 4 (id=1653): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000ac0)=@rc={0x1f, @none, 0x7}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000b40)="0551b6854cb89ff6ab8a55ec6d453d96960d1a234d4d1127b2b32f16e1016a460c1eea1c9d97f19ac8dd562c223c5d3dcba68a8fe994496b749275058da8c4cd79e9dd6bba4992", 0x47}, {&(0x7f0000000bc0)="96e8f5dede1ccf66ffae094067cdc01e2e8e22dcccaa75c91ac5377d49ecc1f85d6bdcd22baa434f24874bc6ee38a0fc51c8f7eb71dfedf0fc0f576bdba65a5c3191e206982f03f3", 0x48}, {&(0x7f0000000c40)="40689a77302ecfe967127f2e3069a9957fdb72c6554dd01916d849f5b0c48e513b0d0235e6d070d9d801bd33c0c601dd3dd087d732c51d849474a608d2cae8ddb74e8902cfc5d2bec0e52929406648f2791571102019000c352760466e794ad51ba276a5a003af6a29e44ea6a66295cb4a510c8d9fa285fe48eaebfb6a677e6d3be789fe381c659ac833369d2ad17f2ce15dd69f777e52bda995939d4e498825d48e2b298045f60fd46d825bcbfba81132b7aea95f45a367260e65dd93659ad9f7bd4f7d", 0xc4}, {&(0x7f0000000d40)="69dcb3fb481599db8bda21826d58a06e4f9ed1d0f216a2f7fdfbce84377da5c118bb9a8a017d7d2072a1610264f3963a2014e241c75a2c478153fb11d1e74437d8af3a5876bbde1710a527e0b88fbd0526cc1fb2732d9db0c6bf7b0ec04dca0572f5144f929ddb4df8682a2cf46fca3ce8267568867035babc74dd7f35024e", 0x7f}], 0x4}, 0x801) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x30000001}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYRES64=r1], 0x48}}, 0x40000) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000100), &(0x7f0000000140), 0x0) r4 = openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) write(r4, &(0x7f0000000180)="01010101", 0x4) close(r4) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000340), &(0x7f0000000380), 0x0) 627.61381ms ago: executing program 3 (id=1654): socket$inet6(0xa, 0x800000000000002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="b64e"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x200000000003}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r4 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x1a00001a}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='xen_mmu_set_p4d\x00'}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xadda, 0x10100, 0x1, 0x1ff, 0x0, r4}, &(0x7f0000000380), 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) io_uring_enter(r6, 0xd81, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5913fdfffffffedbdf256b00000008000300", @ANYRES32=r1, @ANYBLOB="10001d800c0000800500090009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x240040c1}, 0x4000010) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRESDEC, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x3}, 0x18) syz_open_procfs(0x0, &(0x7f0000000e40)='net/raw6\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 532.162132ms ago: executing program 5 (id=1655): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x15, 0x5, 0x9, 0xa, 0x0, 0x70bd28, 0x25dfdbff, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_ident={0x2, 0xa, 0xdac2, 0x0, 0x4}, @sadb_x_sec_ctx={0x5, 0x18, 0xd0, 0x3, 0x1a, "43b3793146e9b60356fd9e493ded2f040c67d4b197a3d2cb9179"}]}, 0x50}}, 0x40400) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x1, 0x7, 0xfffffffe, 0x101, {{0x1b, 0x4, 0x3, 0x6, 0x6c, 0x67, 0x0, 0x5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}, {[@ssrr={0x89, 0x13, 0xa, [@local, @broadcast, @private=0xa010100, @empty]}, @rr={0x7, 0x17, 0x96, [@rand_addr=0x64010100, @rand_addr=0x64010102, @empty, @remote, @loopback]}, @timestamp_prespec={0x44, 0x14, 0xd9, 0x3, 0x5, [{@local, 0x9}, {@local, 0x1}]}, @end, @timestamp={0x44, 0x10, 0xf1, 0x0, 0x6, [0x5, 0x8, 0x4]}, @ssrr={0x89, 0x7, 0xa6, [@empty]}]}}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa2, 0xa2, 0xa, [@datasec={0xc, 0x4, 0x0, 0xf, 0x3, [{0x1, 0x10001}, {0x4, 0x80, 0x10001}, {0x5, 0x46ff, 0x5}, {0x5, 0x6, 0x81}], "183946"}, @const, @datasec={0x6, 0x6, 0x0, 0xf, 0x3, [{0x4, 0x1, 0x8}, {0x3, 0x3, 0x1}, {0x4, 0x7fff}, {0x3, 0x8, 0x9}, {0x5, 0x0, 0x7}, {0x4, 0xc05}], "b4a0a6"}]}, {0x0, [0x0, 0x61, 0x2e, 0x30, 0x2e, 0x0, 0x0, 0x0]}}, &(0x7f0000000600)=""/240, 0xc6, 0xf0, 0x0, 0x23e5}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f00000008c0)={&(0x7f00000007c0)=""/8, 0x8, 0x0, &(0x7f0000000800)=""/177, 0xb1}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x1f, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0x1a}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a40)='GPL\x00', 0x8, 0x67, &(0x7f0000000a80)=""/103, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000b40)={0x1, 0xd, 0x9, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b80)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x1000}, 0x94) r7 = openat(0xffffffffffffffff, &(0x7f0000000c80)='./file0\x00', 0x0, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000dc0), &(0x7f0000000e00)}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@generic={&(0x7f0000000e80)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0xe, 0xc, &(0x7f00000002c0)=@raw=[@ldst={0x1, 0x1, 0x3, 0x2, 0x8, 0x20, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x46, &(0x7f0000000380)=""/70, 0x41100, 0x11, '\x00', r3, @sk_skb=0x5, r4, 0x8, &(0x7f0000000740)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0xe, 0xa, 0xa}, 0x10, r5, r6, 0x0, &(0x7f0000000f00)=[r7, r8, r9, r10, r11], 0x0, 0x10, 0x7fffffff}, 0x94) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001000)={0xffffffffffffffff, 0x2, 0x10}, 0xc) ioctl$INCFS_IOC_PERMIT_FILL(r12, 0x40046721, &(0x7f0000001040)={r2}) socket$unix(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r13, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001200)={&(0x7f00000010c0)={0x130, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x800}, 0x8080) socket$inet_mptcp(0x2, 0x1, 0x106) socket$phonet(0x23, 0x2, 0x1) r14 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r14, &(0x7f0000001280)="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", 0x1000, 0x804, &(0x7f0000002280)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_int(r7, 0x0, 0x8, &(0x7f00000022c0)=0x1, 0x4) socket$unix(0x1, 0x5, 0x0) rt_sigtimedwait(&(0x7f0000002300)={[0x3ffa5aa7]}, &(0x7f0000002340), &(0x7f00000023c0)={0x77359400}, 0x8) mount(&(0x7f0000002400)=@loop={'/dev/loop', 0x0}, &(0x7f0000002440)='./file0\x00', &(0x7f0000002480)='vxfs\x00', 0x2010000, &(0x7f00000024c0)='\x00') 395.298054ms ago: executing program 2 (id=1656): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000380)='GPL\x00', 0xe1c, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getattr(r5, &(0x7f0000000240)={0x38}, 0x38, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000600)=@newtaction={0xa0, 0x30, 0x9, 0x2, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x0, 0x0, 0x0, 0xffff0000}, {}, {0x3}, {0x0, 0x7, 0x1}, {0x8}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x6, 0xfe}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x9, 0xfffffff7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0017019ac1"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r8, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r8, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000001840), 0x3b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 384.415794ms ago: executing program 7 (id=1657): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c8"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000080)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 89.236908ms ago: executing program 4 (id=1658): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) setresuid(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) 33.24296ms ago: executing program 4 (id=1659): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000880)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095", @ANYRESDEC=r0], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0xe, 0x0, 0x9, 0x8, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast1, 0x80, 0x1, 0x3, 0x6}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001180)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x100000000002}]}) 0s ago: executing program 4 (id=1660): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000880)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095", @ANYRESDEC=r0], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0xe, 0x0, 0x9, 0x8, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast1, 0x80, 0x1, 0x3, 0x6}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000001180)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x100000000002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r4, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001400000000000000003"], 0x118}}, 0x0) kernel console output (not intermixed with test programs): no channels available for device 127.0.0.1 [ 101.043548][ T7285] loop3: detected capacity change from 0 to 512 [ 101.050432][ T7285] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.070430][ T7285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.091489][ T7285] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1165: corrupted xattr block 32: bad e_name length [ 101.105898][ T7285] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 101.115366][ T7285] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1165: corrupted xattr block 32: bad e_name length [ 101.130017][ T7285] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 101.139027][ T7285] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1165: corrupted xattr block 32: bad e_name length [ 101.153453][ T7285] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1165: corrupted xattr block 32: bad e_name length [ 101.173534][ T7285] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 101.207138][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.281590][ T7295] loop7: detected capacity change from 0 to 128 [ 101.292242][ T7295] netlink: '( [ 101.292242][ T7295] ]!': attribute type 39 has an invalid length. [ 101.362802][ T7298] loop3: detected capacity change from 0 to 512 [ 101.370896][ T7298] EXT4-fs: Mount option(s) incompatible with ext3 [ 101.419702][ T7301] loop3: detected capacity change from 0 to 1024 [ 101.426309][ T7301] EXT4-fs: Ignoring removed orlov option [ 101.434067][ T7301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.665618][ T7317] netlink: 'syz.3.1170': attribute type 27 has an invalid length. [ 101.724027][ T7316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7316 comm=syz.2.1175 [ 101.757084][ T7325] random: crng reseeded on system resumption [ 101.783970][ T7325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.809814][ T7325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.833905][ T7331] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1181'. [ 101.843550][ T7325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1179'. [ 101.868024][ T7331] FAULT_INJECTION: forcing a failure. [ 101.868024][ T7331] name failslab, interval 1, probability 0, space 0, times 0 [ 101.880847][ T7331] CPU: 1 UID: 0 PID: 7331 Comm: syz.4.1181 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 101.880912][ T7331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.880924][ T7331] Call Trace: [ 101.880930][ T7331] [ 101.880936][ T7331] __dump_stack+0x1d/0x30 [ 101.880956][ T7331] dump_stack_lvl+0xe8/0x140 [ 101.880975][ T7331] dump_stack+0x15/0x1b [ 101.881032][ T7331] should_fail_ex+0x265/0x280 [ 101.881056][ T7331] ? crypto_larval_alloc+0x3b/0x1b0 [ 101.881075][ T7331] should_failslab+0x8c/0xb0 [ 101.881126][ T7331] __kmalloc_cache_noprof+0x4c/0x320 [ 101.881204][ T7331] crypto_larval_alloc+0x3b/0x1b0 [ 101.881222][ T7331] crypto_alg_mod_lookup+0x185/0x490 [ 101.881246][ T7331] crypto_find_alg+0x61/0x70 [ 101.881266][ T7331] crypto_type_has_alg+0x28/0x60 [ 101.881334][ T7331] crypto_has_ahash+0x27/0x40 [ 101.881393][ T7331] xfrm_aalg_get_byname+0x10a/0x170 [ 101.881415][ T7331] xfrm_add_sa+0x13fa/0x2410 [ 101.881442][ T7331] xfrm_user_rcv_msg+0x566/0x660 [ 101.881467][ T7331] ? obj_cgroup_charge_account+0x122/0x1a0 [ 101.881511][ T7331] netlink_rcv_skb+0x120/0x220 [ 101.881584][ T7331] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 101.881614][ T7331] xfrm_netlink_rcv+0x48/0x60 [ 101.881669][ T7331] netlink_unicast+0x5a5/0x680 [ 101.881697][ T7331] netlink_sendmsg+0x58b/0x6b0 [ 101.881726][ T7331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.881819][ T7331] __sock_sendmsg+0x145/0x180 [ 101.881874][ T7331] ____sys_sendmsg+0x31e/0x4e0 [ 101.881904][ T7331] ___sys_sendmsg+0x17b/0x1d0 [ 101.881949][ T7331] __x64_sys_sendmsg+0xd4/0x160 [ 101.881982][ T7331] x64_sys_call+0x2999/0x2fb0 [ 101.882037][ T7331] do_syscall_64+0xd2/0x200 [ 101.882055][ T7331] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 101.882081][ T7331] ? clear_bhb_loop+0x40/0x90 [ 101.882129][ T7331] ? clear_bhb_loop+0x40/0x90 [ 101.882200][ T7331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.882221][ T7331] RIP: 0033:0x7f112ddbe929 [ 101.882235][ T7331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.882251][ T7331] RSP: 002b:00007f112c41f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.882266][ T7331] RAX: ffffffffffffffda RBX: 00007f112dfe5fa0 RCX: 00007f112ddbe929 [ 101.882316][ T7331] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 101.882327][ T7331] RBP: 00007f112c41f090 R08: 0000000000000000 R09: 0000000000000000 [ 101.882367][ T7331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.882378][ T7331] R13: 0000000000000000 R14: 00007f112dfe5fa0 R15: 00007ffdaa77d298 [ 101.882394][ T7331] [ 102.200969][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.302332][ T7349] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 102.369750][ T7335] loop5: detected capacity change from 0 to 256 [ 102.383089][ T7335] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 102.383089][ T7335] program syz.5.1183 not setting count and/or reply_len properly [ 102.517689][ T7358] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.584004][ T7357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7357 comm=syz.5.1189 [ 102.941483][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 102.941497][ T29] audit: type=1400 audit(102.923:5771): avc: denied { execute } for pid=7365 comm="syz.5.1192" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=18658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 103.109760][ T7376] loop5: detected capacity change from 0 to 512 [ 103.128983][ T7376] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.223287][ T7376] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.286039][ T7376] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1195: corrupted xattr block 32: bad e_name length [ 103.309890][ T29] audit: type=1400 audit(103.293:5772): avc: denied { create } for pid=7386 comm="syz.2.1198" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=vsock_socket permissive=1 [ 103.329505][ T29] audit: type=1400 audit(103.293:5773): avc: denied { create } for pid=7386 comm="syz.2.1198" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 103.347489][ T7376] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 103.351227][ T29] audit: type=1400 