last executing test programs: 46.789397717s ago: executing program 0 (id=547): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000110000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xa, r1}, 0x38) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="10000000121401000000278503aaf296"], 0x10}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000040)="aa", 0x1}], 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"], 0xa) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x10000, 0x0, 0x12d5e, 0x12d58}}, 0x44) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800e7000000000000000000000000009f000000000000003b87a4b3d77ad790e0d7a0ef19f2d1aa8849077c2a8da430855c21aaa8cf892e11b06b72c1b9d1318e2cd98fdd90713acd0341e091d38d7e09ce6f2fc529d37a83240057047e7634423051af124b2a78f2387c66f26564bbf3b23b42555ec5f4884031fd2c54ab24bc6f297e0dfe312fad6cf3dbb5ff8b919e1925d1617bb59c1d818c52"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000001a0a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x640100fc, 0x4e23, 0x3, 'lc\x00', 0x8, 0x323b, 0x54}, {@remote, 0x4e23, 0x2000, 0x2, 0x8012d5c, 0x12d5c}}, 0x44) 46.724711488s ago: executing program 0 (id=550): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 46.661342029s ago: executing program 0 (id=551): syz_emit_ethernet(0x6e, &(0x7f00000007c0)=ANY=[@ANYBLOB="bb7e92dadea0828082aab30a0000000000000000907800000002690bdeaaa4083483dcdbff0f000000000000fc09330000000000aafe8a000000000000000000000000000127000000006fa74001a8722c9c6a1d0000000000000000000000001000"/110], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000400)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000b00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9300}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x806}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) write$selinux_access(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6d6f64756c65735f6465705f743a733020756e636f6e66696e6564203030303030303030a0393030303030303080003400"], 0x43) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2}, {0x60}, {0x6}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000bf, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000000014202020"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='xen_mc_entry_alloc\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x150) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 46.402634243s ago: executing program 3 (id=553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, 0x0, 0x0}, 0x20) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4, 0x0, r2, 0x369, '\x00', 0x0, r3, 0x4, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) 46.395472853s ago: executing program 3 (id=554): fsopen(&(0x7f0000000000)='ufs\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffff7ffffe9}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}]}, 0x78}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000300), &(0x7f00000003c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x20) lstat(&(0x7f0000000300)='./file2\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r9, 0x0) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r10, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r8, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 46.131151167s ago: executing program 3 (id=560): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={0x0, r3}}, 0x20) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a3000000000440004"], 0x6c}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r5}, &(0x7f0000000100), &(0x7f0000000280)='%ps \x00'}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389d382dea3c8d91906aead5d5ae8cc097ef1082ea987c2b00000000000000002c00"]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, 0x0, &(0x7f0000000840)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x320, 0x3d8, 0x3d8, 0x320, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) inotify_add_watch(0xffffffffffffffff, &(0x7f0000001080)='./file0\x00', 0x7) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r9 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 45.611314385s ago: executing program 3 (id=566): ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x38, 0x5cd, 0x3, 0x6, 0x10, 0x81}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f00000002c0)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"/1426], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0002, 0xf0, 0xffffff87, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000100)={0x0}) syz_open_procfs(r1, &(0x7f00000000c0)='statm\x00') 45.33233133s ago: executing program 3 (id=568): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$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") (fail_nth: 19) 45.211829422s ago: executing program 3 (id=569): syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000f00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r3, 0x601, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000180007800800020001"], 0x2c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) 45.159371042s ago: executing program 32 (id=569): syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000f00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r3, 0x601, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000180007800800020001"], 0x2c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) 45.077527184s ago: executing program 0 (id=574): syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES64], 0x8, 0x2f6, &(0x7f0000001cc0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb900, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="e3e04444a183ffffff7f00000000c27af1bd025cf84739cd9c7c72f60557c32d3ca40d2547558dc6ae0b5e77d42ab83783c88330db7abd65e23284d2e07d599f7d4fde28a65e66757fba69b784058d2a440ebfe2f91b4eb177f49f1911c289a912ac1c14", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="e3e04444a183ffffff7f00000000c27af1bd025cf84739cd9c7c72f60557c32d3ca40d2547558dc6ae0b5e77d42ab83783c88330db7abd65e23284d2e07d599f7d4fde28a65e66757fba69b784058d2a440ebfe2f91b4eb177f49f1911c289a912ac1c14", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlock(&(0x7f0000359000/0x3000)=nil, 0x3000) munlockall() (async) munlockall() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3deff000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3deff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) read$qrtrtun(0xffffffffffffffff, &(0x7f0000000580)=""/212, 0xd4) sendto$inet6(r6, &(0x7f0000000ac0)="cc", 0x1, 0xc804, &(0x7f0000000200)={0xa, 0x4e22, 0x487000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000340)={0x5, 0x800, 0x201, 0x2, 0x0, 0xffffffff, 0x8, 0x7}, 0x20) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000340)={0x5, 0x800, 0x201, 0x2, 0x0, 0xffffffff, 0x8, 0x7}, 0x20) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="0a0300030200"/16], 0x10}}, 0x40) (async) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="0a0300030200"/16], 0x10}}, 0x40) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000000)={'vlan1\x00'}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) 44.64287646s ago: executing program 0 (id=581): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) shutdown(r1, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x180) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="960110001200020025bd7000fddcdf25030502014e224e2208040700e20000002500000001000000a169000000fcffff3303000008000000", @ANYRES32=r4, @ANYBLOB="050000000010000000000000000000000a0001008bfac0e1e69f00008a00010073c32369d0315d3fb481e3ce1468c7fe9ebd0e696c47a086f2e34fed595be917f2e2c0fd94bf5964ceb8e82e5c99c2016ba53ce98cd776b77bfdcba1d4883c7d4890eb8d03e430e4f7d7cb77b11c5d04aafeeb42f9e3b18a7892f4edee3ff06706b61b8124a025eafeb643fa2484fd9ed96351d9bbf614c926a0777a900bd70313b8b8b37cc70000a400010093163a17a5f7806c17689c32c537a826fa318db71cc66703bff0caa8805b21d8b42afcfffa9ea40828b1b896269d93fd0a5496032e8ebb6fa859da2ad686bac18437972a2bc90d9a2683152b943e5a1bc3b254dea37e4a1a8e555fc11fd3bb27735ff2f6bf6dd1fbbb4559fc2a52515e2bc4983d872d53c9d03402cca124d13390d61fba64d7269aeb10f1fa2c808fcba2ce8a9e4442beab1ccda4d747a31b8d"], 0x188}, 0x1, 0x0, 0x0, 0x20004004}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) semget$private(0x0, 0x1, 0x100) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000006c38e67e29559589a0000950000000000000059681a3198eb0bd72c6cde802836486a52e0c5b9a8048a3892c75fb037e51974b9d0159e473b060d9fdcf9a58f6ac46eadbea8fbdb7d1b2f7b31777eac21f7fd149e1e97a3abaf00be51d557bf07b39cc2d489"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xc, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300fb00aae742dc154ff24ba615cc00000000008500000083000000bf090000000000005509010000000000950000000000000018440000020000000000000000000000185000000e000000000000000000000018160000", @ANYRES32=r2, @ANYBLOB="00000000000000008500000092000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x4, 0x23, &(0x7f00000003c0)=""/35, 0x41000, 0x4b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x1, 0xb, 0x0, 0x9}, 0x10, 0x0, r7, 0x6, &(0x7f00000008c0)=[0xffffffffffffffff, r2], &(0x7f0000000ac0)=[{0x0, 0x4, 0x3, 0x605a1cfde08af6df}, {0x4, 0x4, 0xc, 0x6}, {0x0, 0x2, 0x5, 0x3}, {0x2, 0x2, 0xf, 0x5}, {0x1, 0x2, 0x4, 0x7}, {0x4, 0x2, 0xd, 0x6}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x8}, {0xfff3}}}, 0x24}}, 0x40080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x10) setresuid(0x0, 0xee01, 0xee00) 44.540754632s ago: executing program 0 (id=584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x20}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) 44.512937582s ago: executing program 33 (id=584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x20}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) 15.044880861s ago: executing program 5 (id=1079): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) gettid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000200e0ff0b00000000000000"], 0x0) 14.530915628s ago: executing program 5 (id=1084): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="54010000100001000000000000000000ffffffff000000000000000000000000ff0100000000000000000000000000010000fffd000000200000000084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000004d56c000000fe8000f5ffffff00000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000feffffffffffffff00000000ffffffff000000002bbd700000000000020000002200000000000000480003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x154}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x700, 0x7f07, 0x1f0d9b50, 0x0, {{0x11, 0x4, 0x0, 0x0, 0x44, 0x64, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @remote, {[@ssrr={0x89, 0x1b, 0x5f, [@rand_addr=0x64010102, @private=0xa010100, @multicast2, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x13, 0x32, [@rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}}}}) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) r4 = getuid() sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=@acquire={0x1f4, 0x17, 0xd04, 0x70bd26, 0x25dfdbfd, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, {@in6=@mcast2, @in=@remote, 0x4e24, 0x8000, 0x4e20, 0x0, 0xa, 0x0, 0x120, 0x3b, r1, r3}, {{@in=@broadcast, @in=@multicast2, 0x4e22, 0x1b, 0x4e21, 0xddd, 0x2, 0xe0, 0x80, 0x3a, 0x0, r4}, {0x3c, 0xb3, 0x7, 0x25, 0x1, 0x4, 0xc0000000000000, 0x7}, {0x7, 0x6, 0x7, 0x6e6f523b}, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x8, 0x0, 0x0, 0x70bd2c}, [@algo_auth={0xca, 0x1, {{'blake2s-256-generic\x00'}, 0x410, "664d456ad2f0723004c260991266c1d8a1cbfd299db50f84da696e91802ec7e5b3d049b8fb31d30054ccf4ecd92db9bdd9317479ddd1b9b017b0fbec6213ed58bae7af6d7754b2e7fc19be95e04a51e6e22732afff3ccbcbda360b6e2fa69e3b0fb863c7182bbb8a185c838a0d0ad68222c5f12a44fcaf3e7ad906092338bea68f4a"}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x80}, 0x88020) 14.273518022s ago: executing program 5 (id=1093): ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) stat(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24048050) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000e4000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000b80003800800014000000000a400038014000100776c616e3000000000000000000000001400010076657468305f746f5f62617461647600120001006d6163766c616e3100000000000000001400010067656e657665310000000000000000000a0001006772653000000000000000000000000014000100776c616e3100000000000000000000001400010076657468315f766972745f77696669001400010076657468305f746f5f626f6e64000000080002400000000604020000180a0101000b000000000000010000000900010073797a3000000000e800038008000140000000000800014000000000cc0003801400010069703665727370616e3000000000000014000100776732000000000000000000000000001400010076657468305f6d61637674617000000014000100626f6e645f736c6176655f310000000014000100626f6e645f736c6176655f300000000014000100636169663000000000000000000000001400010070696d726567300000000000000000001400010070696d72656731000000"], 0x330}}, 0x0) 13.879130308s ago: executing program 5 (id=1095): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x81c00a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cf, &(0x7f0000002080)="$eJzs3T9rJGUYAPBnNrN//AO7hZUIDmhhdVyutdlD7kBM5bGFWmjw7kCyi3AHAUUcrxI7v4CfQBD8DrY2dpaCH8DyhIORmZ3ZP8nsJpFsxMvv1+TJvO8z7zMzL8mkyLOfvDY7up/Fwydf/RGDQRKdcYzjaRKj6ETjm1gz/j4AgP+zp0URfxVzLcO/f7chL4mIwY5rAwB244zf/7V0Gf58JWUBADt074MP37t9cHDn/SwbxN3Zt8eT8i/78ut8/PbD+Cym8SBuxjCeRVQvCt2o3hbK8G5RFHmalUbx5iw/npSZs49/rc//y8t1sB/DGFXR4m2jyn/34M5+NreSn5d1vFivPy7XvxXDeGWRvJZ/qyU/Jr14642V+m/EMH77ND6Padyviljmf72fZe+UrzgfleWV+Ul+POlX85aKvWbx/AqfDwAAAAAAAAAAAAAAAAAAAAAAz6cbde+cflT9e8pDdf+dvWflN93IGqP1/jzz/KQ50Wp/oKIo8iJ+aPrr3MyyrKgnLvPTeDVdbSwIAAAAAAAAAAAAAAAAAAAA19fjL748OpxOHzy6lKDpBpBGxN/3Iv7tecYrR16P7ZP79ZqH02mnDtfnpKtHYq+Zk0RsLSPSRTODS7s/G4IXTtVcBz/+1JbVW39waazMGZy9aLd9rcsMmt11dJhE65z+oubBfJNUjSCWc3pxzrV6m4aKuMj267UODbdllXv99HleqoJ8w50vg0i2Ffb2n/M7Vx9JTl5Fr7qrrendOoi2wqq90f4sTgQxmKef/lmR6NYBAAAAAAAAAAAAAAAAAAA7tfzv35bBJ1tTO0V/Z2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJVafv7/BYK8Tj7H5F48evwfXyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADXwD8BAAD//2T0YAU=") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f0000000480)=@known='system.posix_acl_access\x00', 