audit(103.293:5774): avc: denied { write } for pid=7386 comm="syz.2.1198" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 103.397543][ T7376] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1195: corrupted xattr block 32: bad e_name length [ 103.446274][ T7376] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 103.471561][ T7376] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1195: corrupted xattr block 32: bad e_name length [ 103.497511][ T7376] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1195: corrupted xattr block 32: bad e_name length [ 103.512819][ T7405] random: crng reseeded on system resumption [ 103.521183][ T7405] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1203'. [ 103.546260][ T7376] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 103.579845][ T4237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.592635][ T7409] 9pnet_virtio: no channels available for device 127.0.0.1 [ 103.610149][ T7413] batadv_slave_0: entered promiscuous mode [ 103.615636][ T7411] binfmt_misc: register: failed to install interpreter file ./file0 [ 103.627422][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1206'. [ 103.647269][ T7413] batadv_slave_0 (unregistering): left promiscuous mode [ 103.660579][ T7413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.684713][ T29] audit: type=1326 audit(103.663:5775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7416 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafebb3e929 code=0x7ffc0000 [ 103.707621][ T29] audit: type=1326 audit(103.663:5776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7416 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafebb3e929 code=0x7ffc0000 [ 103.731293][ T29] audit: type=1326 audit(103.713:5777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7416 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fafebb3e929 code=0x7ffc0000 [ 103.754200][ T29] audit: type=1326 audit(103.713:5778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7416 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafebb3e929 code=0x7ffc0000 [ 103.777703][ T29] audit: type=1326 audit(103.713:5779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7416 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafebb3e929 code=0x7ffc0000 [ 103.800590][ T29] audit: type=1326 audit(103.713:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7416 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafebb3e929 code=0x7ffc0000 [ 103.824415][ T7420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7420 comm=syz.2.1208 [ 103.867033][ T7425] loop5: detected capacity change from 0 to 1024 [ 103.879671][ T7426] FAULT_INJECTION: forcing a failure. [ 103.879671][ T7426] name failslab, interval 1, probability 0, space 0, times 0 [ 103.892405][ T7426] CPU: 0 UID: 0 PID: 7426 Comm: syz.2.1211 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 103.892430][ T7426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.892491][ T7426] Call Trace: [ 103.892498][ T7426] [ 103.892507][ T7426] __dump_stack+0x1d/0x30 [ 103.892529][ T7426] dump_stack_lvl+0xe8/0x140 [ 103.892566][ T7426] dump_stack+0x15/0x1b [ 103.892612][ T7426] should_fail_ex+0x265/0x280 [ 103.892644][ T7426] should_failslab+0x8c/0xb0 [ 103.892692][ T7426] __kmalloc_noprof+0xa5/0x3e0 [ 103.892713][ T7426] ? kernfs_fop_read_iter+0xd9/0x300 [ 103.892828][ T7426] kernfs_fop_read_iter+0xd9/0x300 [ 103.892853][ T7426] copy_splice_read+0x3c1/0x5f0 [ 103.892935][ T7426] ? __pfx_copy_splice_read+0x10/0x10 [ 103.892963][ T7426] splice_direct_to_actor+0x26c/0x680 [ 103.892991][ T7426] ? __pfx_direct_splice_actor+0x10/0x10 [ 103.893076][ T7426] do_splice_direct+0xda/0x150 [ 103.893111][ T7426] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 103.893147][ T7426] do_sendfile+0x380/0x650 [ 103.893191][ T7426] __x64_sys_sendfile64+0x105/0x150 [ 103.893215][ T7426] x64_sys_call+0xb39/0x2fb0 [ 103.893252][ T7426] do_syscall_64+0xd2/0x200 [ 103.893271][ T7426] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 103.893298][ T7426] ? clear_bhb_loop+0x40/0x90 [ 103.893320][ T7426] ? clear_bhb_loop+0x40/0x90 [ 103.893417][ T7426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.893510][ T7426] RIP: 0033:0x7fafebb3e929 [ 103.893527][ T7426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.893551][ T7426] RSP: 002b:00007fafea19f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 103.893643][ T7426] RAX: ffffffffffffffda RBX: 00007fafebd65fa0 RCX: 00007fafebb3e929 [ 103.893695][ T7426] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 103.893708][ T7426] RBP: 00007fafea19f090 R08: 0000000000000000 R09: 0000000000000000 [ 103.893721][ T7426] R10: 0000000000000104 R11: 0000000000000246 R12: 0000000000000001 [ 103.893732][ T7426] R13: 0000000000000000 R14: 00007fafebd65fa0 R15: 00007ffd378377a8 [ 103.893753][ T7426] [ 103.895095][ T7425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.096651][ T7432] lo: entered promiscuous mode [ 104.290740][ T4237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.322500][ T7438] random: crng reseeded on system resumption [ 104.337014][ T7432] tunl0: entered promiscuous mode [ 104.370867][ T7438] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1216'. [ 104.380082][ T7432] gre0: entered promiscuous mode [ 104.408658][ T7432] gretap0: entered promiscuous mode [ 104.433654][ T7432] erspan0: entered promiscuous mode [ 104.466730][ T7432] ip_vti0: entered promiscuous mode [ 104.474721][ T7432] ip6_vti0: entered promiscuous mode [ 104.480245][ T7432] sit0: entered promiscuous mode [ 104.485380][ T7432] ip6tnl0: entered promiscuous mode [ 104.491714][ T7432] ip6gre0: entered promiscuous mode [ 104.497207][ T7432] syz_tun: entered promiscuous mode [ 104.502615][ T7432] ip6gretap0: entered promiscuous mode [ 104.508359][ T7432] bridge0: entered promiscuous mode [ 104.515237][ T7432] vcan0: entered promiscuous mode [ 104.520450][ T7432] bond0: entered promiscuous mode [ 104.525527][ T7432] bond_slave_0: entered promiscuous mode [ 104.531277][ T7432] bond_slave_1: entered promiscuous mode [ 104.536963][ T7432] bridge_slave_1: entered promiscuous mode [ 104.544866][ T7432] team0: entered promiscuous mode [ 104.550164][ T7432] team_slave_0: entered promiscuous mode [ 104.555912][ T7432] team_slave_1: entered promiscuous mode [ 104.563193][ T7432] dummy0: entered promiscuous mode [ 104.568519][ T7432] nlmon0: entered promiscuous mode [ 104.573959][ T7432] caif0: entered promiscuous mode [ 104.580183][ T7432] batadv0: entered promiscuous mode [ 104.585586][ T7432] vxcan0: entered promiscuous mode [ 104.590877][ T7432] vxcan1: entered promiscuous mode [ 104.596228][ T7432] veth0: entered promiscuous mode [ 104.602492][ T7432] veth1: entered promiscuous mode [ 104.607691][ T7432] wg1: entered promiscuous mode [ 104.612678][ T7432] wg2: entered promiscuous mode [ 104.617786][ T7432] veth0_to_bridge: entered promiscuous mode [ 104.624820][ T7432] veth1_to_bridge: entered promiscuous mode [ 104.631165][ T7432] veth0_to_bond: entered promiscuous mode [ 104.637075][ T7432] veth1_to_bond: entered promiscuous mode [ 104.644382][ T7432] veth0_to_team: entered promiscuous mode [ 104.651401][ T7432] veth1_to_team: entered promiscuous mode [ 104.657626][ T7432] veth0_to_batadv: entered promiscuous mode [ 104.664586][ T7432] batadv_slave_0: entered promiscuous mode [ 104.670936][ T7432] veth1_to_batadv: entered promiscuous mode [ 104.677089][ T7432] batadv_slave_1: entered promiscuous mode [ 104.684109][ T7432] xfrm0: entered promiscuous mode [ 104.689362][ T7432] veth0_to_hsr: entered promiscuous mode [ 104.695383][ T7432] veth1_to_hsr: entered promiscuous mode [ 104.702359][ T7432] hsr0: entered promiscuous mode [ 104.707620][ T7432] veth1_virt_wifi: entered promiscuous mode [ 104.713755][ T7432] veth0_virt_wifi: entered promiscuous mode [ 104.721282][ T7432] macvlan0: entered promiscuous mode [ 104.726697][ T7432] macvlan1: entered promiscuous mode [ 104.732212][ T7432] ipvlan0: entered promiscuous mode [ 104.737563][ T7432] ipvlan1: entered promiscuous mode [ 104.744493][ T7432] macvtap0: entered promiscuous mode [ 104.749930][ T7432] macsec0: entered promiscuous mode [ 104.827773][ T7432] geneve0: entered promiscuous mode [ 104.833219][ T7432] geneve1: entered promiscuous mode [ 104.838613][ T7432] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 104.846902][ T7432] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 104.854738][ T7432] netdevsim netdevsim7 netdevsim2: entered promiscuous mode [ 104.863050][ T7432] netdevsim netdevsim7 netdevsim3: entered promiscuous mode [ 105.114132][ T7457] loop5: detected capacity change from 0 to 512 [ 105.146589][ T7457] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.155736][ T7457] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 105.170493][ T7455] loop7: detected capacity change from 0 to 512 [ 105.195386][ T7455] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 105.219039][ T7457] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 105.239532][ T7455] EXT4-fs (loop7): 1 truncate cleaned up [ 105.245630][ T7455] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.264735][ T7457] System zones: 0-2, 18-18, 34-34 [ 105.277820][ T7457] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.1215: iget: bad i_size value: 360287970189639680 [ 105.322021][ T7457] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.1215: couldn't read orphan inode 15 (err -117) [ 105.344452][ T7470] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1225'. [ 105.351082][ T7460] netlink: 'syz.4.1223': attribute type 10 has an invalid length. [ 105.361438][ T7460] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1223'. [ 105.379543][ T7457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.413730][ T7460] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.422515][ T7460] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.431261][ T7460] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.439978][ T7460] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.467859][ T7478] random: crng reseeded on system resumption [ 105.476720][ T7457] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 3: comm syz.5.1215: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 105.480419][ T7478] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1228'. [ 105.505913][ T7460] team0: Port device geneve1 added [ 105.536139][ T7482] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 105.546198][ T7481] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 3: comm syz.5.1215: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 105.587000][ T7487] loop4: detected capacity change from 0 to 256 [ 105.593454][ T7484] loop3: detected capacity change from 0 to 512 [ 105.611299][ T4237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.625907][ T7487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1231'. [ 105.630192][ T7484] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.643736][ T7487] netlink: 'syz.4.1231': attribute type 13 has an invalid length. [ 105.652734][ T5070] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.672146][ T7496] FAULT_INJECTION: forcing a failure. [ 105.672146][ T7496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.680764][ T7484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.685227][ T7496] CPU: 0 UID: 0 PID: 7496 Comm: syz.7.1234 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 105.685257][ T7496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.685316][ T7496] Call Trace: [ 105.685323][ T7496] [ 105.685330][ T7496] __dump_stack+0x1d/0x30 [ 105.685358][ T7496] dump_stack_lvl+0xe8/0x140 [ 105.685413][ T7496] dump_stack+0x15/0x1b [ 105.685430][ T7496] should_fail_ex+0x265/0x280 [ 105.685519][ T7496] should_fail+0xb/0x20 [ 105.685583][ T7496] should_fail_usercopy+0x1a/0x20 [ 105.685613][ T7496] _copy_from_user+0x1c/0xb0 [ 105.685633][ T7496] simple_transaction_get+0xe2/0x130 [ 105.685662][ T7496] selinux_transaction_write+0x9d/0x110 [ 105.685735][ T7496] ? __pfx_selinux_transaction_write+0x10/0x10 [ 105.685797][ T7496] vfs_write+0x269/0x8e0 [ 105.685826][ T7496] ? __rcu_read_unlock+0x4f/0x70 [ 105.685847][ T7496] ? __fget_files+0x184/0x1c0 [ 105.685924][ T7496] ksys_write+0xda/0x1a0 [ 105.685999][ T7496] __x64_sys_write+0x40/0x50 [ 105.686028][ T7496] x64_sys_call+0x2cdd/0x2fb0 [ 105.686050][ T7496] do_syscall_64+0xd2/0x200 [ 105.686067][ T7496] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 105.686097][ T7496] ? clear_bhb_loop+0x40/0x90 [ 105.686117][ T7496] ? clear_bhb_loop+0x40/0x90 [ 105.686139][ T7496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.686160][ T7496] RIP: 0033:0x7f673d4be929 [ 105.686174][ T7496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.686203][ T7496] RSP: 002b:00007f673bb27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.686221][ T7496] RAX: ffffffffffffffda RBX: 00007f673d6e5fa0 RCX: 00007f673d4be929 [ 105.686234][ T7496] RDX: 000000000000005c RSI: 0000200000000340 RDI: 0000000000000006 [ 105.686246][ T7496] RBP: 00007f673bb27090 R08: 0000000000000000 R09: 0000000000000000 [ 105.686258][ T7496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.686269][ T7496] R13: 0000000000000000 R14: 00007f673d6e5fa0 R15: 00007ffe7f2d7858 [ 105.686286][ T7496] [ 105.920857][ T7484] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1230: corrupted xattr block 32: bad e_name length [ 105.935021][ T7484] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 105.957508][ T7484] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1230: corrupted xattr block 32: bad e_name length [ 105.972062][ T7484] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 105.981419][ T7484] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1230: corrupted xattr block 32: bad e_name length [ 105.995491][ T7484] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1230: corrupted xattr block 32: bad e_name length [ 106.015128][ T7484] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 106.040096][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.072262][ T7517] loop3: detected capacity change from 0 to 512 [ 106.079904][ T7517] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.089018][ T7517] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 106.100246][ T7517] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 106.108356][ T7517] System zones: 0-2, 18-18, 34-34 [ 106.113939][ T7517] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1242: iget: bad i_size value: 360287970189639680 [ 106.131332][ T7517] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1242: couldn't read orphan inode 15 (err -117) [ 106.158057][ T7517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.182603][ T7524] loop5: detected capacity change from 0 to 512 [ 106.189602][ T7524] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 106.200471][ T7517] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 3: comm syz.3.1242: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 106.209933][ T7524] EXT4-fs (loop5): 1 truncate cleaned up [ 106.225896][ T7524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.226384][ T7517] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 3: comm syz.3.1242: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 106.323476][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.350176][ T7531] netlink: 'syz.3.1245': attribute type 21 has an invalid length. [ 106.358084][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 106.431916][ T4237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.521045][ T7536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7536 comm=syz.5.1246 [ 106.595626][ T7538] can0: slcan on ttyS3. [ 106.609473][ T7538] netlink: 'syz.3.1247': attribute type 1 has an invalid length. [ 106.669285][ T7537] can0 (unregistered): slcan off ttyS3. [ 106.735481][ T7544] loop3: detected capacity change from 0 to 1024 [ 106.742570][ T7544] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 106.753630][ T7544] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.769199][ T7544] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 106.781909][ T7547] netlink: 'syz.4.1251': attribute type 10 has an invalid length. [ 106.787489][ T7544] EXT4-fs (loop3): orphan cleanup on readonly fs [ 106.800127][ T7544] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.1250: Inode bitmap for bg 0 marked uninitialized [ 106.800482][ T7547] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 106.829652][ T7544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.891947][ T7548] loop4: detected capacity change from 0 to 4096 [ 106.907865][ T7548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.945844][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.019817][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.029042][ T7540] netlink: 'syz.5.1248': attribute type 10 has an invalid length. [ 107.030486][ T7549] delete_channel: no stack [ 107.038732][ T7540] team0: Device hsr_slave_0 failed to register rx_handler [ 107.102763][ T7566] netlink: 'syz.7.1258': attribute type 21 has an invalid length. [ 107.117050][ T7559] loop5: detected capacity change from 0 to 512 [ 107.127327][ T7559] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 107.137396][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1258'. [ 107.147909][ T7559] EXT4-fs (loop5): 1 truncate cleaned up [ 107.154497][ T7559] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.184307][ T7573] can0: slcan on ttyS3. [ 107.189858][ T7573] netlink: 'syz.3.1260': attribute type 1 has an invalid length. [ 107.238890][ T7572] can0 (unregistered): slcan off ttyS3. [ 107.294846][ T4237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.324392][ T7579] loop5: detected capacity change from 0 to 512 [ 107.331711][ T7579] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.340791][ T7579] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 107.352595][ T7579] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 107.364778][ T7579] System zones: 0-2, 18-18, 34-34 [ 107.371437][ T7579] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.1262: iget: bad i_size value: 360287970189639680 [ 107.384909][ T7579] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.1262: couldn't read orphan inode 15 (err -117) [ 107.398877][ T7579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.431186][ T7584] lo speed is unknown, defaulting to 1000 [ 107.525670][ T7579] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 3: comm syz.5.1262: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 107.582973][ T7587] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 3: comm syz.5.1262: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 107.626363][ T4237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.711739][ T7591] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1266'. [ 107.828189][ T7600] netlink: 'syz.7.1269': attribute type 1 has an invalid length. [ 108.139999][ T7609] loop4: detected capacity change from 0 to 512 [ 108.157144][ T7609] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.183069][ T7609] EXT4-fs (loop4): 1 truncate cleaned up [ 108.193499][ T7609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.213501][ T7611] loop7: detected capacity change from 0 to 4096 [ 108.224733][ T7611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.265667][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 108.265681][ T29] audit: type=1400 audit(108.241:5916): avc: denied { setattr } for pid=7610 comm="syz.7.1273" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.464497][ T5070] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.518812][ T7620] netlink: 'syz.7.1274': attribute type 21 has an invalid length. [ 108.537333][ T7620] __nla_validate_parse: 1 callbacks suppressed [ 108.537378][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1274'. [ 108.571714][ T29] audit: type=1326 audit(108.551:5917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673d4be929 code=0x7ffc0000 [ 108.604578][ T29] audit: type=1326 audit(108.551:5918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f673d4be929 code=0x7ffc0000 [ 108.627796][ T29] audit: type=1326 audit(108.551:5919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673d4be929 code=0x7ffc0000 [ 108.650776][ T29] audit: type=1326 audit(108.551:5920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f673d4be929 code=0x7ffc0000 [ 108.673577][ T29] audit: type=1326 audit(108.581:5921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673d4be929 code=0x7ffc0000 [ 108.696443][ T29] audit: type=1326 audit(108.581:5922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f673d4f11e5 code=0x7ffc0000 [ 108.719276][ T29] audit: type=1326 audit(108.581:5923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673d4be929 code=0x7ffc0000 [ 108.860615][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.908949][ T29] audit: type=1326 audit(108.731:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f673d4be929 code=0x7ffc0000 [ 109.262251][ T29] audit: type=1326 audit(109.241:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7653 comm="syz.5.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe5a8e929 code=0x7ffc0000 [ 109.340257][ T7656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7656 comm=syz.5.1286 [ 109.469944][ T7659] FAULT_INJECTION: forcing a failure. [ 109.469944][ T7659] name failslab, interval 1, probability 0, space 0, times 0 [ 109.482668][ T7659] CPU: 0 UID: 0 PID: 7659 Comm: syz.3.1287 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 109.482698][ T7659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.482835][ T7659] Call Trace: [ 109.482840][ T7659] [ 109.482846][ T7659] __dump_stack+0x1d/0x30 [ 109.482908][ T7659] dump_stack_lvl+0xe8/0x140 [ 109.482919][ T7659] dump_stack+0x15/0x1b [ 109.482935][ T7659] should_fail_ex+0x265/0x280 [ 109.482952][ T7659] should_failslab+0x8c/0xb0 [ 109.482965][ T7659] kmem_cache_alloc_node_noprof+0x57/0x320 [ 109.482981][ T7659] ? __alloc_skb+0x101/0x320 [ 109.483026][ T7659] __alloc_skb+0x101/0x320 [ 109.483041][ T7659] inet_ifmcaddr_notify+0x64/0x120 [ 109.483055][ T7659] __ip_mc_dec_group+0x1ac/0x3d0 [ 109.483068][ T7659] ip_mc_down+0x13d/0x1c0 [ 109.483146][ T7659] inetdev_event+0x1b3/0xc10 [ 109.483162][ T7659] ? __rcu_read_unlock+0x4f/0x70 [ 109.483175][ T7659] ? ib_netdevice_event+0x281/0x5f0 [ 109.483195][ T7659] ? __pfx_arp_netdev_event+0x10/0x10 [ 109.483207][ T7659] ? __pfx_inetdev_event+0x10/0x10 [ 109.483253][ T7659] raw_notifier_call_chain+0x6c/0x1b0 [ 109.483264][ T7659] ? call_netdevice_notifiers_info+0x9c/0x100 [ 109.483278][ T7659] call_netdevice_notifiers_info+0xae/0x100 [ 109.483345][ T7659] dev_close_many+0x170/0x240 [ 109.483433][ T7659] unregister_netdevice_many_notify+0x441/0x1690 [ 109.483452][ T7659] ? add_timer_global+0x51/0x70 [ 109.483469][ T7659] ? queue_delayed_work_on+0x106/0x170 [ 109.483481][ T7659] unregister_netdevice_queue+0x1f5/0x220 [ 109.483549][ T7659] __tun_detach+0x7db/0xad0 [ 109.483566][ T7659] ? __pfx_tun_chr_close+0x10/0x10 [ 109.483580][ T7659] tun_chr_close+0x5a/0x100 [ 109.483593][ T7659] __fput+0x29b/0x650 [ 109.483678][ T7659] fput_close_sync+0x6e/0x120 [ 109.483692][ T7659] __x64_sys_close+0x56/0xf0 [ 109.483743][ T7659] x64_sys_call+0x2747/0x2fb0 [ 109.483764][ T7659] do_syscall_64+0xd2/0x200 [ 109.483783][ T7659] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 109.483866][ T7659] ? clear_bhb_loop+0x40/0x90 [ 109.483903][ T7659] ? clear_bhb_loop+0x40/0x90 [ 109.483915][ T7659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.483927][ T7659] RIP: 0033:0x7fe10397e929 [ 109.483941][ T7659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.483958][ T7659] RSP: 002b:00007fe101fe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 109.483977][ T7659] RAX: ffffffffffffffda RBX: 00007fe103ba5fa0 RCX: 00007fe10397e929 [ 109.484067][ T7659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 109.484075][ T7659] RBP: 00007fe101fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 109.484081][ T7659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.484088][ T7659] R13: 0000000000000000 R14: 00007fe103ba5fa0 R15: 00007fffe566da68 [ 109.484098][ T7659] [ 109.794733][ T7666] netlink: 'syz.5.1289': attribute type 21 has an invalid length. [ 109.804002][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1289'. [ 109.834967][ T7663] netlink: 'syz.4.1288': attribute type 10 has an invalid length. [ 109.846414][ T7663] team0: Device hsr_slave_0 failed to register rx_handler [ 109.902324][ T7671] loop7: detected capacity change from 0 to 512 [ 109.926225][ T7671] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 109.952553][ T7671] EXT4-fs (loop7): 1 truncate cleaned up [ 109.959336][ T7671] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.029760][ T7684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7684 comm=syz.3.1295 [ 110.100319][ T7698] FAULT_INJECTION: forcing a failure. [ 110.100319][ T7698] name failslab, interval 1, probability 0, space 0, times 0 [ 110.112984][ T7698] CPU: 0 UID: 0 PID: 7698 Comm: syz.3.1299 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 110.113014][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.113027][ T7698] Call Trace: [ 110.113033][ T7698] [ 110.113041][ T7698] __dump_stack+0x1d/0x30 [ 110.113141][ T7698] dump_stack_lvl+0xe8/0x140 [ 110.113279][ T7698] dump_stack+0x15/0x1b [ 110.113295][ T7698] should_fail_ex+0x265/0x280 [ 110.113328][ T7698] should_failslab+0x8c/0xb0 [ 110.113399][ T7698] __kmalloc_cache_node_noprof+0x54/0x320 [ 110.113423][ T7698] ? __get_vm_area_node+0x106/0x1d0 [ 110.113445][ T7698] ? selinux_file_open+0x2df/0x330 [ 110.113541][ T7698] __get_vm_area_node+0x106/0x1d0 [ 110.113580][ T7698] __vmalloc_node_range_noprof+0x273/0xe00 [ 110.113685][ T7698] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 110.113715][ T7698] ? mntput+0x4b/0x80 [ 110.113757][ T7698] ? __rcu_read_unlock+0x4f/0x70 [ 110.113776][ T7698] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 110.113812][ T7698] __vmalloc_noprof+0x83/0xc0 [ 110.113850][ T7698] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 110.113876][ T7698] bpf_prog_alloc_no_stats+0x47/0x390 [ 110.113937][ T7698] ? bpf_prog_alloc+0x2a/0x150 [ 110.113975][ T7698] bpf_prog_alloc+0x3c/0x150 [ 110.113999][ T7698] bpf_prog_create_from_user+0x7d/0x260 [ 110.114082][ T7698] ? __pfx_seccomp_check_filter+0x10/0x10 [ 110.114106][ T7698] do_seccomp+0x5ef/0xa40 [ 110.114131][ T7698] prctl_set_seccomp+0x4c/0x70 [ 110.114165][ T7698] __se_sys_prctl+0x238/0x1300 [ 110.114212][ T7698] __x64_sys_prctl+0x67/0x80 [ 110.114235][ T7698] x64_sys_call+0x2a96/0x2fb0 [ 110.114253][ T7698] do_syscall_64+0xd2/0x200 [ 110.114269][ T7698] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 110.114368][ T7698] ? clear_bhb_loop+0x40/0x90 [ 110.114389][ T7698] ? clear_bhb_loop+0x40/0x90 [ 110.114412][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.114434][ T7698] RIP: 0033:0x7fe10397e929 [ 110.114449][ T7698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.114547][ T7698] RSP: 002b:00007fe101fe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 110.114564][ T7698] RAX: ffffffffffffffda RBX: 00007fe103ba5fa0 RCX: 00007fe10397e929 [ 110.114576][ T7698] RDX: 0000200000000000 RSI: 0000000000000002 RDI: 0000000000000016 [ 110.114587][ T7698] RBP: 00007fe101fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.114598][ T7698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.114609][ T7698] R13: 0000000000000000 R14: 00007fe103ba5fa0 R15: 00007fffe566da68 [ 110.114627][ T7698] [ 110.114634][ T7698] syz.3.1299: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 110.114802][ T7699] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1290'. [ 110.127145][ T7698] ,cpuset=/,mems_allowed=0 [ 110.127173][ T7698] CPU: 0 UID: 0 PID: 7698 Comm: syz.3.1299 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 110.127198][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.127209][ T7698] Call Trace: [ 110.127215][ T7698] [ 110.127222][ T7698] __dump_stack+0x1d/0x30 [ 110.127252][ T7698] dump_stack_lvl+0xe8/0x140 [ 110.127272][ T7698] dump_stack+0x15/0x1b [ 110.127367][ T7698] warn_alloc+0x12b/0x1a0 [ 110.127394][ T7698] ? selinux_file_open+0x2df/0x330 [ 110.127422][ T7698] __vmalloc_node_range_noprof+0x297/0xe00 [ 110.127489][ T7698] ? mntput+0x4b/0x80 [ 110.127531][ T7698] ? __rcu_read_unlock+0x4f/0x70 [ 110.127551][ T7698] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 110.127597][ T7698] __vmalloc_noprof+0x83/0xc0 [ 110.127680][ T7698] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 110.127709][ T7698] bpf_prog_alloc_no_stats+0x47/0x390 [ 110.127814][ T7698] ? bpf_prog_alloc+0x2a/0x150 [ 110.127841][ T7698] bpf_prog_alloc+0x3c/0x150 [ 110.127868][ T7698] bpf_prog_create_from_user+0x7d/0x260 [ 110.127913][ T7698] ? __pfx_seccomp_check_filter+0x10/0x10 [ 110.127937][ T7698] do_seccomp+0x5ef/0xa40 [ 110.127982][ T7698] prctl_set_seccomp+0x4c/0x70 [ 110.128003][ T7698] __se_sys_prctl+0x238/0x1300 [ 110.128032][ T7698] __x64_sys_prctl+0x67/0x80 [ 110.128111][ T7698] x64_sys_call+0x2a96/0x2fb0 [ 110.128132][ T7698] do_syscall_64+0xd2/0x200 [ 110.128160][ T7698] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 110.128186][ T7698] ? clear_bhb_loop+0x40/0x90 [ 110.128206][ T7698] ? clear_bhb_loop+0x40/0x90 [ 110.128227][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.128282][ T7698] RIP: 0033:0x7fe10397e929 [ 110.128296][ T7698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.128313][ T7698] RSP: 002b:00007fe101fe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 110.128331][ T7698] RAX: ffffffffffffffda RBX: 00007fe103ba5fa0 RCX: 00007fe10397e929 [ 110.128343][ T7698] RDX: 0000200000000000 RSI: 0000000000000002 RDI: 0000000000000016 [ 110.128355][ T7698] RBP: 00007fe101fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.128367][ T7698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.128434][ T7698] R13: 0000000000000000 R14: 00007fe103ba5fa0 R15: 00007fffe566da68 [ 110.128453][ T7698] [ 110.128472][ T7698] Mem-Info: [ 110.145225][ T7699] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1290'. [ 110.147838][ T7698] active_anon:33232 inactive_anon:4 isolated_anon:0 [ 110.147838][ T7698] active_file:22161 inactive_file:2331 isolated_file:0 [ 110.147838][ T7698] unevictable:0 dirty:14 writeback:0 [ 110.147838][ T7698] slab_reclaimable:3369 slab_unreclaimable:15705 [ 110.147838][ T7698] mapped:32009 shmem:30099 pagetables:974 [ 110.147838][ T7698] sec_pagetables:0 bounce:0 [ 110.147838][ T7698] kernel_misc_reclaimable:0 [ 110.147838][ T7698] free:1854992 free_pcp:13316 free_cma:0 [ 110.152527][ T7699] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1290'. [ 110.699501][ T7698] Node 0 active_anon:132760kB inactive_anon:16kB active_file:88644kB inactive_file:9356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128080kB dirty:112kB writeback:0kB shmem:120508kB writeback_tmp:0kB kernel_stack:3248kB pagetables:4212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 110.728612][ T7698] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 110.729871][ T5070] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.757207][ T7698] lowmem_reserve[]: 0 2882 7860 7860 [ 110.771552][ T7698] Node 0 DMA32 free:2947728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 110.801820][ T7698] lowmem_reserve[]: 0 0 4978 4978 [ 110.806896][ T7698] Node 0 Normal free:4463504kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:132760kB inactive_anon:16kB active_file:88644kB inactive_file:9356kB unevictable:0kB writepending:112kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:42440kB local_pcp:21740kB free_cma:0kB [ 110.838997][ T7698] lowmem_reserve[]: 0 0 0 0 [ 110.843548][ T7698] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 110.856284][ T7698] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947728kB [ 110.872466][ T7698] Node 0 Normal: 225*4kB (UE) 225*8kB (UME) 101*16kB (UME) 270*32kB (UME) 177*64kB (UME) 88*128kB (UME) 63*256kB (UME) 39*512kB (UME) 33*1024kB (UME) 26*2048kB (UM) 1051*4096kB (UM) = 4463580kB [ 110.891802][ T7698] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 110.901129][ T7698] 54626 total pagecache pages [ 110.905794][ T7698] 5 pages in swap cache [ 110.909993][ T7698] Free swap = 124976kB [ 110.914173][ T7698] Total swap = 124996kB [ 110.918333][ T7698] 2097051 pages RAM [ 110.918680][ T7713] loop4: detected capacity change from 0 to 512 [ 110.922149][ T7698] 0 pages HighMem/MovableOnly [ 110.922156][ T7698] 80812 pages reserved [ 110.963500][ T7713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.212974][ T7735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7735 comm=syz.2.1311 [ 111.273125][ T7742] loop7: detected capacity change from 0 to 512 [ 111.289689][ T7742] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 111.311589][ T7742] EXT4-fs (loop7): 1 truncate cleaned up [ 111.320236][ T7742] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.332602][ T7748] lo speed is unknown, defaulting to 1000 [ 111.342050][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.349554][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.368774][ T7713] netlink: 'syz.4.1304': attribute type 1 has an invalid length. [ 111.376537][ T7713] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1304'. [ 111.377976][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.393068][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.400485][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.407979][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.415401][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.422822][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.430244][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.437623][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.445024][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.452434][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.459864][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.467308][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.474795][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.483543][ T7752] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.1304: corrupted inode contents [ 111.514189][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.515679][ T7752] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #18: comm syz.4.1304: mark_inode_dirty error [ 111.521706][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.521732][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.521752][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.555214][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.562637][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.570049][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.577528][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.584977][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.589862][ T7752] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.1304: corrupted inode contents [ 111.592377][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.611687][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.619126][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.626571][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.630478][ T7742] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1312'. [ 111.633967][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.646924][ T7752] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.1304: mark_inode_dirty error [ 111.650379][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.670878][ T7742] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1312'. [ 111.679950][ T7742] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1312'. [ 111.689850][ T3387] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 111.701852][ T7752] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.1304: mark inode dirty (error -117) [ 111.715941][ T7752] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 111.819876][ T5070] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.847665][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.019414][ T7785] netlink: 'syz.2.1326': attribute type 13 has an invalid length. [ 112.042790][ T7790] loop4: detected capacity change from 0 to 512 [ 112.062169][ T7790] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.090862][ T7790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.098548][ T7785] batman_adv: batadv0: Interface deactivated: macvlan0 [ 112.142040][ T7795] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1329'. [ 112.161226][ T7790] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1328: corrupted xattr block 32: bad e_name length [ 112.191412][ T7790] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 112.207101][ T7790] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1328: corrupted xattr block 32: bad e_name length [ 112.236617][ T7790] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 112.255782][ T7790] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1328: corrupted xattr block 32: bad e_name length [ 112.272141][ T7803] loop7: detected capacity change from 0 to 1024 [ 112.288962][ T7790] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1328: corrupted xattr block 32: bad e_name length [ 112.290157][ T7803] EXT4-fs: Ignoring removed orlov option [ 112.315319][ T7790] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 112.346843][ T7803] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.369188][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.414832][ T7810] loop3: detected capacity change from 0 to 512 [ 112.421913][ T7810] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 112.512644][ T7803] netlink: 'syz.7.1333': attribute type 27 has an invalid length. [ 112.539267][ T7803] lo: left promiscuous mode [ 112.543953][ T7803] tunl0: left promiscuous mode [ 112.548803][ T7803] gre0: left promiscuous mode [ 112.553540][ T7803] gretap0: left promiscuous mode [ 112.558629][ T7803] erspan0: left promiscuous mode [ 112.563708][ T7803] ip_vti0: left promiscuous mode [ 112.568809][ T7803] ip6_vti0: left promiscuous mode [ 112.573977][ T7803] sit0: left promiscuous mode [ 112.578825][ T7803] ip6tnl0: left promiscuous mode [ 112.583835][ T7803] ip6gre0: left promiscuous mode [ 112.588861][ T7803] syz_tun: left promiscuous mode [ 112.593872][ T7803] ip6gretap0: left promiscuous mode [ 112.599239][ T7803] bridge0: left promiscuous mode [ 112.604300][ T7803] vcan0: left promiscuous mode [ 112.609175][ T7803] bond0: left promiscuous mode [ 112.614190][ T7803] team0: left promiscuous mode [ 112.712761][ T7803] dummy0: left promiscuous mode [ 112.717794][ T7803] nlmon0: left promiscuous mode [ 112.722878][ T7803] caif0: left promiscuous mode [ 112.727694][ T7803] batadv0: left promiscuous mode [ 112.732843][ T7803] vxcan0: left promiscuous mode [ 112.737751][ T7803] vxcan1: left promiscuous mode [ 112.742673][ T7803] veth0: left promiscuous mode [ 112.747547][ T7803] veth1: left promiscuous mode [ 112.752426][ T7803] wg1: left promiscuous mode [ 112.757198][ T7803] wg2: left promiscuous mode [ 112.761900][ T7803] veth0_to_bridge: left promiscuous mode [ 112.767618][ T7803] veth1_to_bridge: left promiscuous mode [ 112.773328][ T7803] bridge_slave_1: left promiscuous mode [ 112.779024][ T7803] veth0_to_bond: left promiscuous mode [ 112.784590][ T7803] bond_slave_0: left promiscuous mode [ 112.790025][ T7803] veth1_to_bond: left promiscuous mode [ 112.795587][ T7803] bond_slave_1: left promiscuous mode [ 112.801060][ T7803] veth0_to_team: left promiscuous mode [ 112.806568][ T7803] team_slave_0: left promiscuous mode [ 112.812074][ T7803] veth1_to_team: left promiscuous mode [ 112.817634][ T7803] team_slave_1: left promiscuous mode [ 112.823152][ T7803] veth0_to_batadv: left promiscuous mode [ 112.828853][ T7803] batadv_slave_0: left promiscuous mode [ 112.834577][ T7803] veth1_to_batadv: left promiscuous mode [ 112.840279][ T7803] batadv_slave_1: left promiscuous mode [ 112.845878][ T7803] xfrm0: left promiscuous mode [ 112.850775][ T7803] veth0_to_hsr: left promiscuous mode [ 112.856305][ T7803] veth1_to_hsr: left promiscuous mode [ 112.861861][ T7803] hsr0: left promiscuous mode [ 112.866618][ T7803] veth1_virt_wifi: left promiscuous mode [ 112.872483][ T7803] veth0_virt_wifi: left promiscuous mode [ 112.878420][ T7803] macvlan0: left promiscuous mode [ 112.883605][ T7803] macvlan1: left promiscuous mode [ 112.888758][ T7803] ipvlan0: left promiscuous mode [ 112.893734][ T7803] ipvlan1: left promiscuous mode [ 112.898892][ T7803] macvtap0: left promiscuous mode [ 112.903979][ T7803] macsec0: left promiscuous mode [ 112.908994][ T7803] geneve0: left promiscuous mode [ 112.914219][ T7803] geneve1: left promiscuous mode [ 113.100920][ T7803] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 113.118270][ T7803] netdevsim netdevsim7 netdevsim1: left promiscuous mode [ 113.132268][ T7803] netdevsim netdevsim7 netdevsim2: left promiscuous mode [ 113.148806][ T7803] netdevsim netdevsim7 netdevsim3: left promiscuous mode [ 113.176406][ T5070] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.270416][ T7838] loop5: detected capacity change from 0 to 1024 [ 113.287338][ T7838] ext4: Bad value for 'barrier' [ 113.321559][ T7842] loop4: detected capacity change from 0 to 512 [ 113.332505][ T7842] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 113.345010][ T7845] netlink: 'syz.7.1348': attribute type 1 has an invalid length. [ 113.349981][ T7842] EXT4-fs (loop4): 1 truncate cleaned up [ 113.358973][ T7842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.418699][ T7855] veth0: entered promiscuous mode [ 113.435766][ T7855] veth0 (unregistering): left promiscuous mode [ 113.485184][ T7812] syz.2.1336 (7812) used greatest stack depth: 7160 bytes left [ 113.506471][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 113.506543][ T7863] SELinux: Context system_u:object_r:update_modules_exec_t:s0 is not valid (left unmapped). [ 113.506553][ T29] audit: type=1400 audit(113.481:6058): avc: denied { relabelfrom } for pid=7862 comm="syz.5.1354" name="SCTPv6" dev="sockfs" ino=18305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.585440][ T29] audit: type=1400 audit(113.501:6059): avc: denied { relabelto } for pid=7862 comm="syz.5.1354" name="SCTPv6" dev="sockfs" ino=18305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 trawcon="system_u:object_r:update_modules_exec_t:s0" [ 113.613343][ T7842] __nla_validate_parse: 4 callbacks suppressed [ 113.613355][ T7842] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1347'. [ 113.628770][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1347'. [ 113.637717][ T7842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1347'. [ 113.677073][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.685609][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.695692][ T7874] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1358'. [ 113.851111][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.429343][ T7887] netlink: 'syz.5.1362': attribute type 1 has an invalid length. [ 114.457101][ T7890] loop5: detected capacity change from 0 to 512 [ 114.465551][ T7890] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.507756][ T7890] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1363: corrupted xattr block 32: bad e_name length [ 114.522546][ T7890] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 114.532226][ T7890] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1363: corrupted xattr block 32: bad e_name length [ 114.546987][ T7890] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 114.556354][ T7890] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1363: corrupted xattr block 32: bad e_name length [ 114.572143][ T7890] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1363: corrupted xattr block 32: bad e_name length [ 114.619278][ T7890] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 114.693970][ T7905] FAULT_INJECTION: forcing a failure. [ 114.693970][ T7905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.707145][ T7905] CPU: 1 UID: 0 PID: 7905 Comm: syz.3.1370 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 114.707170][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.707239][ T7905] Call Trace: [ 114.707246][ T7905] [ 114.707254][ T7905] __dump_stack+0x1d/0x30 [ 114.707276][ T7905] dump_stack_lvl+0xe8/0x140 [ 114.707297][ T7905] dump_stack+0x15/0x1b [ 114.707314][ T7905] should_fail_ex+0x265/0x280 [ 114.707412][ T7905] should_fail+0xb/0x20 [ 114.707484][ T7905] should_fail_usercopy+0x1a/0x20 [ 114.707517][ T7905] _copy_from_user+0x1c/0xb0 [ 114.707569][ T7905] do_ipv6_setsockopt+0x220/0x22e0 [ 114.707590][ T7905] ? kstrtoull+0x111/0x140 [ 114.707615][ T7905] ? avc_has_perm_noaudit+0x1b1/0x200 [ 114.707638][ T7905] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 114.707735][ T7905] ipv6_setsockopt+0x59/0x130 [ 114.707817][ T7905] udpv6_setsockopt+0x99/0xb0 [ 114.707978][ T7905] sock_common_setsockopt+0x69/0x80 [ 114.708000][ T7905] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 114.708027][ T7905] __sys_setsockopt+0x184/0x200 [ 114.708061][ T7905] __x64_sys_setsockopt+0x64/0x80 [ 114.708093][ T7905] x64_sys_call+0x2bd5/0x2fb0 [ 114.708111][ T7905] do_syscall_64+0xd2/0x200 [ 114.708130][ T7905] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 114.708207][ T7905] ? clear_bhb_loop+0x40/0x90 [ 114.708228][ T7905] ? clear_bhb_loop+0x40/0x90 [ 114.708304][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.708390][ T7905] RIP: 0033:0x7fe10397e929 [ 114.708403][ T7905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.708421][ T7905] RSP: 002b:00007fe101fe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 114.708486][ T7905] RAX: ffffffffffffffda RBX: 00007fe103ba5fa0 RCX: 00007fe10397e929 [ 114.708498][ T7905] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 114.708509][ T7905] RBP: 00007fe101fe7090 R08: 00000000000004c0 R09: 0000000000000000 [ 114.708519][ T7905] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 114.708530][ T7905] R13: 0000000000000000 R14: 00007fe103ba5fa0 R15: 00007fffe566da68 [ 114.708548][ T7905] [ 114.984070][ T7909] loop3: detected capacity change from 0 to 1024 [ 114.991741][ T7909] EXT4-fs: Ignoring removed orlov option [ 115.065202][ T29] audit: type=1400 audit(115.041:6060): avc: denied { map } for pid=7912 comm="syz.4.1373" path="socket:[19540]" dev="sockfs" ino=19540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.087962][ T29] audit: type=1400 audit(115.041:6061): avc: denied { accept } for pid=7912 comm="syz.4.1373" path="socket:[19540]" dev="sockfs" ino=19540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.199773][ T7921] loop7: detected capacity change from 0 to 512 [ 115.216861][ T7921] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 115.237413][ T7923] FAULT_INJECTION: forcing a failure. [ 115.237413][ T7923] name failslab, interval 1, probability 0, space 0, times 0 [ 115.250189][ T7923] CPU: 0 UID: 0 PID: 7923 Comm: syz.4.1376 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 115.250244][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.250252][ T7923] Call Trace: [ 115.250256][ T7923] [ 115.250261][ T7923] __dump_stack+0x1d/0x30 [ 115.250274][ T7923] dump_stack_lvl+0xe8/0x140 [ 115.250284][ T7923] dump_stack+0x15/0x1b [ 115.250312][ T7923] should_fail_ex+0x265/0x280 [ 115.250329][ T7923] should_failslab+0x8c/0xb0 [ 115.250341][ T7923] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 115.250357][ T7923] ? p9_client_create+0x207/0xbc0 [ 115.250439][ T7923] kstrdup+0x3e/0xd0 [ 115.250512][ T7923] p9_client_create+0x207/0xbc0 [ 115.250530][ T7923] v9fs_session_init+0xf7/0xde0 [ 115.250544][ T7923] ? obj_cgroup_charge_account+0x122/0x1a0 [ 115.250560][ T7923] ? __rcu_read_unlock+0x4f/0x70 [ 115.250649][ T7923] ? v9fs_mount+0x51/0x590 [ 115.250746][ T7923] ? __kmalloc_cache_noprof+0x299/0x320 [ 115.250762][ T7923] v9fs_mount+0x67/0x590 [ 115.250777][ T7923] ? __pfx_v9fs_mount+0x10/0x10 [ 115.250846][ T7923] legacy_get_tree+0x75/0xd0 [ 115.250864][ T7923] vfs_get_tree+0x57/0x1d0 [ 115.250881][ T7923] do_new_mount+0x207/0x680 [ 115.250898][ T7923] path_mount+0x4a4/0xb20 [ 115.250966][ T7923] ? user_path_at+0x109/0x130 [ 115.250980][ T7923] __se_sys_mount+0x28f/0x2e0 [ 115.251015][ T7923] ? fput+0x8f/0xc0 [ 115.251028][ T7923] __x64_sys_mount+0x67/0x80 [ 115.251045][ T7923] x64_sys_call+0xd36/0x2fb0 [ 115.251057][ T7923] do_syscall_64+0xd2/0x200 [ 115.251131][ T7923] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 115.251146][ T7923] ? clear_bhb_loop+0x40/0x90 [ 115.251158][ T7923] ? clear_bhb_loop+0x40/0x90 [ 115.251170][ T7923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.251260][ T7923] RIP: 0033:0x7f112ddbe929 [ 115.251269][ T7923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.251279][ T7923] RSP: 002b:00007f112c3fe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.251291][ T7923] RAX: ffffffffffffffda RBX: 00007f112dfe6080 RCX: 00007f112ddbe929 [ 115.251298][ T7923] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 115.251305][ T7923] RBP: 00007f112c3fe090 R08: 0000200000000600 R09: 0000000000000000 [ 115.251324][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.251331][ T7923] R13: 0000000000000000 R14: 00007f112dfe6080 R15: 00007ffdaa77d298 [ 115.251341][ T7923] [ 115.314490][ T7909] netlink: 'syz.3.1371': attribute type 27 has an invalid length. [ 115.372767][ T7921] EXT4-fs (loop7): 1 truncate cleaned up [ 115.425704][ T29] audit: type=1400 audit(115.411:6062): avc: denied { setopt } for pid=7931 comm="syz.2.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.511072][ T7933] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1380'. [ 115.527080][ T7934] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1377'. [ 115.557942][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1377'. [ 115.566956][ T7934] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1377'. [ 115.587480][ T7932] netlink: '+}[@': attribute type 4 has an invalid length. [ 115.594811][ T7932] netlink: 17 bytes leftover after parsing attributes in process `+}[@'. [ 115.606003][ T7936] FAULT_INJECTION: forcing a failure. [ 115.606003][ T7936] name failslab, interval 1, probability 0, space 0, times 0 [ 115.618798][ T7936] CPU: 1 UID: 0 PID: 7936 Comm: syz.3.1381 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 115.618825][ T7936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.618838][ T7936] Call Trace: [ 115.618844][ T7936] [ 115.618851][ T7936] __dump_stack+0x1d/0x30 [ 115.618950][ T7936] dump_stack_lvl+0xe8/0x140 [ 115.618968][ T7936] dump_stack+0x15/0x1b [ 115.618986][ T7936] should_fail_ex+0x265/0x280 [ 115.619164][ T7936] should_failslab+0x8c/0xb0 [ 115.619187][ T7936] __kmalloc_node_noprof+0xa9/0x410 [ 115.619254][ T7936] ? __vmalloc_node_range_noprof+0x3f9/0xe00 [ 115.619281][ T7936] __vmalloc_node_range_noprof+0x3f9/0xe00 [ 115.619439][ T7936] ? sel_write_load+0x158/0x380 [ 115.619467][ T7936] vmalloc_noprof+0x82/0xc0 [ 115.619514][ T7936] ? sel_write_load+0x158/0x380 [ 115.619536][ T7936] sel_write_load+0x158/0x380 [ 115.619592][ T7936] ? __pfx_sel_write_load+0x10/0x10 [ 115.619615][ T7936] vfs_write+0x269/0x8e0 [ 115.619639][ T7936] ? __rcu_read_unlock+0x4f/0x70 [ 115.619657][ T7936] ? __fget_files+0x184/0x1c0 [ 115.619752][ T7936] ksys_write+0xda/0x1a0 [ 115.619778][ T7936] __x64_sys_write+0x40/0x50 [ 115.619815][ T7936] x64_sys_call+0x2cdd/0x2fb0 [ 115.619832][ T7936] do_syscall_64+0xd2/0x200 [ 115.619847][ T7936] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 115.619868][ T7936] ? clear_bhb_loop+0x40/0x90 [ 115.619985][ T7936] ? clear_bhb_loop+0x40/0x90 [ 115.620002][ T7936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.620026][ T7936] RIP: 0033:0x7fe10397e929 [ 115.620038][ T7936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.620053][ T7936] RSP: 002b:00007fe101fe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 115.620069][ T7936] RAX: ffffffffffffffda RBX: 00007fe103ba5fa0 RCX: 00007fe10397e929 [ 115.620079][ T7936] RDX: 0000000000000cf8 RSI: 0000200000000000 RDI: 0000000000000003 [ 115.620089][ T7936] RBP: 00007fe101fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 115.620103][ T7936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.620113][ T7936] R13: 0000000000000000 R14: 00007fe103ba5fa0 R15: 00007fffe566da68 [ 115.620128][ T7936] [ 115.890475][ T7938] SELinux: ebitmap: truncated map [ 115.895631][ T7938] SELinux: failed to load policy [ 115.933898][ T29] audit: type=1326 audit(115.911:6063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.3.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10397e929 code=0x7ffc0000 [ 115.956777][ T29] audit: type=1326 audit(115.911:6064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.3.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10397e929 code=0x7ffc0000 [ 115.993775][ T29] audit: type=1326 audit(115.921:6065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.3.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe10397e929 code=0x7ffc0000 [ 116.016735][ T29] audit: type=1326 audit(115.921:6066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.3.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10397e929 code=0x7ffc0000 [ 116.037427][ T7960] loop3: detected capacity change from 0 to 512 [ 116.040952][ T7956] FAULT_INJECTION: forcing a failure. [ 116.040952][ T7956] name failslab, interval 1, probability 0, space 0, times 0 [ 116.058487][ T7956] CPU: 1 UID: 0 PID: 7956 Comm: syz.7.1388 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 116.058512][ T7956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.058523][ T7956] Call Trace: [ 116.058528][ T7956] [ 116.058610][ T7956] __dump_stack+0x1d/0x30 [ 116.058628][ T7956] dump_stack_lvl+0xe8/0x140 [ 116.058644][ T7956] dump_stack+0x15/0x1b [ 116.058661][ T7956] should_fail_ex+0x265/0x280 [ 116.058695][ T7956] should_failslab+0x8c/0xb0 [ 116.058790][ T7956] __kvmalloc_node_noprof+0x123/0x4e0 [ 116.058822][ T7956] ? xt_alloc_table_info+0x3b/0x80 [ 116.058917][ T7956] ? should_fail_ex+0xdb/0x280 [ 116.058945][ T7956] xt_alloc_table_info+0x3b/0x80 [ 116.058969][ T7956] do_ipt_set_ctl+0x59c/0x820 [ 116.059043][ T7956] ? _raw_spin_unlock_bh+0x36/0x40 [ 116.059142][ T7956] ? tcp_release_cb+0xf1/0x370 [ 116.059170][ T7956] nf_setsockopt+0x196/0x1b0 [ 116.059187][ T7956] ip_setsockopt+0x102/0x110 [ 116.059240][ T7956] tcp_setsockopt+0x95/0xb0 [ 116.059303][ T7956] sock_common_setsockopt+0x69/0x80 [ 116.059324][ T7956] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 116.059353][ T7956] __sys_setsockopt+0x184/0x200 [ 116.059379][ T7956] __x64_sys_setsockopt+0x64/0x80 [ 116.059474][ T7956] x64_sys_call+0x2bd5/0x2fb0 [ 116.059527][ T7956] do_syscall_64+0xd2/0x200 [ 116.059542][ T7956] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 116.059563][ T7956] ? clear_bhb_loop+0x40/0x90 [ 116.059679][ T7956] ? clear_bhb_loop+0x40/0x90 [ 116.059770][ T7956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.059787][ T7956] RIP: 0033:0x7f673d4be929 [ 116.059799][ T7956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.059856][ T7956] RSP: 002b:00007f673bb27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 116.059871][ T7956] RAX: ffffffffffffffda RBX: 00007f673d6e5fa0 RCX: 00007f673d4be929 [ 116.059881][ T7956] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 116.059891][ T7956] RBP: 00007f673bb27090 R08: 0000000000000228 R09: 0000000000000000 [ 116.059901][ T7956] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 116.059911][ T7956] R13: 0000000000000000 R14: 00007f673d6e5fa0 R15: 00007ffe7f2d7858 [ 116.059926][ T7956] [ 116.296225][ T7960] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.322061][ T29] audit: type=1400 audit(116.301:6067): avc: denied { read } for pid=7965 comm="syz.4.1392" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 116.455633][ T7960] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1390: corrupted xattr block 32: bad e_name length [ 116.473552][ T7960] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 116.482640][ T7960] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1390: corrupted xattr block 32: bad e_name length [ 116.497323][ T7960] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 116.506462][ T7968] loop7: detected capacity change from 0 to 1024 [ 116.513010][ T7972] loop4: detected capacity change from 0 to 512 [ 116.519373][ T7968] EXT4-fs: Invalid want_extra_isize 0 [ 116.526676][ T7960] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1390: corrupted xattr block 32: bad e_name length [ 116.541698][ T7972] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.550758][ T7972] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 116.564889][ T7960] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1390: corrupted xattr block 32: bad e_name length [ 116.579046][ T7972] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 116.587595][ T7972] System zones: 0-2, 18-18, 34-34 [ 116.594165][ T7960] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 116.600875][ T7972] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.1394: iget: bad i_size value: 360287970189639680 [ 116.623772][ T7972] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1394: couldn't read orphan inode 15 (err -117) [ 116.644404][ T7982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.647107][ T7972] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 3: comm syz.4.1394: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 116.654286][ T7982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.675630][ T7972] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 3: comm syz.4.1394: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 116.741268][ T7989] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1401'. [ 116.750500][ T7996] FAULT_INJECTION: forcing a failure. [ 116.750500][ T7996] name failslab, interval 1, probability 0, space 0, times 0 [ 116.763195][ T7996] CPU: 1 UID: 0 PID: 7996 Comm: syz.2.1403 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 116.763217][ T7996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.763227][ T7996] Call Trace: [ 116.763232][ T7996] [ 116.763237][ T7996] __dump_stack+0x1d/0x30 [ 116.763273][ T7996] dump_stack_lvl+0xe8/0x140 [ 116.763288][ T7996] dump_stack+0x15/0x1b [ 116.763300][ T7996] should_fail_ex+0x265/0x280 [ 116.763324][ T7996] should_failslab+0x8c/0xb0 [ 116.763341][ T7996] __kmalloc_cache_node_noprof+0x54/0x320 [ 116.763443][ T7996] ? __get_vm_area_node+0x106/0x1d0 [ 116.763463][ T7996] ? putname+0xda/0x100 [ 116.763479][ T7996] __get_vm_area_node+0x106/0x1d0 [ 116.763582][ T7996] __vmalloc_node_range_noprof+0x273/0xe00 [ 116.763614][ T7996] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 116.763665][ T7996] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 116.763694][ T7996] __vmalloc_noprof+0x83/0xc0 [ 116.763722][ T7996] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 116.763827][ T7996] bpf_prog_alloc_no_stats+0x47/0x390 [ 116.763852][ T7996] ? bpf_prog_alloc+0x2a/0x150 [ 116.763917][ T7996] bpf_prog_alloc+0x3c/0x150 [ 116.763941][ T7996] bpf_prog_create_from_user+0x7d/0x260 [ 116.764013][ T7996] fanout_set_data+0x1bf/0x330 [ 116.764037][ T7996] packet_setsockopt+0x68a/0xfd0 [ 116.764059][ T7996] ? __pfx_packet_setsockopt+0x10/0x10 [ 116.764099][ T7996] __sys_setsockopt+0x184/0x200 [ 116.764182][ T7996] __x64_sys_setsockopt+0x64/0x80 [ 116.764214][ T7996] x64_sys_call+0x2bd5/0x2fb0 [ 116.764237][ T7996] do_syscall_64+0xd2/0x200 [ 116.764286][ T7996] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 116.764312][ T7996] ? clear_bhb_loop+0x40/0x90 [ 116.764334][ T7996] ? clear_bhb_loop+0x40/0x90 [ 116.764403][ T7996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.764424][ T7996] RIP: 0033:0x7fafebb3e929 [ 116.764436][ T7996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.764452][ T7996] RSP: 002b:00007fafea19f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 116.764468][ T7996] RAX: ffffffffffffffda RBX: 00007fafebd65fa0 RCX: 00007fafebb3e929 [ 116.764540][ T7996] RDX: 0000000000000016 RSI: 0000000000000107 RDI: 0000000000000003 [ 116.764594][ T7996] RBP: 00007fafea19f090 R08: 0000000000000010 R09: 0000000000000000 [ 116.764605][ T7996] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 116.764618][ T7996] R13: 0000000000000000 R14: 00007fafebd65fa0 R15: 00007ffd378377a8 [ 116.764638][ T7996] [ 117.062950][ T8006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.088843][ T8002] syzkaller0: entered promiscuous mode [ 117.094638][ T8002] syzkaller0: entered allmulticast mode [ 117.104183][ T8009] loop7: detected capacity change from 0 to 512 [ 117.111127][ T8009] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.135630][ T8009] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1408: corrupted xattr block 32: bad e_name length [ 117.150217][ T8009] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 117.159239][ T8009] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1408: corrupted xattr block 32: bad e_name length [ 117.173725][ T8009] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 117.182742][ T8009] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1408: corrupted xattr block 32: bad e_name length [ 117.212740][ T8009] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1408: corrupted xattr block 32: bad e_name length [ 117.215622][ T8019] loop4: detected capacity change from 0 to 512 [ 117.234031][ T8019] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.243283][ T8019] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 117.247614][ T8009] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 117.262209][ T8018] loop5: detected capacity change from 0 to 1024 [ 117.263274][ T8019] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 117.271103][ T8018] EXT4-fs: Ignoring removed orlov option [ 117.288742][ T8019] System zones: 0-2, 18-18, 34-34 [ 117.294289][ T8019] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.1411: iget: bad i_size value: 360287970189639680 [ 117.307867][ T8019] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1411: couldn't read orphan inode 15 (err -117) [ 117.326882][ T8019] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 3: comm syz.4.1411: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 117.346894][ T8019] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 3: comm syz.4.1411: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 117.487621][ T8033] netlink: 'syz.5.1410': attribute type 27 has an invalid length. [ 117.506965][ T8035] loop3: detected capacity change from 0 to 1024 [ 117.765362][ T8106] loop7: detected capacity change from 0 to 512 [ 117.794095][ T8106] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.831808][ T8109] loop5: detected capacity change from 0 to 512 [ 117.853060][ T8109] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 117.865239][ T8106] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1422: corrupted xattr block 32: bad e_name length [ 117.942649][ T8106] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 117.968771][ T8106] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1422: corrupted xattr block 32: bad e_name length [ 118.008835][ T8117] loop4: detected capacity change from 0 to 512 [ 118.009805][ T8106] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 118.026169][ T8117] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.035269][ T8117] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 118.067220][ T8118] loop5: detected capacity change from 0 to 512 [ 118.074240][ T8106] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1422: corrupted xattr block 32: bad e_name length [ 118.090776][ T8118] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 118.106072][ T8117] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 118.114445][ T8106] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1422: corrupted xattr block 32: bad e_name length [ 118.143529][ T8117] System zones: 0-2, 18-18, 34-34 [ 118.160795][ T8118] EXT4-fs (loop5): 1 truncate cleaned up [ 118.172267][ T8106] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 118.187563][ T8117] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.1425: iget: bad i_size value: 360287970189639680 [ 118.259261][ T8117] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1425: couldn't read orphan inode 15 (err -117) [ 118.290017][ T8129] FAULT_INJECTION: forcing a failure. [ 118.290017][ T8129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.303126][ T8129] CPU: 1 UID: 0 PID: 8129 Comm: syz.7.1429 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 118.303178][ T8129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.303195][ T8129] Call Trace: [ 118.303202][ T8129] [ 118.303210][ T8129] __dump_stack+0x1d/0x30 [ 118.303232][ T8129] dump_stack_lvl+0xe8/0x140 [ 118.303252][ T8129] dump_stack+0x15/0x1b [ 118.303306][ T8129] should_fail_ex+0x265/0x280 [ 118.303333][ T8129] should_fail+0xb/0x20 [ 118.303357][ T8129] should_fail_usercopy+0x1a/0x20 [ 118.303386][ T8129] _copy_to_user+0x20/0xa0 [ 118.303443][ T8129] simple_read_from_buffer+0xb5/0x130 [ 118.303475][ T8129] proc_fail_nth_read+0x100/0x140 [ 118.303508][ T8129] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.303536][ T8129] vfs_read+0x19d/0x6f0 [ 118.303566][ T8129] ? __sys_bpf+0x5bf/0x790 [ 118.303629][ T8129] ksys_read+0xda/0x1a0 [ 118.303656][ T8129] __x64_sys_read+0x40/0x50 [ 118.303682][ T8129] x64_sys_call+0x2d77/0x2fb0 [ 118.303704][ T8129] do_syscall_64+0xd2/0x200 [ 118.303802][ T8129] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 118.303828][ T8129] ? clear_bhb_loop+0x40/0x90 [ 118.303848][ T8129] ? clear_bhb_loop+0x40/0x90 [ 118.303868][ T8129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.303888][ T8129] RIP: 0033:0x7f673d4bd33c [ 118.303982][ T8129] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 118.304001][ T8129] RSP: 002b:00007f673bb27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.304020][ T8129] RAX: ffffffffffffffda RBX: 00007f673d6e5fa0 RCX: 00007f673d4bd33c [ 118.304031][ T8129] RDX: 000000000000000f RSI: 00007f673bb270a0 RDI: 0000000000000003 [ 118.304042][ T8129] RBP: 00007f673bb27090 R08: 0000000000000000 R09: 0000000000000000 [ 118.304052][ T8129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.304063][ T8129] R13: 0000000000000000 R14: 00007f673d6e5fa0 R15: 00007ffe7f2d7858 [ 118.304081][ T8129] [ 118.532418][ T8117] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 3: comm syz.4.1425: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 118.585817][ T8047] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 118.603771][ T8117] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 3: comm syz.4.1425: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 118.625359][ T8136] netlink: 'syz.2.1434': attribute type 1 has an invalid length. [ 118.633850][ T8047] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 118.646046][ T8047] EXT4-fs (loop3): This should not happen!! Data will be lost [ 118.646046][ T8047] [ 118.655720][ T8047] EXT4-fs (loop3): Total free blocks count 0 [ 118.661732][ T8047] EXT4-fs (loop3): Free/Dirty block details [ 118.667676][ T8047] EXT4-fs (loop3): free_blocks=68451041280 [ 118.673527][ T8047] EXT4-fs (loop3): dirty_blocks=16240 [ 118.679104][ T8047] EXT4-fs (loop3): Block reservation details [ 118.685083][ T8047] EXT4-fs (loop3): i_reserved_data_blocks=1015 [ 118.699941][ T8118] __nla_validate_parse: 3 callbacks suppressed [ 118.699956][ T8118] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1426'. [ 118.710383][ T8047] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 118.727774][ T8047] EXT4-fs (loop3): This should not happen!! Data will be lost [ 118.727774][ T8047] [ 118.736176][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1426'. [ 118.746555][ T8118] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1426'. [ 118.757762][ T8137] smc: net device bond0 erased user defined pnetid SYZ2 [ 118.775853][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 118.775868][ T29] audit: type=1326 audit(118.751:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8133 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673d4be929 code=0x7ffc0000 [ 118.804878][ T29] audit: type=1326 audit(118.751:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8133 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673d4be929 code=0x7ffc0000 [ 118.827801][ T29] audit: type=1326 audit(118.751:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8133 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f673d4be929 code=0x7ffc0000 [ 118.850620][ T29] audit: type=1326 audit(118.751:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8133 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673d4be929 code=0x7ffc0000 [ 118.873905][ T29] audit: type=1326 audit(118.751:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8133 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673d4be929 code=0x7ffc0000 [ 118.896733][ T29] audit: type=1326 audit(118.751:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8133 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f673d4be929 code=0x7ffc0000 [ 118.919631][ T29] audit: type=1326 audit(118.751:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8133 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673d4be929 code=0x7ffc0000 [ 118.942543][ T29] audit: type=1326 audit(118.751:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8133 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673d4be929 code=0x7ffc0000 [ 118.965513][ T29] audit: type=1326 audit(118.751:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8133 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f673d4be929 code=0x7ffc0000 [ 118.988311][ T29] audit: type=1326 audit(118.751:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8133 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673d4be929 code=0x7ffc0000 [ 119.059336][ T8142] syzkaller0: entered promiscuous mode [ 119.064862][ T8142] syzkaller0: entered allmulticast mode [ 119.104832][ T8153] loop4: detected capacity change from 0 to 512 [ 119.122201][ T8155] 9pnet_fd: Insufficient options for proto=fd [ 119.128372][ T8153] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 119.180048][ T8160] Cannot find set identified by id 65534 to match [ 119.187857][ T8160] loop3: detected capacity change from 0 to 128 [ 119.219867][ T8153] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1440: corrupted xattr block 32: bad e_name length [ 119.234571][ T8153] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 119.243794][ T8153] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1440: corrupted xattr block 32: bad e_name length [ 119.259668][ T8153] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 119.269326][ T8153] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1440: corrupted xattr block 32: bad e_name length [ 119.283541][ T8153] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1440: corrupted xattr block 32: bad e_name length [ 119.297893][ T8153] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 119.349425][ T8171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.358000][ T8171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.366829][ T8171] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1444'. [ 119.550005][ T8177] loop7: detected capacity change from 0 to 512 [ 119.556890][ T8177] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.566129][ T8177] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 119.575151][ T8177] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 119.583188][ T8177] System zones: 0-2, 18-18, 34-34 [ 119.588559][ T8177] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.1447: iget: bad i_size value: 360287970189639680 [ 119.602674][ T8177] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.1447: couldn't read orphan inode 15 (err -117) [ 119.618882][ T8177] EXT4-fs error (device loop7): ext4_find_dest_de:2052: inode #2: block 3: comm syz.7.1447: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 119.652493][ T8177] EXT4-fs error (device loop7): ext4_find_dest_de:2052: inode #2: block 3: comm syz.7.1447: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 119.692774][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.700404][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.708277][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.715742][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.723157][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.730641][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.738069][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.745542][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.751745][ T8181] random: crng reseeded on system resumption [ 119.753004][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.766425][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.773885][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.781351][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.788831][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.796261][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.803724][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.811158][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.818649][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.826091][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.833531][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.841027][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.848415][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.855885][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.863288][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.870691][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.878055][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.885533][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.893051][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.900506][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.907892][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.915442][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.922971][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.930356][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.945461][ T3387] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 119.990921][ T8193] 9pnet_fd: Insufficient options for proto=fd [ 120.036038][ T8184] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1449'. [ 120.036057][ T8184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1449'. [ 120.036069][ T8184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1449'. [ 120.055339][ T8196] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1454'. [ 120.195391][ T8209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8209 comm=syz.7.1455 [ 120.215328][ T8211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.217903][ T8208] syzkaller0: entered promiscuous mode [ 120.224007][ T8211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.229176][ T8208] syzkaller0: entered allmulticast mode [ 120.264884][ T8211] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1460'. [ 120.283670][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1456'. [ 120.362156][ T8214] loop7: detected capacity change from 0 to 512 [ 120.392302][ T8214] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.502506][ T8214] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1461: corrupted xattr block 32: bad e_name length [ 120.517699][ T8214] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 120.527030][ T8214] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1461: corrupted xattr block 32: bad e_name length [ 120.555155][ T8214] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 120.571384][ T8214] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1461: corrupted xattr block 32: bad e_name length [ 120.586482][ T8214] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1461: corrupted xattr block 32: bad e_name length [ 120.632179][ T8214] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 120.872688][ T8228] loop3: detected capacity change from 0 to 1024 [ 120.884145][ T8228] EXT4-fs: Ignoring removed orlov option [ 121.160566][ T8237] netlink: 'syz.3.1465': attribute type 27 has an invalid length. [ 121.177179][ T8239] netlink: 'syz.5.1469': attribute type 1 has an invalid length. [ 121.207075][ T8242] loop7: detected capacity change from 0 to 512 [ 121.391795][ T8242] netlink: 'syz.7.1463': attribute type 1 has an invalid length. [ 121.401258][ T8259] loop5: detected capacity change from 0 to 512 [ 121.421535][ T8259] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.437120][ T8242] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #18: comm syz.7.1463: corrupted inode contents [ 121.437302][ T8242] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #18: comm syz.7.1463: mark_inode_dirty error [ 121.437469][ T8242] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #18: comm syz.7.1463: corrupted inode contents [ 121.437610][ T8242] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #18: comm syz.7.1463: mark_inode_dirty error [ 121.437799][ T8242] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #18: comm syz.7.1463: mark inode dirty (error -117) [ 121.437956][ T8242] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 121.527094][ T8265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.527153][ T8265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.537717][ T8259] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1473: corrupted xattr block 32: bad e_name length [ 121.538048][ T8259] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 121.538078][ T8259] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1473: corrupted xattr block 32: bad e_name length [ 121.538231][ T8259] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 121.538253][ T8259] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1473: corrupted xattr block 32: bad e_name length [ 121.538396][ T8259] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1473: corrupted xattr block 32: bad e_name length [ 121.538545][ T8259] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 121.546877][ T8270] Cannot find add_set index 0 as target [ 121.670540][ T8275] netlink: 'syz.2.1479': attribute type 27 has an invalid length. [ 121.722733][ T8275] ip6erspan0: left promiscuous mode [ 121.747240][ T8275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.761290][ T8275] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.772114][ T8275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.787761][ T8281] netlink: 'syz.7.1481': attribute type 1 has an invalid length. [ 121.806954][ T8284] loop4: detected capacity change from 0 to 512 [ 121.814475][ T8284] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.829817][ T8284] EXT4-fs (loop4): 1 truncate cleaned up [ 121.882732][ T8293] loop7: detected capacity change from 0 to 1024 [ 121.909824][ T8293] EXT4-fs: Ignoring removed nobh option [ 121.915493][ T8293] EXT4-fs: Ignoring removed bh option [ 121.942778][ T8293] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.1485: bad orphan inode 32767 [ 121.969164][ T8293] IPVS: Error connecting to the multicast addr [ 122.121458][ T8313] Cannot find add_set index 0 as target [ 122.182547][ T8319] netlink: 'syz.2.1486': attribute type 27 has an invalid length. [ 122.218067][ T8321] 9pnet_fd: Insufficient options for proto=fd [ 122.267071][ T8324] loop4: detected capacity change from 0 to 512 [ 122.296485][ T8324] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 122.369129][ T8328] loop5: detected capacity change from 0 to 512 [ 122.425292][ T8328] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 122.500165][ T8328] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1497: corrupted xattr block 32: bad e_name length [ 122.528885][ T8328] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 122.564529][ T8328] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1497: corrupted xattr block 32: bad e_name length [ 122.586617][ T8339] loop3: detected capacity change from 0 to 4096 [ 122.598606][ T8328] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 122.608280][ T8328] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1497: corrupted xattr block 32: bad e_name length [ 122.622754][ T8328] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1497: corrupted xattr block 32: bad e_name length [ 122.636810][ T8328] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 122.816995][ T8361] loop7: detected capacity change from 0 to 512 [ 122.841211][ T8361] ext4: Bad value for 'mb_optimize_scan' [ 122.906282][ T8373] FAULT_INJECTION: forcing a failure. [ 122.906282][ T8373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.919514][ T8373] CPU: 1 UID: 0 PID: 8373 Comm: syz.3.1511 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 122.919620][ T8373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.919631][ T8373] Call Trace: [ 122.919638][ T8373] [ 122.919646][ T8373] __dump_stack+0x1d/0x30 [ 122.919696][ T8373] dump_stack_lvl+0xe8/0x140 [ 122.919716][ T8373] dump_stack+0x15/0x1b [ 122.919734][ T8373] should_fail_ex+0x265/0x280 [ 122.919766][ T8373] should_fail+0xb/0x20 [ 122.919844][ T8373] should_fail_usercopy+0x1a/0x20 [ 122.919944][ T8373] _copy_from_user+0x1c/0xb0 [ 122.919964][ T8373] sctp_getsockopt_local_addrs+0x85/0x930 [ 122.919984][ T8373] ? avc_has_perm+0xd3/0x150 [ 122.920007][ T8373] ? selinux_socket_getsockopt+0x175/0x1b0 [ 122.920040][ T8373] sctp_getsockopt+0x631/0xaa0 [ 122.920147][ T8373] sock_common_getsockopt+0x5d/0x70 [ 122.920232][ T8373] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 122.920336][ T8373] do_sock_getsockopt+0x1fd/0x240 [ 122.920368][ T8373] __x64_sys_getsockopt+0x11e/0x1a0 [ 122.920445][ T8373] x64_sys_call+0x12aa/0x2fb0 [ 122.920520][ T8373] do_syscall_64+0xd2/0x200 [ 122.920536][ T8373] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 122.920633][ T8373] ? clear_bhb_loop+0x40/0x90 [ 122.920651][ T8373] ? clear_bhb_loop+0x40/0x90 [ 122.920674][ T8373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.920716][ T8373] RIP: 0033:0x7fe10397e929 [ 122.920732][ T8373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.920752][ T8373] RSP: 002b:00007fe101fe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 122.920769][ T8373] RAX: ffffffffffffffda RBX: 00007fe103ba5fa0 RCX: 00007fe10397e929 [ 122.920782][ T8373] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003 [ 122.920845][ T8373] RBP: 00007fe101fe7090 R08: 0000200000000100 R09: 0000000000000000 [ 122.920907][ T8373] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 122.920919][ T8373] R13: 0000000000000000 R14: 00007fe103ba5fa0 R15: 00007fffe566da68 [ 122.920937][ T8373] [ 123.189970][ T8381] loop7: detected capacity change from 0 to 512 [ 123.198823][ T8381] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 123.219589][ T8370] netlink: 'syz.2.1510': attribute type 1 has an invalid length. [ 123.228542][ T8381] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1514: corrupted xattr block 32: bad e_name length [ 123.242706][ T8381] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 123.251974][ T8381] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1514: corrupted xattr block 32: bad e_name length [ 123.268313][ T8381] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 123.290854][ T8381] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1514: corrupted xattr block 32: bad e_name length [ 123.305959][ T8381] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1514: corrupted xattr block 32: bad e_name length [ 123.322472][ T8381] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 123.377714][ T8414] FAULT_INJECTION: forcing a failure. [ 123.377714][ T8414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.390831][ T8414] CPU: 1 UID: 0 PID: 8414 Comm: syz.7.1523 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 123.390858][ T8414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.390868][ T8414] Call Trace: [ 123.390873][ T8414] [ 123.390880][ T8414] __dump_stack+0x1d/0x30 [ 123.390926][ T8414] dump_stack_lvl+0xe8/0x140 [ 123.391020][ T8414] dump_stack+0x15/0x1b [ 123.391034][ T8414] should_fail_ex+0x265/0x280 [ 123.391060][ T8414] should_fail+0xb/0x20 [ 123.391120][ T8414] should_fail_usercopy+0x1a/0x20 [ 123.391148][ T8414] _copy_from_user+0x1c/0xb0 [ 123.391164][ T8414] ___sys_sendmsg+0xc1/0x1d0 [ 123.391273][ T8414] __x64_sys_sendmsg+0xd4/0x160 [ 123.391305][ T8414] x64_sys_call+0x2999/0x2fb0 [ 123.391337][ T8414] do_syscall_64+0xd2/0x200 [ 123.391355][ T8414] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 123.391447][ T8414] ? clear_bhb_loop+0x40/0x90 [ 123.391510][ T8414] ? clear_bhb_loop+0x40/0x90 [ 123.391530][ T8414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.391573][ T8414] RIP: 0033:0x7f673d4be929 [ 123.391589][ T8414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.391605][ T8414] RSP: 002b:00007f673bb27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.391620][ T8414] RAX: ffffffffffffffda RBX: 00007f673d6e5fa0 RCX: 00007f673d4be929 [ 123.391691][ T8414] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000006 [ 123.391701][ T8414] RBP: 00007f673bb27090 R08: 0000000000000000 R09: 0000000000000000 [ 123.391712][ T8414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.391723][ T8414] R13: 0000000000000000 R14: 00007f673d6e5fa0 R15: 00007ffe7f2d7858 [ 123.391739][ T8414] [ 123.401368][ T8416] loop3: detected capacity change from 0 to 512 [ 123.530788][ T8412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8412 comm=syz.5.1522 [ 123.532376][ T8416] EXT4-fs: test_dummy_encryption option not supported [ 123.663815][ T8428] x_tables: unsorted entry at hook 1 [ 123.682609][ T8430] loop7: detected capacity change from 0 to 512 [ 123.701344][ T8430] EXT4-fs: Ignoring removed i_version option [ 123.708237][ T8430] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 123.720443][ T8430] EXT4-fs (loop7): 1 truncate cleaned up [ 123.782974][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 123.782989][ T29] audit: type=1326 audit(123.761:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8446 comm="syz.3.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10397e929 code=0x7ffc0000 [ 123.812452][ T29] audit: type=1326 audit(123.761:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8446 comm="syz.3.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fe10397e929 code=0x7ffc0000 [ 123.835236][ T29] audit: type=1326 audit(123.761:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8446 comm="syz.3.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10397e929 code=0x7ffc0000 [ 123.858031][ T29] audit: type=1326 audit(123.761:6336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8446 comm="syz.3.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe10397e929 code=0x7ffc0000 [ 123.880835][ T29] audit: type=1326 audit(123.761:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8446 comm="syz.3.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10397e929 code=0x7ffc0000 [ 123.890014][ T8447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8447 comm=syz.3.1537 [ 123.903594][ T29] audit: type=1326 audit(123.761:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8446 comm="syz.3.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fe10397e929 code=0x7ffc0000 [ 123.939300][ T29] audit: type=1326 audit(123.841:6339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8446 comm="syz.3.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10397e929 code=0x7ffc0000 [ 123.962298][ T29] audit: type=1326 audit(123.841:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8446 comm="syz.3.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10397e929 code=0x7ffc0000 [ 123.985154][ T29] audit: type=1326 audit(123.871:6341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8446 comm="syz.3.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe10397e929 code=0x7ffc0000 [ 124.008069][ T29] audit: type=1326 audit(123.871:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8446 comm="syz.3.