0x0, 0x1a) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000200)={0xfffd, 0x2}, 0x4) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) r6 = inotify_init() inotify_add_watch(r6, &(0x7f00000002c0)='./bus\x00', 0x24000137) openat(r5, &(0x7f00000004c0)='./bus\x00', 0x40000, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) ptrace(0x10, r2) syz_usb_connect(0x5, 0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) socket$kcm(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x900, 0x0) 12.680064926s ago: executing program 5 (id=1111): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05000000000000000000220000000a000100777061"], 0x20}}, 0x2000c094) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc000000000000000a751c5d706ed3d00f15d29602fc9bdb496c99e1f32b8834fe0fd3eb7d6fc075f24d3025b7e45060c32e43bdaa9a412989edcbdff57d39e03e1de122654e2ebc2d4d17ba9880ce9da937509a88fbdb77a200fb0add1fcc3d420b7f365e9586fbb14851b5cf6d9f510737fe4324d1b8747672f1beebfb6d805d0a60a58b5051900762414c990f9224c0af9f7b9296ae756c3953307ebfb95db4bcc77bf45150136c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000000ffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) 12.555060228s ago: executing program 5 (id=1113): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001a00)={{0x0, 0x8, 0x4, 0x8f, 0x7, 0xfffffffffffffff9, 0xca, 0x6, 0x9, 0x10001, 0x1b5, 0x2543, 0x2, 0x7f, 0xe}}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000002a00)={r3, 0x7fffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000300)="63e4ed8e46c8f19c637e3acfea65", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r6, 0x0, 0x80}, 0x18) r7 = io_uring_setup(0x6280, &(0x7f0000000580)={0x0, 0x90000000, 0x1, 0x0, 0x1d2}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000008c0)=@base={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000400)='GPL\x00', r9) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000240)={0x8001, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) 12.486008749s ago: executing program 34 (id=1113): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001a00)={{0x0, 0x8, 0x4, 0x8f, 0x7, 0xfffffffffffffff9, 0xca, 0x6, 0x9, 0x10001, 0x1b5, 0x2543, 0x2, 0x7f, 0xe}}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000002a00)={r3, 0x7fffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000300)="63e4ed8e46c8f19c637e3acfea65", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r6, 0x0, 0x80}, 0x18) r7 = io_uring_setup(0x6280, &(0x7f0000000580)={0x0, 0x90000000, 0x1, 0x0, 0x1d2}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000008c0)=@base={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000400)='GPL\x00', r9) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000240)={0x8001, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) 3.873435601s ago: executing program 6 (id=1221): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000200)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000ffff00000000000000000000000000fe8000000000000000000000000000aa"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6) lsetxattr$security_selinux(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000200), &(0x7f0000000000)='system_u:object_r:net_conf_t:s0\x00', 0xfffffffffffffec4, 0x1) flock(r2, 0x4) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x24}}, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000000, &(0x7f00000002c0)={[{@prjquota}, {@jqfmt_vfsold}], [{@fsname={'fsname', 0x3d, '('}}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000200)=r1}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async) syz_emit_ethernet(0x4a, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000ffff00000000000000000000000000fe8000000000000000000000000000aa"], 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) (async) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6) (async) lsetxattr$security_selinux(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000200), &(0x7f0000000000)='system_u:object_r:net_conf_t:s0\x00', 0xfffffffffffffec4, 0x1) (async) flock(r2, 0x4) (async) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x24}}, 0x1) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000000, &(0x7f00000002c0)={[{@prjquota}, {@jqfmt_vfsold}], [{@fsname={'fsname', 0x3d, '('}}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") (async) 3.794184242s ago: executing program 6 (id=1225): r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2, 0x0, 0x4000000}, 0x10}}, 0x0) 3.726367443s ago: executing program 6 (id=1227): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x80ffffff, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 3.669260474s ago: executing program 6 (id=1228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = request_key(&(0x7f0000000200)='id_resolver\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000400)='\x0e.\x00', 0xfffffffffffffffa) keyctl$get_security(0x11, r2, &(0x7f00000005c0)=""/227, 0xe3) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0986dd6000e1ff00083a00fe800000000000000000000000000003fe80000000000000000000008d1bcd51ec6c5adbaebe000000aa810090780024f8b7272e8f453f9d1a"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7fff}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffec, {0x0, 0x0, 0xe403, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x44) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080002000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r7, &(0x7f0000000000)={0xa0000001}) 2.778683347s ago: executing program 6 (id=1241): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xc0d6, &(0x7f00000000c0)={[{@noload}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x45b, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x68100, 0x12a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfdfb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg2\x00', 0x0}) splice(r0, &(0x7f0000000700)=0xfffffffffffffffc, r2, &(0x7f0000000740)=0x1, 0x4, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0], 0x0, 0x89, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0xc, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb2ad}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0xb84, 0x7, &(0x7f0000000400)=""/7, 0x41000, 0x2c, '\x00', r3, @fallback=0x6c, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xd, 0x9, 0xffffffff}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0, 0x10, 0x7, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) creat(0x0, 0x0) pipe(&(0x7f0000000180)) 2.461905133s ago: executing program 6 (id=1246): ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup2(r0, r0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) lseek(r3, 0x7, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x714f, 0x100000000000000) 1.662030265s ago: executing program 2 (id=1256): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd29, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 1.265437821s ago: executing program 2 (id=1261): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080), &(0x7f0000000180), 0x2, 0x2) 1.206020352s ago: executing program 2 (id=1262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x50, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0xec}}, 0x0) 1.204353502s ago: executing program 2 (id=1264): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_io_uring_setup(0x6883, &(0x7f0000000740)={0x0, 0x101828, 0x10100, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001100)=""/224, 0xe0}], 0x1}, 0x5}], 0x2, 0x10000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007", @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="6c3223f1260d20381f0dd3a76df02334e4bf8fadf760deeb4fc2bce179e7237fd7611122fe54a09db7f8577e252a3974d78d8dcbf2cb14eb960aa566c09ef53dbe77313d9f0077066095f0dc0afa84f7018a60674a45734375c33ce4001e82078751b0efe7f06010af7c18dcdd7bd7f3ecd166e8bc966d7b9ad7ca70f2db00d63fe16f8899781ff4ad549b7730d76a08ea9416eadb5199f79262c9680447d45fb485f96a33c5ec98fa388c193baae4ab285f862521ae", @ANYRES64=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000c1f59d855f96b641"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) 1.091787844s ago: executing program 4 (id=1267): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x0, 0x224}, &(0x7f0000000040), &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='rpcgss_need_reencode\x00', r1, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000340)={[{@usrjquota}]}, 0xfd, 0x448, &(0x7f00000009c0)="$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") syz_io_uring_setup(0xd3c, &(0x7f00000003c0)={0x0, 0x576, 0x0, 0x0, 0x221}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)='./file1\x00') 1.012538785s ago: executing program 4 (id=1268): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="0204000e0a00000000000000fe03928975987b08f63b9cb0ffffff03000600ff0000000200000000000000000000000000000002000100000004d30000060b00000000030005283300000002000000ac141daa0000000000000000"], 0x50}, 0x1, 0x7}, 0x4000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='net_dev_start_xmit\x00', r1}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="2c10314adf467f8ef6a1488f7ab023aebf0e65b0e72ce5f6b217eb7624fc056160b9a1fb80958914b68e122d4067f1bd67ab4aa28fc678c2deedf6cf545dc87ab32aedeb3ba3d9910a7e8450580222625bd0439b188a1703fe2dbf9f71330f6f78243b14e627d096127e07ae1934a5842c61136bb71ba7e1619c587ededce8c4a6609abb1af5"]) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES16=r3, @ANYRESDEC=r2, @ANYRES64, @ANYRES32=r1], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x200000000003}, 0x18) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000540)="808924df0810a2120c0a781930ffaf37e8579ef1fafe87d047a65da13229ccd508daf71b50af293d4a1df1e5e6a3cacc9801c89bdf5528ab190bba2b264b086ff7e827640f929b07191cab2ccaea34fd71d87451f5b7b215960d6a0074e01ca83e3917eb50fda65392", 0xe}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES16=r6, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) r9 = socket$caif_stream(0x25, 0x1, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000139c31370000ea00000000000000020000"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYRES16=r8, @ANYRES32=r10, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095", @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYBLOB="7d9c6a4cd256befc7c8328f0c2d5786dd21b3914ed6fc8d51567b9d6b8e06a5d2295811786186c0967da25c821ab6a1b39fb4acfd554371e50fe077de1149a63ffd2fd10860814a5dd50f8a6f90cf570b883500f73135b5c6dabaaab7070aff2fc4f56d29b622f83f5f5559eb7776e8ae5c823f6c789df53165ed782e679413a15ea8c1df1cd16de5d428dd9a59db1b4f5198348fc3cc3fc4d259f8a5b202fe79923e8fb06d576f2aefdfaf84ab5ae21c81a72cfb448bf6f7251accf76a590870e612e0cc06fbccec442"], &(0x7f0000000080)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) sendmmsg$inet(r9, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000780)="92", 0x1}], 0x1}}], 0x2, 0x2600c054) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)) 924.138436ms ago: executing program 2 (id=1269): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 21) 867.261667ms ago: executing program 2 (id=1270): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff00000000000000", 0x1c) recvmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40002c1, 0x2000a002, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = gettid() syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2626, 0xaddf, 0xa, 0x0, 0x9) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 847.292117ms ago: executing program 4 (id=1271): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) syz_usbip_server_init(0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x635604efd8944610, &(0x7f00000001c0)={@broadcast, @private, 0x0}, &(0x7f0000000200)=0xc) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x3, 0x25dfdbff, {0x60, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x44040) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x7, 0x7, 0x6, 0x36, {{0x7, 0x4, 0x1, 0xc, 0x1c, 0x67, 0x0, 0x6, 0x2f, 0x0, @multicast1, @multicast2, {[@ssrr={0x89, 0x7, 0xf6, [@rand_addr=0x64010101]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0xd, 0x2, 0x9, 0x2, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0x8000, 0x20, 0x1, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r10, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2800000010000104feffff7f0300000000000000", @ANYRES8=r0, @ANYRES32, @ANYRES32=r14, @ANYBLOB="dfe3"], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x811) r18 = socket(0x10, 0x3, 0x0) r19 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xfffffffd, 0x2, {0x0, 0x0, 0x0, r20, {0x0, 0xc}, {0xffff, 0xffff}, {0x8, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x1e}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x4}]}}]}, 0x44}}, 0x68000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x7800, 0x1, 0x9, 0x2, {{0xc, 0x4, 0x2, 0x1, 0x30, 0x66, 0x0, 0x7, 0x30f84d28935abbce, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp_prespec={0x44, 0x1c, 0xa1, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@rand_addr=0x8, 0x28}, {@local, 0x6}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)={0x46c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x4}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1e}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x20c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x2, 0x7, 0xa866472}, {0xff, 0x5, 0x7, 0x3}, {0xfff8, 0x3, 0x8, 0x37}, {0x3, 0xa1, 0x0, 0x2}, {0x3, 0x81, 0x53, 0x7}, {0xe, 0x2, 0x4, 0x4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r21}}}]}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x880}, 0xd0) 787.394568ms ago: executing program 7 (id=1273): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu~=0||!') 