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10397e929 code=0x7ffc0000 [ 124.187465][ T8469] loop5: detected capacity change from 0 to 512 [ 124.198471][ T8469] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 124.229573][ T8469] EXT4-fs (loop5): 1 truncate cleaned up [ 124.333924][ T8483] loop3: detected capacity change from 0 to 512 [ 124.341390][ T8483] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.345707][ T8469] __nla_validate_parse: 15 callbacks suppressed [ 124.345720][ T8469] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1545'. [ 124.354336][ T8487] netlink: 'syz.7.1551': attribute type 1 has an invalid length. [ 124.357552][ T8469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1545'. [ 124.368458][ T8483] EXT4-fs (loop3): 1 truncate cleaned up [ 124.374367][ T8469] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1545'. [ 124.419561][ T8490] 9pnet_fd: Insufficient options for proto=fd [ 124.505390][ T8500] FAULT_INJECTION: forcing a failure. [ 124.505390][ T8500] name failslab, interval 1, probability 0, space 0, times 0 [ 124.518119][ T8500] CPU: 0 UID: 0 PID: 8500 Comm: syz.5.1555 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 124.518145][ T8500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.518156][ T8500] Call Trace: [ 124.518161][ T8500] [ 124.518167][ T8500] __dump_stack+0x1d/0x30 [ 124.518232][ T8500] dump_stack_lvl+0xe8/0x140 [ 124.518250][ T8500] dump_stack+0x15/0x1b [ 124.518265][ T8500] should_fail_ex+0x265/0x280 [ 124.518292][ T8500] should_failslab+0x8c/0xb0 [ 124.518311][ T8500] kmem_cache_alloc_node_noprof+0x57/0x320 [ 124.518368][ T8500] ? __alloc_skb+0x101/0x320 [ 124.518396][ T8500] ? __account_obj_stock+0x211/0x350 [ 124.518486][ T8500] __alloc_skb+0x101/0x320 [ 124.518516][ T8500] tcp_stream_alloc_skb+0x2d/0x1d0 [ 124.518541][ T8500] tcp_sendmsg_locked+0xcb4/0x2c10 [ 124.518624][ T8500] ? __rcu_read_unlock+0x4f/0x70 [ 124.518652][ T8500] ? __account_obj_stock+0x211/0x350 [ 124.518677][ T8500] ? __rcu_read_unlock+0x4f/0x70 [ 124.518713][ T8500] ? __pfx_tcp_sendmsg+0x10/0x10 [ 124.518736][ T8500] tcp_sendmsg+0x2f/0x50 [ 124.518804][ T8500] inet_sendmsg+0x76/0xd0 [ 124.518835][ T8500] __sock_sendmsg+0x102/0x180 [ 124.518860][ T8500] ____sys_sendmsg+0x345/0x4e0 [ 124.518917][ T8500] ___sys_sendmsg+0x17b/0x1d0 [ 124.518962][ T8500] __sys_sendmmsg+0x178/0x300 [ 124.519046][ T8500] __x64_sys_sendmmsg+0x57/0x70 [ 124.519080][ T8500] x64_sys_call+0x2f2f/0x2fb0 [ 124.519102][ T8500] do_syscall_64+0xd2/0x200 [ 124.519119][ T8500] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 124.519230][ T8500] ? clear_bhb_loop+0x40/0x90 [ 124.519295][ T8500] ? clear_bhb_loop+0x40/0x90 [ 124.519318][ T8500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.519339][ T8500] RIP: 0033:0x7f0fe5a8e929 [ 124.519354][ T8500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.519372][ T8500] RSP: 002b:00007f0fe40ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 124.519392][ T8500] RAX: ffffffffffffffda RBX: 00007f0fe5cb5fa0 RCX: 00007f0fe5a8e929 [ 124.519474][ T8500] RDX: 0000000000000002 RSI: 0000200000004480 RDI: 0000000000000003 [ 124.519580][ T8500] RBP: 00007f0fe40ef090 R08: 0000000000000000 R09: 0000000000000000 [ 124.519593][ T8500] R10: 0000000004048841 R11: 0000000000000246 R12: 0000000000000001 [ 124.519605][ T8500] R13: 0000000000000000 R14: 00007f0fe5cb5fa0 R15: 00007fff656e4a08 [ 124.519622][ T8500] [ 124.771608][ T8483] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1550'. [ 124.780818][ T8483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1550'. [ 124.789816][ T8483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1550'. [ 124.974519][ T8544] 9pnet_fd: Insufficient options for proto=fd [ 125.149134][ T8573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8573 comm=syz.3.1569 [ 125.165852][ T8584] netlink: 'syz.2.1572': attribute type 1 has an invalid length. [ 125.221338][ T8597] 9pnet_fd: Insufficient options for proto=fd [ 125.236963][ T8594] loop3: detected capacity change from 0 to 512 [ 125.244322][ T8594] EXT4-fs: Ignoring removed i_version option [ 125.251516][ T8594] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.272328][ T8594] EXT4-fs (loop3): 1 truncate cleaned up [ 125.412443][ T8635] netlink: 'syz.3.1585': attribute type 1 has an invalid length. [ 125.437346][ T8640] 9pnet_fd: Insufficient options for proto=fd [ 125.444473][ T8636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8636 comm=syz.2.1584 [ 125.525637][ T8651] syzkaller0: entered promiscuous mode [ 125.531173][ T8651] syzkaller0: entered allmulticast mode [ 125.944698][ T8741] lo speed is unknown, defaulting to 1000 [ 125.980051][ T8745] 9pnet_fd: Insufficient options for proto=fd [ 125.993170][ T8746] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1595'. [ 126.002371][ T8746] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 126.031509][ T8748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8748 comm=syz.5.1598 [ 126.106714][ T8754] loop4: detected capacity change from 0 to 512 [ 126.113783][ T8754] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.122992][ T8754] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 126.133398][ T8754] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 126.142708][ T8754] System zones: 0-2, 18-18, 34-34 [ 126.149746][ T8754] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.1601: iget: bad i_size value: 360287970189639680 [ 126.162904][ T8756] loop5: detected capacity change from 0 to 512 [ 126.163203][ T8754] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1601: couldn't read orphan inode 15 (err -117) [ 126.181153][ T8756] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 126.187790][ T8754] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 3: comm syz.4.1601: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 126.212028][ T8754] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 3: comm syz.4.1601: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 126.212732][ T8756] EXT4-fs (loop5): 1 truncate cleaned up [ 126.361503][ T8756] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1602'. [ 126.370615][ T8756] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1602'. [ 126.379666][ T8756] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1602'. [ 126.388082][ T8768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.398356][ T8768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.779980][ T8806] netlink: 'syz.2.1617': attribute type 1 has an invalid length. [ 126.787989][ T8807] FAULT_INJECTION: forcing a failure. [ 126.787989][ T8807] name failslab, interval 1, probability 0, space 0, times 0 [ 126.800742][ T8807] CPU: 0 UID: 0 PID: 8807 Comm: syz.5.1616 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 126.800768][ T8807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.800779][ T8807] Call Trace: [ 126.800784][ T8807] [ 126.800790][ T8807] __dump_stack+0x1d/0x30 [ 126.800844][ T8807] dump_stack_lvl+0xe8/0x140 [ 126.800940][ T8807] dump_stack+0x15/0x1b [ 126.800955][ T8807] should_fail_ex+0x265/0x280 [ 126.800984][ T8807] should_failslab+0x8c/0xb0 [ 126.801065][ T8807] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 126.801156][ T8807] ? __d_alloc+0x3d/0x350 [ 126.801253][ T8807] __d_alloc+0x3d/0x350 [ 126.801277][ T8807] d_alloc_parallel+0x53/0xc40 [ 126.801298][ T8807] ? selinux_inode_permission+0x532/0x620 [ 126.801316][ T8807] ? make_vfsuid+0x49/0xa0 [ 126.801372][ T8807] ? lockref_get_not_dead+0x120/0x1c0 [ 126.801394][ T8807] ? __rcu_read_unlock+0x4f/0x70 [ 126.801417][ T8807] __lookup_slow+0x8c/0x250 [ 126.801445][ T8807] lookup_slow+0x3c/0x60 [ 126.801466][ T8807] walk_component+0x1ec/0x220 [ 126.801527][ T8807] path_lookupat+0xfe/0x2a0 [ 126.801552][ T8807] filename_lookup+0x147/0x340 [ 126.801582][ T8807] user_path_at+0x3e/0x130 [ 126.801606][ T8807] __se_sys_pivot_root+0xbc/0x720 [ 126.801692][ T8807] ? fput+0x8f/0xc0 [ 126.801778][ T8807] __x64_sys_pivot_root+0x31/0x40 [ 126.801807][ T8807] x64_sys_call+0x2aac/0x2fb0 [ 126.801827][ T8807] do_syscall_64+0xd2/0x200 [ 126.801899][ T8807] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 126.801923][ T8807] ? clear_bhb_loop+0x40/0x90 [ 126.801983][ T8807] ? clear_bhb_loop+0x40/0x90 [ 126.802006][ T8807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.802045][ T8807] RIP: 0033:0x7f0fe5a8e929 [ 126.802142][ T8807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.802165][ T8807] RSP: 002b:00007f0fe40ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 126.802185][ T8807] RAX: ffffffffffffffda RBX: 00007f0fe5cb6080 RCX: 00007f0fe5a8e929 [ 126.802198][ T8807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 126.802211][ T8807] RBP: 00007f0fe40ce090 R08: 0000000000000000 R09: 0000000000000000 [ 126.802224][ T8807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.802237][ T8807] R13: 0000000000000000 R14: 00007f0fe5cb6080 R15: 00007fff656e4a08 [ 126.802255][ T8807] [ 127.125608][ T8811] syzkaller0: entered promiscuous mode [ 127.131127][ T8811] syzkaller0: entered allmulticast mode [ 127.226091][ T8824] loop3: detected capacity change from 0 to 512 [ 127.232783][ T8824] EXT4-fs: Ignoring removed i_version option [ 127.239862][ T8820] hsr_slave_0: left promiscuous mode [ 127.242116][ T8824] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.255453][ T8820] hsr_slave_1: left promiscuous mode [ 127.256966][ T8824] EXT4-fs (loop3): 1 truncate cleaned up [ 127.341467][ T8835] loop7: detected capacity change from 0 to 512 [ 127.478999][ T8835] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #18: comm syz.7.1628: corrupted inode contents [ 127.491128][ T8835] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #18: comm syz.7.1628: mark_inode_dirty error [ 127.502641][ T8835] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #18: comm syz.7.1628: corrupted inode contents [ 127.514701][ T8835] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #18: comm syz.7.1628: mark_inode_dirty error [ 127.526868][ T8835] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #18: comm syz.7.1628: mark inode dirty (error -117) [ 127.539581][ T8835] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 127.582791][ T5070] EXT4-fs unmount: 59 callbacks suppressed [ 127.582807][ T5070] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.653686][ T8858] loop7: detected capacity change from 0 to 512 [ 127.660385][ T8858] EXT4-fs: Ignoring removed i_version option [ 127.666665][ T8858] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 127.677806][ T8858] EXT4-fs (loop7): 1 truncate cleaned up [ 127.684199][ T8858] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.713545][ T5070] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.758240][ T8865] loop7: detected capacity change from 0 to 512 [ 127.765574][ T8865] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.774661][ T8865] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 127.783617][ T8865] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 127.791708][ T8865] System zones: 0-2, 18-18, 34-34 [ 127.797238][ T8865] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.1639: iget: bad i_size value: 360287970189639680 [ 127.810517][ T8865] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.1639: couldn't read orphan inode 15 (err -117) [ 127.823397][ T8865] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.839099][ T8865] EXT4-fs error (device loop7): ext4_find_dest_de:2052: inode #2: block 3: comm syz.7.1639: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 127.858837][ T8865] EXT4-fs error (device loop7): ext4_find_dest_de:2052: inode #2: block 3: comm syz.7.1639: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 127.887013][ T5070] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.051096][ T8892] loop7: detected capacity change from 0 to 512 [ 128.059443][ T8894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.075971][ T8892] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.081337][ T8894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.085073][ T8892] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 128.144165][ T8892] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 128.158332][ T8896] loop3: detected capacity change from 0 to 8192 [ 128.168816][ T8892] System zones: 0-2, 18-18, 34-34 [ 128.174964][ T8892] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.1651: iget: bad i_size value: 360287970189639680 [ 128.202380][ T8892] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.1651: couldn't read orphan inode 15 (err -117) [ 128.229371][ T8892] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.232521][ T8902] netlink: 'syz.3.1654': attribute type 29 has an invalid length. [ 128.270674][ T8892] EXT4-fs error (device loop7): ext4_find_dest_de:2052: inode #2: block 3: comm syz.7.1651: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 128.305542][ T8892] EXT4-fs error (device loop7): ext4_find_dest_de:2052: inode #2: block 3: comm syz.7.1651: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 128.336758][ T5070] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.659965][ T8915] loop4: detected capacity change from 0 to 512 [ 128.666667][ T8915] EXT4-fs: Ignoring removed i_version option [ 128.673054][ T8915] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.684834][ T8915] EXT4-fs (loop4): 1 truncate cleaned up [ 128.691060][ T8915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.722500][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.732845][ T3305] ================================================================== [ 128.740955][ T3305] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 128.748696][ T3305] [ 128.751021][ T3305] read-write to 0xffff888237d26f10 of 8 bytes by task 8896 on cpu 1: [ 128.759086][ T3305] find_get_block_common+0x4f0/0x960 [ 128.764383][ T3305] bdev_getblk+0x83/0x3d0 [ 128.768726][ T3305] __bread_gfp+0x51/0x250 [ 128.773060][ T3305] fat_ent_bread+0xc9/0x1a0 [ 128.777570][ T3305] fat_ent_read+0x3b0/0x5a0 [ 128.782078][ T3305] fat_get_cluster+0x4b2/0x7b0 [ 128.786845][ T3305] fat_get_mapped_cluster+0xe4/0x240 [ 128.792153][ T3305] fat_bmap+0x254/0x280 [ 128.796318][ T3305] fat_get_block+0x3b1/0x5e0 [ 128.800916][ T3305] __block_write_begin_int+0x3fd/0xf90 [ 128.806392][ T3305] cont_write_begin+0x5fc/0x970 [ 128.811247][ T3305] fat_write_begin+0x4f/0xe0 [ 128.815843][ T3305] generic_perform_write+0x181/0x490 [ 128.821130][ T3305] __generic_file_write_iter+0x9e/0x120 [ 128.826679][ T3305] generic_file_write_iter+0x8d/0x2f0 [ 128.832052][ T3305] aio_write+0x2e5/0x410 [ 128.836303][ T3305] io_submit_one+0xacd/0x11d0 [ 128.840991][ T3305] __se_sys_io_submit+0xfb/0x280 [ 128.845945][ T3305] __x64_sys_io_submit+0x43/0x50 [ 128.850894][ T3305] x64_sys_call+0xfc4/0x2fb0 [ 128.855491][ T3305] do_syscall_64+0xd2/0x200 [ 128.860002][ T3305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.865898][ T3305] [ 128.868216][ T3305] read to 0xffff888237d26f10 of 8 bytes by task 3305 on cpu 0: [ 128.875762][ T3305] has_bh_in_lru+0x35/0x1f0 [ 128.880278][ T3305] __lru_add_drain_all+0x234/0x3f0 [ 128.885396][ T3305] lru_add_drain_all+0x10/0x20 [ 128.890176][ T3305] invalidate_bdev+0x47/0x70 [ 128.894780][ T3305] ext4_put_super+0x624/0x7d0 [ 128.899469][ T3305] generic_shutdown_super+0xe6/0x210 [ 128.904768][ T3305] kill_block_super+0x2a/0x70 [ 128.909453][ T3305] ext4_kill_sb+0x42/0x80 [ 128.913788][ T3305] deactivate_locked_super+0x75/0x1c0 [ 128.919170][ T3305] deactivate_super+0x97/0xa0 [ 128.923863][ T3305] cleanup_mnt+0x269/0x2e0 [ 128.928280][ T3305] __cleanup_mnt+0x19/0x20 [ 128.932700][ T3305] task_work_run+0x131/0x1a0 [ 128.937294][ T3305] exit_to_user_mode_loop+0xe4/0x100 [ 128.942583][ T3305] do_syscall_64+0x1d6/0x200 [ 128.947179][ T3305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.953054][ T3305] [ 128.955360][ T3305] value changed: 0x0000000000000000 -> 0xffff888119f329c0 [ 128.962445][ T3305] [ 128.964772][ T3305] Reported by Kernel Concurrency Sanitizer on: [ 128.970903][ T3305] CPU: 0 UID: 0 PID: 3305 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 128.983473][ T3305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.993516][ T3305] ================================================================== [ 129.024048][ T8918] loop4: detected capacity change from 0 to 512 [ 129.030620][ T8918] EXT4-fs: Ignoring removed i_version option [ 129.036863][ T8918] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 129.048043][ T8918] EXT4-fs (loop4): 1 truncate cleaned up [ 129.054385][ T8918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.085902][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.