715.131869ms ago: executing program 7 (id=1274): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2074, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 658.42933ms ago: executing program 1 (id=1275): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) setrlimit(0x40000000000008, &(0x7f0000000000)) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x7b, 0x7, 0x0, @loopback, @private0, 0x80, 0x7, 0x200005, 0x7}}) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 628.90465ms ago: executing program 7 (id=1276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac00fff50001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) 563.161821ms ago: executing program 7 (id=1277): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x100, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xabd0, 0x400, 0x2, 0x349}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r5 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x40, 0x40, 0x89, 0x0, r4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) getrlimit(0x1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r4], 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x40, 0x109880}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 562.541221ms ago: executing program 1 (id=1278): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x0, 0x224}, &(0x7f0000000040), &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='rpcgss_need_reencode\x00', r1, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000340)={[{@usrjquota}]}, 0xfd, 0x448, &(0x7f00000009c0)="$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") syz_io_uring_setup(0xd3c, &(0x7f00000003c0)={0x0, 0x576, 0x0, 0x0, 0x221}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)='./file1\x00') 435.944983ms ago: executing program 7 (id=1279): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x11, 0x6, @random="0ad32bfb45c9"}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 417.221234ms ago: executing program 1 (id=1280): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000057, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[]) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x800) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000001280), 0x6) 326.651745ms ago: executing program 7 (id=1281): statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0x800, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000d40)={0x4, 0x4, 0x8000, {0x1, 0x1}, 0xa2, 0x9}) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x7fffffffffffffff]}, 0x8, 0x80800) r7 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r7, 0x0, 0x0, 0x0, 0x3000) msgsnd(r7, &(0x7f0000000400)=ANY=[], 0x8, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)) r10 = getpid() sched_setaffinity(r10, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x0, r1, 0x0, r9, 0x90, 0x2d}, 0x0, 0x0, 0x7995, 0x408, 0xfff, 0x81, 0x0, 0x0, 0x8, 0xee99, 0x0, r10}) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000a40)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000b40)=0xe8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000a00), 0x400a, &(0x7f0000000b80)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}, {@cache_none}, {@posixacl}, {@access_user}, {@aname={'aname', 0x3d, 'kmem_cache_free\x00'}}, {@directio}, {@afid={'afid', 0x3d, 0xc0f9}}, {@cache_loose}, {@access_uid={'access', 0x3d, r0}}, {@mmap}], [{@euid_lt={'euid<', r0}}, {@euid_gt}, {@dont_measure}, {@uid_gt={'uid>', r0}}, {@smackfsfloor}, {@flag='rw'}, {@euid_lt={'euid<', r11}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'kmem_cache_free\x00'}}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x39}}]}}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10) r13 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r13, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x93, 0x1, 0x0, [{@broadcast}, {}, {@private}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="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", 0x4c6}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003140)="01", 0x1}], 0x300}}], 0x4, 0xc080) msgrcv(r7, 0x0, 0x0, 0x0, 0x1000) msgsnd(r7, &(0x7f0000000180)={0x2}, 0x8, 0x800) 267.741406ms ago: executing program 4 (id=1282): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000100820085000000a5000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="ebed94c481b4cb6b52f53365622bfe018fba615ccd719b5c35cd2f4ebeb7fff2b68ab347fc40240cafbc3417437b47dccd2ad52935b1f7251ae42bd41c217ddab21451b71ae5e9e673d624e8d9e6a01829e3c25cd391c915853b2ba432d023aba0b002422618d39471bd645da3b9507a880c72440d48d5b9bda6f58c6b58f627279fb2a9c1b20f1829"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) lseek(r2, 0x1, 0x0) getdents64(r2, &(0x7f0000003440)=""/92, 0x5c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000400)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f00000008c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r5, @ANYBLOB="200029bd7000fedbdf250a0000003800068008000300ac14142e06000100000000001400040000000000000000000000ffffac1414aa080006000000000008000700", @ANYRES32=r6, @ANYBLOB="08000400060000000800040080000000080003000800000200000080720000000800020000511715f92808d0c8000300e00000020800060006000000080006000c000000050002000400000014000400fe8008000000000000000000000000bb050002000d00000006000100ff0000000800030002000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4800}, 0x24000400) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 188.930137ms ago: executing program 4 (id=1283): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000002000010000140000000000000a0000000000000000000002080017004e244e220500160000000000"], 0x2c}}, 0x4000000) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0x4000000) r2 = socket(0x8, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x103000, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000500)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2a}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r3, &(0x7f0000000080)=""/54, 0x36) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xf, &(0x7f0000002ec0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f000078e000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007b6000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00003d0000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000005c0)) r4 = socket(0x10, 0x803, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) 138.777188ms ago: executing program 1 (id=1284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x50, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0xec}}, 0x0) 137.844378ms ago: executing program 1 (id=1285): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001d00)=0x0) ptrace$getregs(0xc, r2, 0x7, &(0x7f0000001d40)=""/145) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000001cc0)={0x14, 0x11, 0x1, {0x8, 0x4, 0x3}}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x23, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 79.842939ms ago: executing program 4 (id=1286): close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r2, 0x0, 0x0) pipe2$9p(0x0, 0x0) syz_io_uring_setup(0x804c87, &(0x7f0000000140)={0x0, 0x3b5f, 0x0, 0x2, 0x150, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020002000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000004}, 0x20008110) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_create(0x4, 0x0, &(0x7f0000000200)=0x0) timer_settime(r5, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x9}}, 0x0) syz_read_part_table(0x104f, &(0x7f0000001200)="$eJzsz8EJwkAQBdC/GyPuyZZswiZswtiGdy+24EWr8qgEE0gDIsJ7h93PDHyY8FO3epzjZTu+LbmXlHRJDknW8/p5Ki01w5jPSX116bNZVLUhKTWtrJL0n9kjU+fim+yS7K9fPQ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/sQ7AAD//4vpCY8=") socket$kcm(0x10, 0x2, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000002280)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095", @ANYBLOB="0696b07991285dfa5296974dd31ffda7326571e8715241f2d899", @ANYRESDEC=r5, @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRES8=r6], 0x0, 0x100, 0x0, 0x0, 0x41000, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value=r0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) remap_file_pages(&(0x7f00007a5000/0x4000)=nil, 0x4000, 0x0, 0x5fe, 0x0) remap_file_pages(&(0x7f0000f98000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x20000) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f000079a000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000660000/0x4000)=nil) 0s ago: executing program 1 (id=1287): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000200)={0x0, 0x0}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x493, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20006, 0xc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000920000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) stat(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000302, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x16c, 0x24, 0x8, 0x70bd2a, 0x80, {0x0, 0x0, 0x0, r9, {0xd, 0x5}, {0xf}, {0x3, 0xc}}, [@TCA_STAB={0x140, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x5, 0x4, 0xd, 0x0, 0x7, 0xddd}}, {0x4}}, {{0x1c, 0x1, {0xf, 0x7, 0x5, 0x80000001, 0x1, 0x3, 0x4, 0x2}}, {0x8, 0x2, [0x4, 0x3ff]}}, {{0x1c, 0x1, {0xaf, 0x5, 0xb, 0x0, 0x2, 0xb, 0xd, 0x4}}, {0xc, 0x2, [0x8, 0xffff, 0x4, 0x821]}}, {{0x1c, 0x1, {0x1, 0x8, 0xc, 0x4, 0x0, 0x7ff, 0xdc0, 0x4}}, {0xc, 0x2, [0x8, 0x3, 0x5, 0xb]}}, {{0x1c, 0x1, {0x0, 0x2, 0x400, 0x1ff, 0x1, 0x1, 0xe, 0x8}}, {0x14, 0x2, [0x6, 0x8587, 0x2, 0x43, 0xe7, 0xa, 0xfff6, 0x66]}}, {{0x1c, 0x1, {0x3, 0x7, 0x8, 0x3c, 0x2, 0x8, 0x8, 0x6}}, {0x10, 0x2, [0xb, 0x9, 0x401, 0xa, 0x6, 0x4]}}, {{0x1c, 0x1, {0x3, 0x8, 0x7, 0x40, 0x0, 0xf, 0x1480eedc, 0x3}}, {0xa, 0x2, [0x73e6, 0x7c, 0xfffe]}}, {{0x1c, 0x1, {0x9, 0x6, 0x7, 0x7, 0x2, 0xffffff01, 0x2, 0x2}}, {0x8, 0x2, [0x3a, 0x9d04]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x16c}}, 0x24048050) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): fs error (device loop4): ext4_orphan_get:1398: comm syz.4.851: couldn't read orphan inode 16 (err -117) [ 84.686665][ T6270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.700292][ T6276] EXT4-fs (loop6): 2 truncates cleaned up [ 84.707793][ T6276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.757650][ T6283] @: renamed from vlan0 (while UP) [ 84.800745][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.861284][ T6294] tipc: Enabling of bearer rejected, already enabled [ 84.874706][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.928814][ T6299] loop1: detected capacity change from 0 to 2048 [ 84.961350][ T6304] xt_connbytes: Forcing CT accounting to be enabled [ 84.996705][ T6304] set match dimension is over the limit! [ 85.044615][ T6299] EXT4-fs (loop1): failed to initialize system zone (-117) [ 85.052804][ T6299] EXT4-fs (loop1): mount failed [ 85.086369][ T6319] loop6: detected capacity change from 0 to 512 [ 85.117471][ T6319] EXT4-fs (loop6): 1 orphan inode deleted [ 85.126245][ T6319] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.139381][ T4660] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:29: Failed to release dquot type 1 [ 85.153487][ T6319] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.166018][ T6319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.176757][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.878'. [ 85.210323][ T6331] tipc: Enabling of bearer rejected, already enabled [ 85.271352][ T6340] loop2: detected capacity change from 0 to 128 [ 85.271575][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.884'. [ 85.287533][ T6340] EXT4-fs: Ignoring removed oldalloc option [ 85.295350][ T6347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.884'. [ 85.296538][ T6345] vhci_hcd: invalid port number 96 [ 85.309565][ T6345] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 85.326494][ T6349] loop6: detected capacity change from 0 to 2048 [ 85.333364][ T6340] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz.2.882: iget: checksum invalid [ 85.365246][ T6340] EXT4-fs (loop2): get root inode failed [ 85.370979][ T6340] EXT4-fs (loop2): mount failed [ 85.371926][ T6349] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.491472][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.888'. [ 85.517331][ T6364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.524844][ T6364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.533365][ T6364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.540978][ T6364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.561630][ T6345] loop1: detected capacity change from 0 to 512 [ 85.568959][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.572231][ T6345] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.590266][ T6345] EXT4-fs (loop1): 1 truncate cleaned up [ 85.599204][ T6345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.617163][ T6345] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 85.678823][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.722360][ T6377] loop1: detected capacity change from 0 to 1024 [ 85.729293][ T6377] ext4: Unknown parameter 'euid' [ 85.739134][ T6377] loop1: detected capacity change from 0 to 512 [ 85.746210][ T6377] ext4: Unknown parameter 'fsuuid' [ 85.768088][ T6382] tipc: Enabling of bearer rejected, already enabled [ 85.814405][ T6386] SELinux: syz.1.892 (6386) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 86.434110][ T6408] FAULT_INJECTION: forcing a failure. [ 86.434110][ T6408] name failslab, interval 1, probability 0, space 0, times 0 [ 86.447517][ T6408] CPU: 1 UID: 0 PID: 6408 Comm: syz.4.901 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 86.447562][ T6408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.447577][ T6408] Call Trace: [ 86.447584][ T6408] [ 86.447591][ T6408] __dump_stack+0x1d/0x30 [ 86.447692][ T6408] dump_stack_lvl+0xe8/0x140 [ 86.447714][ T6408] dump_stack+0x15/0x1b [ 86.447732][ T6408] should_fail_ex+0x265/0x280 [ 86.447778][ T6408] should_failslab+0x8c/0xb0 [ 86.447809][ T6408] __kvmalloc_node_noprof+0x123/0x4e0 [ 86.447903][ T6408] ? nf_hook_entries_grow+0x1bc/0x450 [ 86.447950][ T6408] nf_hook_entries_grow+0x1bc/0x450 [ 86.448073][ T6408] __nf_register_net_hook+0x18e/0x480 [ 86.448096][ T6408] nf_register_net_hook+0x88/0x130 [ 86.448120][ T6408] nf_register_net_hooks+0x44/0x150 [ 86.448145][ T6408] nf_ct_netns_do_get+0x2b1/0x380 [ 86.448285][ T6408] nf_ct_netns_get+0x87/0xc0 [ 86.448323][ T6408] helper_mt_check+0x44/0xd0 [ 86.448398][ T6408] xt_check_match+0x2aa/0x4f0 [ 86.448461][ T6408] ? strnlen+0x28/0x50 [ 86.448502][ T6408] ? xt_find_match+0x1d1/0x210 [ 86.448533][ T6408] ? xt_find_match+0x1b5/0x210 [ 86.448570][ T6408] translate_table+0xa9c/0xf90 [ 86.448618][ T6408] ? _copy_from_user+0x89/0xb0 [ 86.448652][ T6408] do_ipt_set_ctl+0x66f/0x820 [ 86.448687][ T6408] ? _raw_spin_unlock_bh+0x36/0x40 [ 86.448776][ T6408] ? tcp_release_cb+0xf1/0x370 [ 86.448815][ T6408] nf_setsockopt+0x199/0x1b0 [ 86.448854][ T6408] ip_setsockopt+0x102/0x110 [ 86.448960][ T6408] tcp_setsockopt+0x95/0xb0 [ 86.448985][ T6408] sock_common_setsockopt+0x69/0x80 [ 86.449084][ T6408] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 86.449144][ T6408] __sys_setsockopt+0x184/0x200 [ 86.449172][ T6408] __x64_sys_setsockopt+0x64/0x80 [ 86.449198][ T6408] x64_sys_call+0x2bd5/0x2fb0 [ 86.449302][ T6408] do_syscall_64+0xd2/0x200 [ 86.449322][ T6408] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 86.449400][ T6408] ? clear_bhb_loop+0x40/0x90 [ 86.449427][ T6408] ? clear_bhb_loop+0x40/0x90 [ 86.449456][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.449485][ T6408] RIP: 0033:0x7f1c7b87e929 [ 86.449504][ T6408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.449602][ T6408] RSP: 002b:00007f1c79e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 86.449672][ T6408] RAX: ffffffffffffffda RBX: 00007f1c7baa6160 RCX: 00007f1c7b87e929 [ 86.449689][ T6408] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000c [ 86.449705][ T6408] RBP: 00007f1c79e98090 R08: 0000000000000410 R09: 0000000000000000 [ 86.449718][ T6408] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000002 [ 86.449730][ T6408] R13: 0000000000000000 R14: 00007f1c7baa6160 R15: 00007fff35f628c8 [ 86.449749][ T6408] [ 86.771936][ T6408] xt_helper: cannot load conntrack support for proto=2 [ 86.989245][ T6418] loop5: detected capacity change from 0 to 1024 [ 87.074029][ T6418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.135799][ T6418] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.903: Allocating blocks 497-513 which overlap fs metadata [ 87.212930][ T6418] EXT4-fs (loop5): pa ffff8881069fb150: logic 256, phys. 369, len 9 [ 87.221064][ T6418] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 87.252341][ T6418] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 87.333120][ T5352] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.370742][ T6406] Set syz1 is full, maxelem 65536 reached [ 87.395552][ T6429] __nla_validate_parse: 4 callbacks suppressed [ 87.395620][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.908'. [ 87.411739][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.908'. [ 87.423936][ T6433] loop7: detected capacity change from 0 to 16384 [ 87.459670][ T6432] loop5: detected capacity change from 0 to 2048 [ 87.473158][ T6435] FAULT_INJECTION: forcing a failure. [ 87.473158][ T6435] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 87.487179][ T6435] CPU: 1 UID: 0 PID: 6435 Comm: syz.6.910 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 87.487217][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.487234][ T6435] Call Trace: [ 87.487243][ T6435] [ 87.487253][ T6435] __dump_stack+0x1d/0x30 [ 87.487336][ T6435] dump_stack_lvl+0xe8/0x140 [ 87.487360][ T6435] dump_stack+0x15/0x1b [ 87.487381][ T6435] should_fail_ex+0x265/0x280 [ 87.487427][ T6435] should_fail_alloc_page+0xf2/0x100 [ 87.487512][ T6435] __alloc_frozen_pages_noprof+0xff/0x360 [ 87.487586][ T6435] alloc_pages_mpol+0xb3/0x250 [ 87.487648][ T6435] vma_alloc_folio_noprof+0x1aa/0x300 [ 87.487713][ T6435] handle_mm_fault+0xec2/0x2be0 [ 87.487744][ T6435] ? mas_walk+0xf2/0x120 [ 87.487775][ T6435] do_user_addr_fault+0x636/0x1090 [ 87.487810][ T6435] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 87.487847][ T6435] exc_page_fault+0x62/0xa0 [ 87.487889][ T6435] asm_exc_page_fault+0x26/0x30 [ 87.487991][ T6435] RIP: 0033:0x7f67ffab0ca3 [ 87.488010][ T6435] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 87.488036][ T6435] RSP: 002b:00007f67fe2564a0 EFLAGS: 00010206 [ 87.488153][ T6435] RAX: 000000000000b000 RBX: 00007f67fe256540 RCX: 00007f67f5e37000 [ 87.488170][ T6435] RDX: 00007f67fe2566e0 RSI: 000000000000000f RDI: 00007f67fe2565e0 [ 87.488187][ T6435] RBP: 0000000000000052 R08: 0000000000000009 R09: 00000000000001ce [ 87.488203][ T6435] R10: 00000000000001d8 R11: 00007f67fe256540 R12: 0000000000000001 [ 87.488220][ T6435] R13: 00007f67ffc8c020 R14: 0000000000000027 R15: 00007f67fe2565e0 [ 87.488242][ T6435] [ 87.488253][ T6435] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 87.546111][ T6430] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 87.553444][ T6435] loop6: detected capacity change from 0 to 512 [ 87.557749][ T6430] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 87.576115][ T6435] EXT4-fs (loop6): 1 orphan inode deleted [ 87.578279][ T6430] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 87.583573][ T6435] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.587688][ T6430] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 87.592436][ T6435] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.612436][ T6430] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 87.612468][ T6430] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 87.612489][ T6430] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 87.612510][ T6430] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 87.612578][ T6430] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 87.612629][ T6430] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 87.612650][ T6430] Buffer I/O error on dev loop7, logical block 9, lost async page write [ 87.616375][ T6430] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 87.619424][ T4659] __quota_error: 202 callbacks suppressed [ 87.619441][ T4659] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 87.631091][ T6430] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 87.636225][ T4659] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 1 [ 87.648095][ T6430] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 87.654670][ T6432] EXT4-fs (loop5): failed to initialize system zone (-117) [ 87.664971][ T6430] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 87.673904][ T6432] EXT4-fs (loop5): mount failed [ 87.685734][ T6430] I/O error, dev loop7, sector 5120 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 87.689442][ T6435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.699792][ T6430] I/O error, dev loop7, sector 6144 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 87.753733][ T6443] veth0: entered promiscuous mode [ 87.788170][ T6430] I/O error, dev loop7, sector 7168 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 87.877337][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.912'. [ 87.884724][ T6430] I/O error, dev loop7, sector 8192 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 87.946519][ T6430] I/O error, dev loop7, sector 9216 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 88.026309][ T29] audit: type=1400 audit(1749648516.862:3302): avc: denied { connect } for pid=6450 comm="syz.6.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.055786][ T6455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.914'. [ 88.055970][ T29] audit: type=1400 audit(1749648516.862:3303): avc: denied { setopt } for pid=6450 comm="syz.6.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.075374][ T6455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6455 comm=syz.1.914 [ 88.103162][ T6455] random: crng reseeded on system resumption [ 88.103977][ T29] audit: type=1400 audit(1749648516.942:3304): avc: denied { append } for pid=6451 comm="syz.1.914" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 88.133106][ T29] audit: type=1400 audit(1749648516.942:3305): avc: denied { open } for pid=6451 comm="syz.1.914" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 88.157504][ T6461] loop1: detected capacity change from 0 to 128 [ 88.168680][ T29] audit: type=1400 audit(1749648516.942:3306): avc: denied { ioctl } for pid=6451 comm="syz.1.914" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 88.200878][ T6461] FAULT_INJECTION: forcing a failure. [ 88.200878][ T6461] name failslab, interval 1, probability 0, space 0, times 0 [ 88.213668][ T6461] CPU: 0 UID: 0 PID: 6461 Comm: syz.1.919 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 88.213754][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.213834][ T6461] Call Trace: [ 88.213842][ T6461] [ 88.213851][ T6461] __dump_stack+0x1d/0x30 [ 88.213907][ T6461] dump_stack_lvl+0xe8/0x140 [ 88.213991][ T6461] dump_stack+0x15/0x1b [ 88.214013][ T6461] should_fail_ex+0x265/0x280 [ 88.214059][ T6461] should_failslab+0x8c/0xb0 [ 88.214137][ T6461] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 88.214178][ T6461] ? __kthread_create_on_node+0xcb/0x230 [ 88.214286][ T6461] kvasprintf+0x8a/0x110 [ 88.214319][ T6461] ? __kmalloc_cache_noprof+0x189/0x320 [ 88.214392][ T6461] ? __pfx_rescuer_thread+0x10/0x10 [ 88.214438][ T6461] __kthread_create_on_node+0xcb/0x230 [ 88.214483][ T6461] ? __pfx_rescuer_thread+0x10/0x10 [ 88.214558][ T6461] kthread_create_on_node+0x89/0xc0 [ 88.214666][ T6461] ? scnprintf+0xb2/0xf0 [ 88.214707][ T6461] init_rescuer+0x179/0x2b0 [ 88.214797][ T6461] ? wq_adjust_max_active+0xda/0x260 [ 88.214833][ T6461] alloc_workqueue+0x11fa/0x1330 [ 88.214865][ T6461] ? __blockdev_direct_IO+0x130/0x1ec0 [ 88.214900][ T6461] ? should_fail_ex+0xdb/0x280 [ 88.215010][ T6461] sb_init_dio_done_wq+0x2b/0x80 [ 88.215035][ T6461] __blockdev_direct_IO+0x1e22/0x1ec0 [ 88.215073][ T6461] ? __pfx_fat_get_block+0x10/0x10 [ 88.215238][ T6461] fat_direct_IO+0x102/0x1d0 [ 88.215327][ T6461] generic_file_direct_write+0xfc/0x240 [ 88.215355][ T6461] __generic_file_write_iter+0xab/0x120 [ 88.215384][ T6461] generic_file_write_iter+0x8d/0x2f0 [ 88.215431][ T6461] ? css_rstat_updated+0xcd/0x5b0 [ 88.215478][ T6461] ? count_memcg_events+0x179/0x240 [ 88.215512][ T6461] ? __rcu_read_unlock+0x4f/0x70 [ 88.215541][ T6461] ? handle_mm_fault+0x2264/0x2be0 [ 88.215633][ T6461] ? avc_policy_seqno+0x15/0x30 [ 88.215703][ T6461] ? selinux_file_permission+0x1e4/0x320 [ 88.215786][ T6461] ? security_file_permission+0x22/0x80 [ 88.215821][ T6461] aio_write+0x2e5/0x410 [ 88.215862][ T6461] io_submit_one+0xacd/0x11d0 [ 88.215902][ T6461] __se_sys_io_submit+0xfb/0x280 [ 88.215939][ T6461] __x64_sys_io_submit+0x43/0x50 [ 88.215958][ T6461] x64_sys_call+0xfc4/0x2fb0 [ 88.215982][ T6461] do_syscall_64+0xd2/0x200 [ 88.216004][ T6461] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 88.216043][ T6461] ? clear_bhb_loop+0x40/0x90 [ 88.216065][ T6461] ? clear_bhb_loop+0x40/0x90 [ 88.216166][ T6461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.216193][ T6461] RIP: 0033:0x7f87be18e929 [ 88.216214][ T6461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.216238][ T6461] RSP: 002b:00007f87bc7f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 88.216263][ T6461] RAX: ffffffffffffffda RBX: 00007f87be3b5fa0 RCX: 00007f87be18e929 [ 88.216279][ T6461] RDX: 0000200000000540 RSI: 000000000000003b RDI: 00007f87beeee000 [ 88.216331][ T6461] RBP: 00007f87bc7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.216347][ T6461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.216359][ T6461] R13: 0000000000000000 R14: 00007f87be3b5fa0 R15: 00007ffe135210c8 [ 88.216378][ T6461] [ 88.216386][ T6461] workqueue: Failed to create a rescuer kthread for wq "dio/loop1": -ENOMEM [ 88.291460][ T6470] loop6: detected capacity change from 0 to 164 [ 88.333861][ T29] audit: type=1400 audit(1749648517.172:3307): avc: denied { ioctl } for pid=6462 comm="syz.2.920" path="socket:[16054]" dev="sockfs" ino=16054 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.342933][ T6470] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 88.506732][ T6475] FAULT_INJECTION: forcing a failure. [ 88.506732][ T6475] name failslab, interval 1, probability 0, space 0, times 0 [ 88.556936][ T29] audit: type=1400 audit(1749648517.362:3308): avc: denied { read } for pid=6469 comm="syz.6.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.562246][ T6475] CPU: 0 UID: 0 PID: 6475 Comm: syz.2.925 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 88.562283][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.562300][ T6475] Call Trace: [ 88.562319][ T6475] [ 88.562328][ T6475] __dump_stack+0x1d/0x30 [ 88.562361][ T6475] dump_stack_lvl+0xe8/0x140 [ 88.562384][ T6475] dump_stack+0x15/0x1b [ 88.562429][ T6475] should_fail_ex+0x265/0x280 [ 88.562469][ T6475] should_failslab+0x8c/0xb0 [ 88.562499][ T6475] __kmalloc_noprof+0xa5/0x3e0 [ 88.562531][ T6475] ? ethnl_default_doit+0x133/0x8f0 [ 88.562621][ T6475] ethnl_default_doit+0x133/0x8f0 [ 88.562648][ T6475] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 88.562708][ T6475] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 88.562783][ T6475] genl_family_rcv_msg_doit+0x143/0x1b0 [ 88.562829][ T6475] genl_rcv_msg+0x422/0x460 [ 88.562864][ T6475] ? __pfx_ethnl_default_doit+0x10/0x10 [ 88.562894][ T6475] netlink_rcv_skb+0x120/0x220 [ 88.562953][ T6475] ? __pfx_genl_rcv_msg+0x10/0x10 [ 88.563064][ T6475] genl_rcv+0x28/0x40 [ 88.563101][ T6475] netlink_unicast+0x5a1/0x670 [ 88.563151][ T6475] netlink_sendmsg+0x58b/0x6b0 [ 88.563186][ T6475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.563264][ T6475] __sock_sendmsg+0x142/0x180 [ 88.563306][ T6475] ____sys_sendmsg+0x31e/0x4e0 [ 88.563369][ T6475] ___sys_sendmsg+0x17b/0x1d0 [ 88.563460][ T6475] __x64_sys_sendmsg+0xd4/0x160 [ 88.563497][ T6475] x64_sys_call+0x2999/0x2fb0 [ 88.563529][ T6475] do_syscall_64+0xd2/0x200 [ 88.563559][ T6475] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 88.563636][ T6475] ? clear_bhb_loop+0x40/0x90 [ 88.563720][ T6475] ? clear_bhb_loop+0x40/0x90 [ 88.563752][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.563784][ T6475] RIP: 0033:0x7f2f6bbbe929 [ 88.563805][ T6475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.563832][ T6475] RSP: 002b:00007f2f6a227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.563859][ T6475] RAX: ffffffffffffffda RBX: 00007f2f6bde5fa0 RCX: 00007f2f6bbbe929 [ 88.563929][ T6475] RDX: 0000000020000080 RSI: 0000200000000280 RDI: 0000000000000003 [ 88.563947][ T6475] RBP: 00007f2f6a227090 R08: 0000000000000000 R09: 0000000000000000 [ 88.564028][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.564046][ T6475] R13: 0000000000000000 R14: 00007f2f6bde5fa0 R15: 00007ffc34deb328 [ 88.564074][ T6475] [ 88.680354][ T6480] loop2: detected capacity change from 0 to 1024 [ 88.769975][ T29] audit: type=1326 audit(1749648517.602:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7b87e929 code=0x7ffc0000 [ 88.786898][ T6487] FAULT_INJECTION: forcing a failure. [ 88.786898][ T6487] name failslab, interval 1, probability 0, space 0, times 0 [ 88.790675][ T29] audit: type=1326 audit(1749648517.602:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7b87e929 code=0x7ffc0000 [ 88.795409][ T6487] CPU: 0 UID: 0 PID: 6487 Comm: syz.4.930 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 88.795498][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.795514][ T6487] Call Trace: [ 88.795521][ T6487] [ 88.795530][ T6487] __dump_stack+0x1d/0x30 [ 88.795556][ T6487] dump_stack_lvl+0xe8/0x140 [ 88.795615][ T6487] dump_stack+0x15/0x1b [ 88.795636][ T6487] should_fail_ex+0x265/0x280 [ 88.795714][ T6487] should_failslab+0x8c/0xb0 [ 88.795743][ T6487] kmem_cache_alloc_node_noprof+0x57/0x320 [ 88.795779][ T6487] ? __alloc_skb+0x101/0x320 [ 88.795884][ T6487] __alloc_skb+0x101/0x320 [ 88.795922][ T6487] ? audit_log_start+0x365/0x6c0 [ 88.796038][ T6487] audit_log_start+0x380/0x6c0 [ 88.796084][ T6487] audit_seccomp+0x48/0x100 [ 88.796114][ T6487] ? __seccomp_filter+0x68c/0x10d0 [ 88.796145][ T6487] __seccomp_filter+0x69d/0x10d0 [ 88.796208][ T6487] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 88.796241][ T6487] ? vfs_write+0x75e/0x8e0 [ 88.796278][ T6487] __secure_computing+0x82/0x150 [ 88.796368][ T6487] syscall_trace_enter+0xcf/0x1e0 [ 88.796442][ T6487] do_syscall_64+0xac/0x200 [ 88.796473][ T6487] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 88.796510][ T6487] ? clear_bhb_loop+0x40/0x90 [ 88.796542][ T6487] ? clear_bhb_loop+0x40/0x90 [ 88.796594][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.796625][ T6487] RIP: 0033:0x7f1c7b87d33c [ 88.796647][ T6487] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 88.796693][ T6487] RSP: 002b:00007f1c79ee7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.796720][ T6487] RAX: ffffffffffffffda RBX: 00007f1c7baa5fa0 RCX: 00007f1c7b87d33c [ 88.796738][ T6487] RDX: 000000000000000f RSI: 00007f1c79ee70a0 RDI: 0000000000000003 [ 88.796756][ T6487] RBP: 00007f1c79ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.796774][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.796792][ T6487] R13: 0000000000000000 R14: 00007f1c7baa5fa0 R15: 00007fff35f628c8 [ 88.796835][ T6487] [ 88.850311][ T6480] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 89.187209][ T6498] netlink: 32 bytes leftover after parsing attributes in process `syz.1.931'. [ 89.226783][ T6502] FAULT_INJECTION: forcing a failure. [ 89.226783][ T6502] name failslab, interval 1, probability 0, space 0, times 0 [ 89.239626][ T6502] CPU: 1 UID: 0 PID: 6502 Comm: syz.5.937 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 89.239656][ T6502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.239673][ T6502] Call Trace: [ 89.239681][ T6502] [ 89.239691][ T6502] __dump_stack+0x1d/0x30 [ 89.239715][ T6502] dump_stack_lvl+0xe8/0x140 [ 89.239784][ T6502] dump_stack+0x15/0x1b [ 89.239817][ T6502] should_fail_ex+0x265/0x280 [ 89.239865][ T6502] should_failslab+0x8c/0xb0 [ 89.239890][ T6502] kmem_cache_alloc_noprof+0x50/0x310 [ 89.239920][ T6502] ? __kernfs_new_node+0x6d/0x350 [ 89.240005][ T6502] __kernfs_new_node+0x6d/0x350 [ 89.240031][ T6502] ? __rcu_read_unlock+0x4f/0x70 [ 89.240052][ T6502] ? __rcu_read_unlock+0x4f/0x70 [ 89.240075][ T6502] ? __rcu_read_unlock+0x4f/0x70 [ 89.240095][ T6502] ? kernfs_next_descendant_post+0xd3/0x110 [ 89.240198][ T6502] kernfs_new_node+0xd0/0x140 [ 89.240219][ T6502] __kernfs_create_file+0x4b/0x180 [ 89.240248][ T6502] ? __pfx_dev_attr_show+0x10/0x10 [ 89.240357][ T6502] ? __pfx_dev_attr_store+0x10/0x10 [ 89.240450][ T6502] sysfs_add_file_mode_ns+0x132/0x1c0 [ 89.240509][ T6502] internal_create_group+0x441/0x9e0 [ 89.240582][ T6502] sysfs_create_groups+0x3f/0xf0 [ 89.240685][ T6502] device_add_attrs+0x64/0x3e0 [ 89.240792][ T6502] ? kobject_put+0x10b/0x190 [ 89.240907][ T6502] device_add+0x37a/0x770 [ 89.240934][ T6502] netdev_register_kobject+0xe8/0x210 [ 89.241024][ T6502] ? register_netdevice+0x916/0xf00 [ 89.241067][ T6502] register_netdevice+0x931/0xf00 [ 89.241098][ T6502] macsec_newlink+0x35c/0x760 [ 89.241171][ T6502] ? alloc_netdev_mqs+0xa32/0xab0 [ 89.241195][ T6502] ? validate_linkmsg+0x4f2/0x570 [ 89.241301][ T6502] ? rtnl_create_link+0x6b4/0x710 [ 89.241327][ T6502] ? __pfx_macsec_newlink+0x10/0x10 [ 89.241367][ T6502] rtnl_newlink_create+0x1b9/0x620 [ 89.241467][ T6502] ? security_capable+0x83/0x90 [ 89.241518][ T6502] ? netlink_ns_capable+0x86/0xa0 [ 89.241562][ T6502] rtnl_newlink+0xf29/0x12d0 [ 89.241596][ T6502] ? trie_lookup_elem+0x3fe/0x430 [ 89.241638][ T6502] ? xas_load+0x413/0x430 [ 89.241663][ T6502] ? __memcg_slab_free_hook+0x135/0x230 [ 89.241704][ T6502] ? __kfree_skb+0x109/0x150 [ 89.241728][ T6502] ? __rcu_read_unlock+0x4f/0x70 [ 89.241756][ T6502] ? avc_has_perm_noaudit+0x1b1/0x200 [ 89.241868][ T6502] ? selinux_capable+0x1f9/0x270 [ 89.241906][ T6502] ? security_capable+0x83/0x90 [ 89.241939][ T6502] ? ns_capable+0x7d/0xb0 [ 89.241963][ T6502] ? __pfx_rtnl_newlink+0x10/0x10 [ 89.241997][ T6502] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 89.242078][ T6502] netlink_rcv_skb+0x120/0x220 [ 89.242102][ T6502] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.242167][ T6502] rtnetlink_rcv+0x1c/0x30 [ 89.242197][ T6502] netlink_unicast+0x5a1/0x670 [ 89.242244][ T6502] netlink_sendmsg+0x58b/0x6b0 [ 89.242276][ T6502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.242299][ T6502] __sock_sendmsg+0x142/0x180 [ 89.242352][ T6502] ____sys_sendmsg+0x31e/0x4e0 [ 89.242411][ T6502] ___sys_sendmsg+0x17b/0x1d0 [ 89.242532][ T6502] __x64_sys_sendmsg+0xd4/0x160 [ 89.242561][ T6502] x64_sys_call+0x2999/0x2fb0 [ 89.242584][ T6502] do_syscall_64+0xd2/0x200 [ 89.242612][ T6502] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 89.242655][ T6502] ? clear_bhb_loop+0x40/0x90 [ 89.242690][ T6502] ? clear_bhb_loop+0x40/0x90 [ 89.242725][ T6502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.242746][ T6502] RIP: 0033:0x7f533537e929 [ 89.242765][ T6502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.242784][ T6502] RSP: 002b:00007f53339e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.242808][ T6502] RAX: ffffffffffffffda RBX: 00007f53355a5fa0 RCX: 00007f533537e929 [ 89.242876][ T6502] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 89.242892][ T6502] RBP: 00007f53339e7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.242908][ T6502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.242924][ T6502] R13: 0000000000000000 R14: 00007f53355a5fa0 R15: 00007fffb2aaea68 [ 89.243028][ T6502] [ 89.253290][ T6500] FAULT_INJECTION: forcing a failure. [ 89.253290][ T6500] name failslab, interval 1, probability 0, space 0, times 0 [ 89.664826][ T6500] CPU: 0 UID: 0 PID: 6500 Comm: syz.2.936 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 89.664925][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.664965][ T6500] Call Trace: [ 89.664972][ T6500] [ 89.664980][ T6500] __dump_stack+0x1d/0x30 [ 89.664999][ T6500] dump_stack_lvl+0xe8/0x140 [ 89.665016][ T6500] dump_stack+0x15/0x1b [ 89.665030][ T6500] should_fail_ex+0x265/0x280 [ 89.665061][ T6500] should_failslab+0x8c/0xb0 [ 89.665108][ T6500] __kmalloc_noprof+0xa5/0x3e0 [ 89.665215][ T6500] ? sock_kmalloc+0x85/0xc0 [ 89.665237][ T6500] sock_kmalloc+0x85/0xc0 [ 89.665257][ T6500] ____sys_sendmsg+0xf8/0x4e0 [ 89.665280][ T6500] ___sys_sendmsg+0x17b/0x1d0 [ 89.665320][ T6500] __sys_sendmmsg+0x178/0x300 [ 89.665352][ T6500] __x64_sys_sendmmsg+0x57/0x70 [ 89.665407][ T6500] x64_sys_call+0x2f2f/0x2fb0 [ 89.665426][ T6500] do_syscall_64+0xd2/0x200 [ 89.665445][ T6500] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 89.665469][ T6500] ? clear_bhb_loop+0x40/0x90 [ 89.665488][ T6500] ? clear_bhb_loop+0x40/0x90 [ 89.665556][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.665575][ T6500] RIP: 0033:0x7f2f6bbbe929 [ 89.665589][ T6500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.665605][ T6500] RSP: 002b:00007f2f6a227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 89.665622][ T6500] RAX: ffffffffffffffda RBX: 00007f2f6bde5fa0 RCX: 00007f2f6bbbe929 [ 89.665633][ T6500] RDX: 0000000000000001 RSI: 0000200000000b80 RDI: 0000000000000006 [ 89.665647][ T6500] RBP: 00007f2f6a227090 R08: 0000000000000000 R09: 0000000000000000 [ 89.665720][ T6500] R10: 0000000024000001 R11: 0000000000000246 R12: 0000000000000001 [ 89.665731][ T6500] R13: 0000000000000000 R14: 00007f2f6bde5fa0 R15: 00007ffc34deb328 [ 89.665750][ T6500] [ 89.906143][ T6518] netlink: 'syz.6.941': attribute type 1 has an invalid length. [ 89.919679][ T6522] loop1: detected capacity change from 0 to 128 [ 89.932678][ T6518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.952321][ T6525] loop2: detected capacity change from 0 to 512 [ 89.959158][ T6525] EXT4-fs: Ignoring removed oldalloc option [ 89.960657][ T6522] syz.1.944: attempt to access beyond end of device [ 89.960657][ T6522] loop1: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 89.985389][ T6525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.998234][ T6525] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.011342][ T6525] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.946: bg 0: block 217: padding at end of block bitmap is not set [ 90.063543][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.091334][ T6536] loop2: detected capacity change from 0 to 512 [ 90.112801][ T6536] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 90.146784][ T6536] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.949: invalid indirect mapped block 2683928664 (level 1) [ 90.166939][ T6536] EXT4-fs (loop2): Remounting filesystem read-only [ 90.168444][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'. [ 90.174082][ T6536] EXT4-fs (loop2): 1 truncate cleaned up [ 90.189338][ T6536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.266348][ T6555] netlink: 32 bytes leftover after parsing attributes in process `syz.4.955'. [ 90.288255][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.299521][ T6558] netlink: 'syz.1.956': attribute type 39 has an invalid length. [ 90.401978][ T6565] netlink: 24 bytes leftover after parsing attributes in process `syz.6.959'. [ 90.510126][ T6570] loop4: detected capacity change from 0 to 8192 [ 90.551504][ T6574] netlink: 80 bytes leftover after parsing attributes in process `syz.6.962'. [ 90.581285][ T6574] netlink: 5 bytes leftover after parsing attributes in process `syz.6.962'. [ 90.622528][ T6578] veth0: entered promiscuous mode [ 90.635998][ T6578] veth0 (unregistering): left promiscuous mode [ 90.646800][ T6578] bond2: (slave veth1): Releasing backup interface [ 90.683213][ T6576] loop2: detected capacity change from 0 to 8192 [ 90.758564][ T6576] loop2: p1 < > p2 < p5 > p3 p4 [ 90.832888][ T6576] loop2: p3 start 83890176 is beyond EOD, truncated [ 90.839774][ T6576] loop2: p4 size 16776960 extends beyond EOD, truncated [ 90.850392][ T6576] loop2: p5 size 16776960 extends beyond EOD, truncated [ 90.971473][ T6594] loop4: detected capacity change from 0 to 512 [ 91.074577][ T6594] EXT4-fs: Ignoring removed oldalloc option [ 91.282762][ T6594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.319002][ T6594] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.348693][ T6576] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 91.454720][ T6595] loop2: detected capacity change from 0 to 512 [ 91.475750][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.520100][ T6595] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.536041][ T6606] loop5: detected capacity change from 0 to 256 [ 91.617315][ T6606] FAT-fs (loop5): codepage cp857 not found [ 91.792811][ T6595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.853571][ T6595] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.953150][ T6576] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.963: bg 0: block 217: padding at end of block bitmap is not set [ 92.100139][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.270911][ T6633] loop2: detected capacity change from 0 to 164 [ 92.273999][ T6632] loop4: detected capacity change from 0 to 1024 [ 92.295025][ T6632] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 92.306163][ T6632] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 92.316234][ T6633] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 92.353872][ T6632] JBD2: no valid journal superblock found [ 92.359742][ T6632] EXT4-fs (loop4): Could not load journal inode [ 92.399250][ T6632] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 92.520314][ T6653] FAULT_INJECTION: forcing a failure. [ 92.520314][ T6653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.534461][ T6653] CPU: 1 UID: 0 PID: 6653 Comm: syz.4.989 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 92.534497][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.534513][ T6653] Call Trace: [ 92.534520][ T6653] [ 92.534530][ T6653] __dump_stack+0x1d/0x30 [ 92.534563][ T6653] dump_stack_lvl+0xe8/0x140 [ 92.534620][ T6653] dump_stack+0x15/0x1b [ 92.534676][ T6653] should_fail_ex+0x265/0x280 [ 92.534712][ T6653] should_fail+0xb/0x20 [ 92.534751][ T6653] should_fail_usercopy+0x1a/0x20 [ 92.534773][ T6653] _copy_to_user+0x20/0xa0 [ 92.534798][ T6653] simple_read_from_buffer+0xb5/0x130 [ 92.534904][ T6653] proc_fail_nth_read+0x100/0x140 [ 92.534935][ T6653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.534956][ T6653] vfs_read+0x19d/0x6f0 [ 92.534973][ T6653] ? __rcu_read_unlock+0x4f/0x70 [ 92.534999][ T6653] ? __fget_files+0x184/0x1c0 [ 92.535042][ T6653] ksys_read+0xda/0x1a0 [ 92.535062][ T6653] __x64_sys_read+0x40/0x50 [ 92.535081][ T6653] x64_sys_call+0x2d77/0x2fb0 [ 92.535106][ T6653] do_syscall_64+0xd2/0x200 [ 92.535133][ T6653] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 92.535194][ T6653] ? clear_bhb_loop+0x40/0x90 [ 92.535217][ T6653] ? clear_bhb_loop+0x40/0x90 [ 92.535246][ T6653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.535302][ T6653] RIP: 0033:0x7f1c7b87d33c [ 92.535318][ T6653] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 92.535376][ T6653] RSP: 002b:00007f1c79ee7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 92.535401][ T6653] RAX: ffffffffffffffda RBX: 00007f1c7baa5fa0 RCX: 00007f1c7b87d33c [ 92.535417][ T6653] RDX: 000000000000000f RSI: 00007f1c79ee70a0 RDI: 0000000000000006 [ 92.535433][ T6653] RBP: 00007f1c79ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 92.535449][ T6653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.535463][ T6653] R13: 0000000000000000 R14: 00007f1c7baa5fa0 R15: 00007fff35f628c8 [ 92.535483][ T6653] [ 92.807372][ T6658] loop4: detected capacity change from 0 to 512 [ 92.839951][ T6658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.911826][ T6658] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.958545][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 92.958561][ T29] audit: type=1400 audit(1749648521.792:3606): avc: denied { append } for pid=6657 comm="syz.4.990" path="/193/bus/cgroup.controllers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 93.079187][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.095037][ T6673] __nla_validate_parse: 4 callbacks suppressed [ 93.095053][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.995'. [ 93.114395][ T6682] loop2: detected capacity change from 0 to 128 [ 93.141512][ T6677] syz.2.996: attempt to access beyond end of device [ 93.141512][ T6677] loop2: rw=2049, sector=145, nr_sectors = 40 limit=128 [ 93.174514][ T6677] syz.2.996: attempt to access beyond end of device [ 93.174514][ T6677] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 93.213971][ T6677] syz.2.996: attempt to access beyond end of device [ 93.213971][ T6677] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 93.233693][ T6677] syz.2.996: attempt to access beyond end of device [ 93.233693][ T6677] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 93.241060][ T6691] loop4: detected capacity change from 0 to 512 [ 93.261675][ T6677] syz.2.996: attempt to access beyond end of device [ 93.261675][ T6677] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 93.267901][ T6691] EXT4-fs: test_dummy_encryption option not supported [ 93.314129][ T6677] syz.2.996: attempt to access beyond end of device [ 93.314129][ T6677] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 93.328199][ T6677] syz.2.996: attempt to access beyond end of device [ 93.328199][ T6677] loop2: rw=2049, sector=273, nr_sectors = 9 limit=128 [ 93.412135][ T29] audit: type=1400 audit(1749648522.212:3607): avc: denied { prog_load } for pid=6698 comm="syz.6.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 93.431559][ T29] audit: type=1400 audit(1749648522.212:3608): avc: denied { bpf } for pid=6698 comm="syz.6.1003" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 93.452390][ T29] audit: type=1400 audit(1749648522.212:3609): avc: denied { perfmon } for pid=6698 comm="syz.6.1003" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 93.474209][ T29] audit: type=1400 audit(1749648522.222:3610): avc: denied { create } for pid=6698 comm="syz.6.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.494946][ T29] audit: type=1326 audit(1749648522.222:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.6.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ffbee929 code=0x7ffc0000 [ 93.519039][ T29] audit: type=1326 audit(1749648522.222:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.6.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f67ffbee929 code=0x7ffc0000 [ 93.542514][ T29] audit: type=1326 audit(1749648522.222:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.6.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ffbee929 code=0x7ffc0000 [ 93.566411][ T29] audit: type=1326 audit(1749648522.222:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.6.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f67ffbee929 code=0x7ffc0000 [ 93.590200][ T29] audit: type=1326 audit(1749648522.222:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.6.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ffbee929 code=0x7ffc0000 [ 93.654330][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'. [ 93.661041][ T6712] tipc: Enabling of bearer rejected, already enabled [ 93.757971][ T6722] loop4: detected capacity change from 0 to 512 [ 93.764061][ T6729] loop1: detected capacity change from 0 to 512 [ 93.772630][ T6722] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.784836][ T6729] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.797471][ T6722] EXT4-fs (loop4): 1 truncate cleaned up [ 93.805251][ T6722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.819199][ T6729] EXT4-fs (loop1): 1 truncate cleaned up [ 93.875708][ T6729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.281280][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.322533][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.334453][ T6759] tipc: Enabling of bearer rejected, already enabled [ 94.368398][ T6763] loop4: detected capacity change from 0 to 164 [ 94.374862][ T6765] loop6: detected capacity change from 0 to 164 [ 94.383029][ T6763] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 94.404024][ T6765] xt_connbytes: Forcing CT accounting to be enabled [ 94.417736][ T6765] set match dimension is over the limit! [ 94.465233][ T6776] loop6: detected capacity change from 0 to 512 [ 94.515552][ T6776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.533860][ T6776] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.555706][ T6788] loop1: detected capacity change from 0 to 512 [ 94.578528][ T6788] EXT4-fs (loop1): 1 orphan inode deleted [ 94.584826][ T6788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.599185][ T4637] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:17: Failed to release dquot type 1 [ 94.629433][ T6788] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.699422][ T6795] loop6: detected capacity change from 0 to 512 [ 94.707423][ T6795] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 94.719205][ T6795] EXT4-fs (loop6): 1 truncate cleaned up [ 94.845237][ T6802] tipc: Enabling of bearer rejected, already enabled [ 94.930112][ T6804] FAULT_INJECTION: forcing a failure. [ 94.930112][ T6804] name failslab, interval 1, probability 0, space 0, times 0 [ 94.943637][ T6804] CPU: 1 UID: 0 PID: 6804 Comm: syz.2.1033 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 94.943742][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.943758][ T6804] Call Trace: [ 94.943767][ T6804] [ 94.943777][ T6804] __dump_stack+0x1d/0x30 [ 94.943805][ T6804] dump_stack_lvl+0xe8/0x140 [ 94.943833][ T6804] dump_stack+0x15/0x1b [ 94.943873][ T6804] should_fail_ex+0x265/0x280 [ 94.943915][ T6804] ? rds_cong_from_addr+0x38/0x2c0 [ 94.943958][ T6804] should_failslab+0x8c/0xb0 [ 94.944072][ T6804] __kmalloc_cache_noprof+0x4c/0x320 [ 94.944101][ T6804] ? should_fail_ex+0xdb/0x280 [ 94.944136][ T6804] rds_cong_from_addr+0x38/0x2c0 [ 94.944227][ T6804] rds_cong_get_maps+0x1a/0x70 [ 94.944266][ T6804] __rds_conn_create+0x536/0x1040 [ 94.944413][ T6804] rds_conn_create_outgoing+0x43/0x60 [ 94.944516][ T6804] rds_sendmsg+0xbd2/0x14a0 [ 94.944556][ T6804] ? __pfx_rds_sendmsg+0x10/0x10 [ 94.944609][ T6804] __sock_sendmsg+0x142/0x180 [ 94.944647][ T6804] ____sys_sendmsg+0x31e/0x4e0 [ 94.944684][ T6804] ___sys_sendmsg+0x17b/0x1d0 [ 94.944733][ T6804] __x64_sys_sendmsg+0xd4/0x160 [ 94.944765][ T6804] x64_sys_call+0x2999/0x2fb0 [ 94.944794][ T6804] do_syscall_64+0xd2/0x200 [ 94.944821][ T6804] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.944900][ T6804] ? clear_bhb_loop+0x40/0x90 [ 94.944928][ T6804] ? clear_bhb_loop+0x40/0x90 [ 94.944958][ T6804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.944985][ T6804] RIP: 0033:0x7f2f6bbbe929 [ 94.945001][ T6804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.945036][ T6804] RSP: 002b:00007f2f6a227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.945056][ T6804] RAX: ffffffffffffffda RBX: 00007f2f6bde5fa0 RCX: 00007f2f6bbbe929 [ 94.945073][ T6804] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 94.945089][ T6804] RBP: 00007f2f6a227090 R08: 0000000000000000 R09: 0000000000000000 [ 94.945105][ T6804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.945121][ T6804] R13: 0000000000000000 R14: 00007f2f6bde5fa0 R15: 00007ffc34deb328 [ 94.945143][ T6804] [ 95.205446][ T6811] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 95.281062][ T6817] FAULT_INJECTION: forcing a failure. [ 95.281062][ T6817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.294988][ T6817] CPU: 1 UID: 0 PID: 6817 Comm: syz.6.1037 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 95.295032][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.295049][ T6817] Call Trace: [ 95.295057][ T6817] [ 95.295067][ T6817] __dump_stack+0x1d/0x30 [ 95.295106][ T6817] dump_stack_lvl+0xe8/0x140 [ 95.295131][ T6817] dump_stack+0x15/0x1b [ 95.295190][ T6817] should_fail_ex+0x265/0x280 [ 95.295265][ T6817] should_fail+0xb/0x20 [ 95.295299][ T6817] should_fail_usercopy+0x1a/0x20 [ 95.295320][ T6817] core_sys_select+0x412/0x6e0 [ 95.295360][ T6817] ? set_user_sigmask+0x178/0x190 [ 95.295388][ T6817] __se_sys_pselect6+0x216/0x280 [ 95.295440][ T6817] __x64_sys_pselect6+0x78/0x90 [ 95.295468][ T6817] x64_sys_call+0x1caa/0x2fb0 [ 95.295536][ T6817] do_syscall_64+0xd2/0x200 [ 95.295564][ T6817] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 95.295701][ T6817] ? clear_bhb_loop+0x40/0x90 [ 95.295770][ T6817] ? clear_bhb_loop+0x40/0x90 [ 95.295792][ T6817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.295814][ T6817] RIP: 0033:0x7f67ffbee929 [ 95.295839][ T6817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.295858][ T6817] RSP: 002b:00007f67fe257038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 95.295880][ T6817] RAX: ffffffffffffffda RBX: 00007f67ffe15fa0 RCX: 00007f67ffbee929 [ 95.295894][ T6817] RDX: 0000200000000880 RSI: 0000200000000840 RDI: 0000000000000040 [ 95.295906][ T6817] RBP: 00007f67fe257090 R08: 0000000000000000 R09: 0000200000000980 [ 95.296014][ T6817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.296030][ T6817] R13: 0000000000000000 R14: 00007f67ffe15fa0 R15: 00007ffd9d571088 [ 95.296056][ T6817] [ 95.639493][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1043'. [ 95.696571][ T6845] loop2: detected capacity change from 0 to 512 [ 95.714485][ T6845] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.726870][ T6845] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1048: corrupted xattr block 19: overlapping e_value [ 95.742520][ T6845] EXT4-fs (loop2): Remounting filesystem read-only [ 95.749083][ T6845] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 95.909707][ T6862] tipc: Enabling of bearer rejected, already enabled [ 95.954900][ T6859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.975847][ T6859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.992499][ T6865] loop4: detected capacity change from 0 to 128 [ 95.999061][ T6865] EXT4-fs: Ignoring removed oldalloc option [ 96.007353][ T6865] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.018211][ T6870] loop1: detected capacity change from 0 to 1024 [ 96.034309][ T6870] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.036279][ T6881] loop2: detected capacity change from 0 to 128 [ 96.078168][ T6885] loop1: detected capacity change from 0 to 256 [ 96.088853][ T6887] tipc: Enabling of bearer rejected, already enabled [ 96.111869][ T6889] loop1: detected capacity change from 0 to 512 [ 96.124790][ T6889] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.172155][ T6889] lo speed is unknown, defaulting to 1000 [ 96.267379][ T6896] netlink: 'syz.2.1061': attribute type 1 has an invalid length. [ 96.270759][ T6889] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm syz.1.1059: corrupted inode contents [ 96.284896][ T6896] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.288611][ T6889] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #19: comm syz.1.1059: mark_inode_dirty error [ 96.305751][ T6889] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm syz.1.1059: corrupted inode contents [ 96.318996][ T6896] loop9: detected capacity change from 0 to 7 [ 96.319908][ T6889] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #19: comm syz.1.1059: mark_inode_dirty error [ 96.325411][ T6896] buffer_io_error: 2038 callbacks suppressed [ 96.325467][ T6896] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.345571][ T6889] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #19: comm syz.1.1059: mark inode dirty (error -117) [ 96.351155][ T6896] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.351180][ T6896] loop9: unable to read partition table [ 96.351205][ T6896] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 96.351205][ T6896] ) failed (rc=-5) [ 96.364322][ T6889] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 96.376502][ T6898] vlan0: entered allmulticast mode [ 96.406112][ T6898] bond2: entered allmulticast mode [ 96.483623][ T6907] netlink: 240 bytes leftover after parsing attributes in process `gtp'. [ 96.492098][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1065'. [ 96.543890][ T6912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6912 comm=syz.5.1065 [ 96.569433][ T6914] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1068'. [ 96.606216][ T6916] loop1: detected capacity change from 0 to 1764 [ 96.621469][ T6919] loop4: detected capacity change from 0 to 512 [ 96.638531][ T6919] EXT4-fs: Ignoring removed nobh option [ 96.658228][ T6921] loop6: detected capacity change from 0 to 2048 [ 96.683990][ T6919] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.786615][ T6931] geneve2: entered promiscuous mode [ 96.791921][ T6931] geneve2: entered allmulticast mode [ 96.815935][ T6921] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.1070: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 96.834003][ T6921] EXT4-fs (loop6): Remounting filesystem read-only [ 96.928018][ T6934] SELinux: failed to load policy [ 96.996650][ T6939] SELinux: failed to load policy [ 97.007922][ T6939] io-wq is not configured for unbound workers [ 97.044962][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'. [ 97.060199][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'. [ 97.069124][ T6936] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1071'. [ 97.227798][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1078'. [ 97.255294][ T6947] loop5: detected capacity change from 0 to 512 [ 97.285433][ T6947] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 97.310539][ T6951] 0ªX¹¦À: renamed from caif0 [ 97.336128][ T6951] 0ªX¹¦À: entered allmulticast mode [ 97.341481][ T6951] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 97.433079][ T6947] EXT4-fs (loop5): 1 truncate cleaned up [ 97.707511][ T6961] rdma_op ffff888149206580 conn xmit_rdma 0000000000000000 [ 97.820035][ T6973] rdma_op ffff88813ca58d80 conn xmit_rdma 0000000000000000 [ 97.969297][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 97.969312][ T29] audit: type=1326 audit(1749648526.802:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87be18e929 code=0x7ffc0000 [ 98.014502][ T29] audit: type=1326 audit(1749648526.832:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87be18e929 code=0x7ffc0000 [ 98.038798][ T29] audit: type=1326 audit(1749648526.832:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f87be18e929 code=0x7ffc0000 [ 98.062931][ T29] audit: type=1326 audit(1749648526.832:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87be18e929 code=0x7ffc0000 [ 98.086605][ T29] audit: type=1326 audit(1749648526.832:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87be18e929 code=0x7ffc0000 [ 98.110865][ T29] audit: type=1326 audit(1749648526.832:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f87be18e929 code=0x7ffc0000 [ 98.134957][ T29] audit: type=1326 audit(1749648526.832:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87be18e929 code=0x7ffc0000 [ 98.158544][ T29] audit: type=1326 audit(1749648526.832:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f87be18d58a code=0x7ffc0000 [ 98.182493][ T29] audit: type=1326 audit(1749648526.832:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87be1c11e5 code=0x7ffc0000 [ 98.356602][ T6990] loop5: detected capacity change from 0 to 256 [ 98.509357][ T6992] __nla_validate_parse: 3 callbacks suppressed [ 98.509380][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1094'. [ 98.982817][ T29] audit: type=1326 audit(1749648527.182:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87be18e929 code=0x7ffc0000 [ 99.119342][ T7007] tipc: Enabling of bearer rejected, already enabled [ 99.149533][ T7009] tipc: Enabling of bearer rejected, already enabled [ 99.167068][ T7011] loop2: detected capacity change from 0 to 512 [ 99.188153][ T7011] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.208452][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1104'. [ 99.217786][ T7015] loop4: detected capacity change from 0 to 512 [ 99.224692][ T7015] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.236120][ T7015] EXT4-fs (loop4): 1 truncate cleaned up [ 99.248090][ T7011] EXT4-fs (loop2): 1 truncate cleaned up [ 99.414215][ T7035] netlink: 252 bytes leftover after parsing attributes in process `syz.6.1108'. [ 99.490950][ T7041] loop6: detected capacity change from 0 to 512 [ 99.513424][ T7041] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.520537][ T7041] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 99.534812][ T5352] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 99.542766][ T5352] FAT-fs (loop5): Filesystem has been set read-only [ 99.564166][ T5352] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 99.573933][ T7041] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 99.591497][ T7041] System zones: 1-12 [ 99.598551][ T7041] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.1110: corrupted in-inode xattr: e_value size too large [ 99.607301][ T7045] loop1: detected capacity change from 0 to 512 [ 99.633242][ T7041] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.1110: couldn't read orphan inode 15 (err -117) [ 99.720864][ T4637] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.752058][ T7045] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.755287][ T7050] FAULT_INJECTION: forcing a failure. [ 99.755287][ T7050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.776798][ T7050] CPU: 1 UID: 0 PID: 7050 Comm: syz.2.1114 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 99.776831][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.776845][ T7050] Call Trace: [ 99.776853][ T7050] [ 99.776862][ T7050] __dump_stack+0x1d/0x30 [ 99.776886][ T7050] dump_stack_lvl+0xe8/0x140 [ 99.776907][ T7050] dump_stack+0x15/0x1b [ 99.776950][ T7050] should_fail_ex+0x265/0x280 [ 99.776996][ T7050] should_fail+0xb/0x20 [ 99.777036][ T7050] should_fail_usercopy+0x1a/0x20 [ 99.777130][ T7050] _copy_from_user+0x1c/0xb0 [ 99.777167][ T7050] __io_register_rsrc_update+0x268/0xac0 [ 99.777202][ T7050] ? get_pid_task+0x96/0xd0 [ 99.777241][ T7050] ? should_fail_ex+0xdb/0x280 [ 99.777281][ T7050] io_register_rsrc_update+0x10a/0x120 [ 99.777394][ T7050] __se_sys_io_uring_register+0x6d9/0xeb0 [ 99.777420][ T7050] ? fput+0x8f/0xc0 [ 99.777481][ T7050] ? ksys_write+0x192/0x1a0 [ 99.777504][ T7050] __x64_sys_io_uring_register+0x55/0x70 [ 99.777530][ T7050] x64_sys_call+0xc91/0x2fb0 [ 99.777567][ T7050] do_syscall_64+0xd2/0x200 [ 99.777661][ T7050] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 99.777695][ T7050] ? clear_bhb_loop+0x40/0x90 [ 99.777722][ T7050] ? clear_bhb_loop+0x40/0x90 [ 99.777821][ T7050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.777849][ T7050] RIP: 0033:0x7f2f6bbbe929 [ 99.777921][ T7050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.777944][ T7050] RSP: 002b:00007f2f6a227038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 99.777968][ T7050] RAX: ffffffffffffffda RBX: 00007f2f6bde5fa0 RCX: 00007f2f6bbbe929 [ 99.778034][ T7050] RDX: 0000200000000240 RSI: 0000000000000010 RDI: 0000000000000005 [ 99.778050][ T7050] RBP: 00007f2f6a227090 R08: 0000000000000000 R09: 0000000000000000 [ 99.778065][ T7050] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 99.778080][ T7050] R13: 0000000000000000 R14: 00007f2f6bde5fa0 R15: 00007ffc34deb328 [ 99.778106][ T7050] [ 99.989546][ T4637] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.056306][ T4637] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.076155][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1116'. [ 100.088679][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1116'. [ 100.090895][ T7070] netlink: 'syz.6.1117': attribute type 1 has an invalid length. [ 100.125564][ T7070] 8021q: adding VLAN 0 to HW filter on device bond4 [ 100.136583][ T4637] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.143811][ T7070] FAULT_INJECTION: forcing a failure. [ 100.143811][ T7070] name failslab, interval 1, probability 0, space 0, times 0 [ 100.159597][ T7070] CPU: 1 UID: 0 PID: 7070 Comm: syz.6.1117 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 100.159626][ T7070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.159639][ T7070] Call Trace: [ 100.159645][ T7070] [ 100.159662][ T7070] __dump_stack+0x1d/0x30 [ 100.159685][ T7070] dump_stack_lvl+0xe8/0x140 [ 100.159704][ T7070] dump_stack+0x15/0x1b [ 100.159720][ T7070] should_fail_ex+0x265/0x280 [ 100.159762][ T7070] should_failslab+0x8c/0xb0 [ 100.159851][ T7070] kmem_cache_alloc_noprof+0x50/0x310 [ 100.159898][ T7070] ? skb_clone+0x151/0x1f0 [ 100.159928][ T7070] skb_clone+0x151/0x1f0 [ 100.159976][ T7070] __netlink_deliver_tap+0x2c9/0x500 [ 100.160005][ T7070] netlink_unicast+0x64c/0x670 [ 100.160063][ T7070] netlink_sendmsg+0x58b/0x6b0 [ 100.160087][ T7070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.160109][ T7070] __sock_sendmsg+0x142/0x180 [ 100.160167][ T7070] ____sys_sendmsg+0x31e/0x4e0 [ 100.160273][ T7070] ___sys_sendmsg+0x17b/0x1d0 [ 100.160350][ T7070] __x64_sys_sendmsg+0xd4/0x160 [ 100.160384][ T7070] x64_sys_call+0x2999/0x2fb0 [ 100.160407][ T7070] do_syscall_64+0xd2/0x200 [ 100.160428][ T7070] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 100.160500][ T7070] ? clear_bhb_loop+0x40/0x90 [ 100.160523][ T7070] ? clear_bhb_loop+0x40/0x90 [ 100.160552][ T7070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.160580][ T7070] RIP: 0033:0x7f67ffbee929 [ 100.160599][ T7070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.160622][ T7070] RSP: 002b:00007f67fe257038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.160683][ T7070] RAX: ffffffffffffffda RBX: 00007f67ffe15fa0 RCX: 00007f67ffbee929 [ 100.160695][ T7070] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 100.160708][ T7070] RBP: 00007f67fe257090 R08: 0000000000000000 R09: 0000000000000000 [ 100.160720][ T7070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.160731][ T7070] R13: 0000000000000000 R14: 00007f67ffe15fa0 R15: 00007ffd9d571088 [ 100.160814][ T7070] [ 100.160841][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1117'. [ 100.388325][ T7078] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1120'. [ 100.427618][ T7070] bond4 (unregistering): Released all slaves [ 100.436330][ T7083] netlink: 'syz.2.1122': attribute type 13 has an invalid length. [ 100.484620][ T7083] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.495579][ T7083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.512693][ T3403] lo speed is unknown, defaulting to 1000 [ 100.519090][ T7058] lo speed is unknown, defaulting to 1000 [ 100.573278][ T4637] bridge_slave_1: left allmulticast mode [ 100.579226][ T4637] bridge_slave_1: left promiscuous mode [ 100.579370][ T4637] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.593684][ T4637] bridge_slave_0: left allmulticast mode [ 100.593708][ T4637] bridge_slave_0: left promiscuous mode [ 100.593816][ T4637] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.775635][ T4637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.791562][ T4637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.809150][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1130'. [ 100.821314][ T4637] bond0 (unregistering): Released all slaves [ 100.856824][ T4637] tipc: Disabling bearer [ 100.863859][ T4637] tipc: Left network mode [ 100.983415][ T4637] hsr_slave_0: left promiscuous mode [ 100.997562][ T4637] hsr_slave_1: left promiscuous mode [ 101.020590][ T4637] veth1_vlan: left promiscuous mode [ 101.034467][ T4637] veth0_vlan: left promiscuous mode [ 101.048515][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1131'. [ 101.181112][ T4637] team0 (unregistering): Port device team_slave_1 removed [ 101.201460][ T4637] team0 (unregistering): Port device team_slave_0 removed [ 101.257265][ T7156] binfmt_misc: register: failed to install interpreter file ./file0 [ 101.298821][ T7058] chnl_net:caif_netlink_parms(): no params data found [ 101.319003][ T7164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1135'. [ 101.387427][ T7058] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.394700][ T7058] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.403316][ T7058] bridge_slave_0: entered allmulticast mode [ 101.415635][ T7058] bridge_slave_0: entered promiscuous mode [ 101.426285][ T7058] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.434165][ T7058] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.454183][ T7058] bridge_slave_1: entered allmulticast mode [ 101.464858][ T7058] bridge_slave_1: entered promiscuous mode [ 101.512563][ T7058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.533935][ T7058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.558652][ T7190] netlink: 'syz.4.1139': attribute type 1 has an invalid length. [ 101.576745][ T7058] team0: Port device team_slave_0 added [ 101.588340][ T7058] team0: Port device team_slave_1 added [ 101.605560][ T7190] gtp0: entered promiscuous mode [ 101.629568][ T7058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.636676][ T7058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.662853][ T7058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.674894][ T7058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.675443][ T31] tipc: Subscription rejected, illegal request [ 101.681979][ T7058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.714306][ T7058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.715629][ T7190] loop4: detected capacity change from 0 to 128 [ 101.769674][ T7058] hsr_slave_0: entered promiscuous mode [ 101.780382][ T7058] hsr_slave_1: entered promiscuous mode [ 101.795118][ T7058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.804242][ T7058] Cannot create hsr debugfs directory [ 101.857454][ T7208] loop4: detected capacity change from 0 to 128 [ 101.872670][ T7208] syz.4.1144: attempt to access beyond end of device [ 101.872670][ T7208] loop4: rw=2049, sector=145, nr_sectors = 40 limit=128 [ 101.905292][ T7208] syz.4.1144: attempt to access beyond end of device [ 101.905292][ T7208] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 101.941455][ T7208] syz.4.1144: attempt to access beyond end of device [ 101.941455][ T7208] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 101.978760][ T7208] syz.4.1144: attempt to access beyond end of device [ 101.978760][ T7208] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 101.996184][ T7058] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 102.008127][ T7208] syz.4.1144: attempt to access beyond end of device [ 102.008127][ T7208] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 102.024280][ T7058] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 102.040214][ T7058] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 102.056678][ T7058] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 102.060685][ T7208] syz.4.1144: attempt to access beyond end of device [ 102.060685][ T7208] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 102.119906][ T7208] syz.4.1144: attempt to access beyond end of device [ 102.119906][ T7208] loop4: rw=2049, sector=273, nr_sectors = 9 limit=128 [ 102.176457][ T7246] loop2: detected capacity change from 0 to 512 [ 102.184486][ T7246] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 102.197535][ T7246] EXT4-fs (loop2): 1 truncate cleaned up [ 102.220508][ T7058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.275161][ T7058] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.310954][ T7256] ALSA: seq fatal error: cannot create timer (-19) [ 102.325861][ T4638] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.334343][ T4638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.363643][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.370861][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.448331][ T7272] netlink: 'syz.1.1148': attribute type 13 has an invalid length. [ 102.470922][ T7272] FAULT_INJECTION: forcing a failure. [ 102.470922][ T7272] name failslab, interval 1, probability 0, space 0, times 0 [ 102.483931][ T7272] CPU: 1 UID: 0 PID: 7272 Comm: syz.1.1148 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 102.483969][ T7272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.484061][ T7272] Call Trace: [ 102.484069][ T7272] [ 102.484080][ T7272] __dump_stack+0x1d/0x30 [ 102.484110][ T7272] dump_stack_lvl+0xe8/0x140 [ 102.484160][ T7272] dump_stack+0x15/0x1b [ 102.484183][ T7272] should_fail_ex+0x265/0x280 [ 102.484230][ T7272] should_failslab+0x8c/0xb0 [ 102.484261][ T7272] __kmalloc_noprof+0xa5/0x3e0 [ 102.484364][ T7272] ? fib_create_info+0xbb1/0x1980 [ 102.484399][ T7272] fib_create_info+0xbb1/0x1980 [ 102.484436][ T7272] fib_table_insert+0x60/0xeb0 [ 102.484478][ T7272] ? fib_new_table+0xad/0x1c0 [ 102.484636][ T7272] fib_magic+0x19a/0x1f0 [ 102.484732][ T7272] fib_add_ifaddr+0x2ce/0x320 [ 102.484759][ T7272] fib_netdev_event+0x355/0x430 [ 102.484782][ T7272] ? __pfx_fib_netdev_event+0x10/0x10 [ 102.484892][ T7272] raw_notifier_call_chain+0x6c/0x1b0 [ 102.484933][ T7272] ? call_netdevice_notifiers_info+0x9c/0x100 [ 102.484982][ T7272] call_netdevice_notifiers_info+0xae/0x100 [ 102.485021][ T7272] __dev_notify_flags+0xff/0x1a0 [ 102.485204][ T7272] netif_change_flags+0xac/0xd0 [ 102.485243][ T7272] do_setlink+0x9d2/0x2810 [ 102.485280][ T7272] ? save_fpregs_to_fpstate+0x100/0x160 [ 102.485336][ T7272] ? _raw_spin_unlock+0x26/0x50 [ 102.485368][ T7272] ? finish_task_switch+0xad/0x2b0 [ 102.485397][ T7272] ? __schedule+0x6a8/0xb30 [ 102.485512][ T7272] rtnl_newlink+0xd8b/0x12d0 [ 102.485549][ T7272] ? get_page_from_freelist+0x1378/0x13d0 [ 102.485594][ T7272] ? rb_commit+0x3e9/0x420 [ 102.485740][ T7272] ? avc_has_perm_noaudit+0x176/0x200 [ 102.485781][ T7272] ? __rcu_read_unlock+0x4f/0x70 [ 102.485865][ T7272] ? avc_has_perm_noaudit+0x1b1/0x200 [ 102.485908][ T7272] ? selinux_capable+0x1f9/0x270 [ 102.485979][ T7272] ? security_capable+0x83/0x90 [ 102.486017][ T7272] ? ns_capable+0x7d/0xb0 [ 102.486041][ T7272] ? __pfx_rtnl_newlink+0x10/0x10 [ 102.486074][ T7272] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 102.486150][ T7272] ? avc_has_perm_noaudit+0x1b1/0x200 [ 102.486253][ T7272] netlink_rcv_skb+0x120/0x220 [ 102.486281][ T7272] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 102.486324][ T7272] rtnetlink_rcv+0x1c/0x30 [ 102.486417][ T7272] netlink_unicast+0x5a1/0x670 [ 102.486462][ T7272] netlink_sendmsg+0x58b/0x6b0 [ 102.486598][ T7272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.486627][ T7272] __sock_sendmsg+0x142/0x180 [ 102.486666][ T7272] ____sys_sendmsg+0x31e/0x4e0 [ 102.486697][ T7272] ___sys_sendmsg+0x17b/0x1d0 [ 102.486736][ T7272] __x64_sys_sendmsg+0xd4/0x160 [ 102.486843][ T7272] x64_sys_call+0x2999/0x2fb0 [ 102.486869][ T7272] do_syscall_64+0xd2/0x200 [ 102.486967][ T7272] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 102.487003][ T7272] ? clear_bhb_loop+0x40/0x90 [ 102.487032][ T7272] ? clear_bhb_loop+0x40/0x90 [ 102.487054][ T7272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.487076][ T7272] RIP: 0033:0x7f87be18e929 [ 102.487096][ T7272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.487157][ T7272] RSP: 002b:00007f87bc7f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.487228][ T7272] RAX: ffffffffffffffda RBX: 00007f87be3b5fa0 RCX: 00007f87be18e929 [ 102.487242][ T7272] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 102.487254][ T7272] RBP: 00007f87bc7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.487266][ T7272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.487283][ T7272] R13: 0000000000000000 R14: 00007f87be3b5fa0 R15: 00007ffe135210c8 [ 102.487308][ T7272] [ 102.570156][ T7272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.869320][ T3313] EXT4-fs unmount: 27 callbacks suppressed [ 102.869338][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.870997][ T7272] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.895616][ T7272] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 102.919950][ T7282] ipvlan2: entered promiscuous mode [ 102.973746][ T7058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.994186][ T7296] loop2: detected capacity change from 0 to 2048 [ 103.034145][ T7296] loop2: p1 < > p4 [ 103.039210][ T7296] loop2: p4 size 8388608 extends beyond EOD, truncated [ 103.050708][ T7306] netlink: 'syz.4.1153': attribute type 1 has an invalid length. [ 103.086200][ T7306] 8021q: adding VLAN 0 to HW filter on device bond3 [ 103.118336][ T7306] bond3 (unregistering): Released all slaves [ 103.156461][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 103.156483][ T29] audit: type=1400 audit(1749648531.992:4256): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 103.190362][ T7324] FAULT_INJECTION: forcing a failure. [ 103.190362][ T7324] name failslab, interval 1, probability 0, space 0, times 0 [ 103.203220][ T7324] CPU: 1 UID: 0 PID: 7324 Comm: syz.2.1155 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 103.203254][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.203271][ T7324] Call Trace: [ 103.203279][ T7324] [ 103.203289][ T7324] __dump_stack+0x1d/0x30 [ 103.203311][ T7324] dump_stack_lvl+0xe8/0x140 [ 103.203365][ T7324] dump_stack+0x15/0x1b [ 103.203387][ T7324] should_fail_ex+0x265/0x280 [ 103.203465][ T7324] should_failslab+0x8c/0xb0 [ 103.203495][ T7324] __kmalloc_noprof+0xa5/0x3e0 [ 103.203529][ T7324] ? fib6_info_alloc+0x2e/0x90 [ 103.203553][ T7324] fib6_info_alloc+0x2e/0x90 [ 103.203603][ T7324] ip6_route_info_create+0xe7/0x390 [ 103.203640][ T7324] inet6_rtm_newroute+0x387/0x1020 [ 103.203667][ T7324] ? xa_load+0xb1/0xe0 [ 103.203710][ T7324] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 103.203784][ T7324] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 103.203876][ T7324] netlink_rcv_skb+0x120/0x220 [ 103.203896][ T7324] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.203935][ T7324] rtnetlink_rcv+0x1c/0x30 [ 103.203966][ T7324] netlink_unicast+0x5a1/0x670 [ 103.204021][ T7324] netlink_sendmsg+0x58b/0x6b0 [ 103.204104][ T7324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.204127][ T7324] __sock_sendmsg+0x142/0x180 [ 103.204155][ T7324] ____sys_sendmsg+0x31e/0x4e0 [ 103.204186][ T7324] ___sys_sendmsg+0x17b/0x1d0 [ 103.204243][ T7324] __x64_sys_sendmsg+0xd4/0x160 [ 103.204277][ T7324] x64_sys_call+0x2999/0x2fb0 [ 103.204355][ T7324] do_syscall_64+0xd2/0x200 [ 103.204382][ T7324] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 103.204422][ T7324] ? clear_bhb_loop+0x40/0x90 [ 103.204443][ T7324] ? clear_bhb_loop+0x40/0x90 [ 103.204472][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.204500][ T7324] RIP: 0033:0x7f2f6bbbe929 [ 103.204564][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.204589][ T7324] RSP: 002b:00007f2f6a227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.204614][ T7324] RAX: ffffffffffffffda RBX: 00007f2f6bde5fa0 RCX: 00007f2f6bbbe929 [ 103.204628][ T7324] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 103.204694][ T7324] RBP: 00007f2f6a227090 R08: 0000000000000000 R09: 0000000000000000 [ 103.204707][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.204719][ T7324] R13: 0000000000000000 R14: 00007f2f6bde5fa0 R15: 00007ffc34deb328 [ 103.204814][ T7324] [ 103.336294][ T7058] veth0_vlan: entered promiscuous mode [ 103.400433][ T7330] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 103.421402][ T7058] veth1_vlan: entered promiscuous mode [ 103.487382][ T7330] SELinux: failed to load policy [ 103.513498][ T7332] FAULT_INJECTION: forcing a failure. [ 103.513498][ T7332] name failslab, interval 1, probability 0, space 0, times 0 [ 103.526634][ T7332] CPU: 0 UID: 0 PID: 7332 Comm: syz.2.1157 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 103.526780][ T7332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.526797][ T7332] Call Trace: [ 103.526806][ T7332] [ 103.526816][ T7332] __dump_stack+0x1d/0x30 [ 103.526853][ T7332] dump_stack_lvl+0xe8/0x140 [ 103.526877][ T7332] dump_stack+0x15/0x1b [ 103.526893][ T7332] should_fail_ex+0x265/0x280 [ 103.526991][ T7332] should_failslab+0x8c/0xb0 [ 103.527021][ T7332] kmem_cache_alloc_noprof+0x50/0x310 [ 103.527049][ T7332] ? security_file_alloc+0x32/0x100 [ 103.527073][ T7332] security_file_alloc+0x32/0x100 [ 103.527176][ T7332] init_file+0x5c/0x1d0 [ 103.527210][ T7332] alloc_empty_file+0x8b/0x200 [ 103.527238][ T7332] path_openat+0x68/0x2170 [ 103.527280][ T7332] ? _parse_integer_limit+0x170/0x190 [ 103.527325][ T7332] ? kstrtoull+0x111/0x140 [ 103.527365][ T7332] ? kstrtouint+0x76/0xc0 [ 103.527406][ T7332] do_filp_open+0x109/0x230 [ 103.527511][ T7332] do_sys_openat2+0xa6/0x110 [ 103.527600][ T7332] __x64_sys_openat+0xf2/0x120 [ 103.527640][ T7332] x64_sys_call+0x1af/0x2fb0 [ 103.527662][ T7332] do_syscall_64+0xd2/0x200 [ 103.527684][ T7332] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 103.527732][ T7332] ? clear_bhb_loop+0x40/0x90 [ 103.527759][ T7332] ? clear_bhb_loop+0x40/0x90 [ 103.527788][ T7332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.527814][ T7332] RIP: 0033:0x7f2f6bbbe929 [ 103.527830][ T7332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.527885][ T7332] RSP: 002b:00007f2f6a227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 103.527982][ T7332] RAX: ffffffffffffffda RBX: 00007f2f6bde5fa0 RCX: 00007f2f6bbbe929 [ 103.527999][ T7332] RDX: 0000000000167483 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 103.528016][ T7332] RBP: 00007f2f6a227090 R08: 0000000000000000 R09: 0000000000000000 [ 103.528032][ T7332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.528047][ T7332] R13: 0000000000000000 R14: 00007f2f6bde5fa0 R15: 00007ffc34deb328 [ 103.528089][ T7332] [ 103.750130][ T7058] veth0_macvtap: entered promiscuous mode [ 103.764317][ T7058] veth1_macvtap: entered promiscuous mode [ 103.777163][ T7058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.794866][ T7058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.807684][ T7058] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.816651][ T7058] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.825678][ T7058] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.834530][ T7058] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.847761][ T7338] tipc: Enabling of bearer rejected, already enabled [ 103.871050][ T29] audit: type=1400 audit(1749648532.702:4257): avc: denied { mounton } for pid=7058 comm="syz-executor" path="/root/syzkaller.LtkSKM/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 103.905990][ T29] audit: type=1400 audit(1749648532.702:4258): avc: denied { mount } for pid=7058 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 103.929003][ T29] audit: type=1400 audit(1749648532.702:4259): avc: denied { mounton } for pid=7058 comm="syz-executor" path="/root/syzkaller.LtkSKM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 103.956339][ T29] audit: type=1400 audit(1749648532.702:4260): avc: denied { mounton } for pid=7058 comm="syz-executor" path="/root/syzkaller.LtkSKM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 103.961513][ T7345] netlink: 'syz.2.1161': attribute type 10 has an invalid length. [ 103.986443][ T29] audit: type=1400 audit(1749648532.742:4261): avc: denied { mounton } for pid=7058 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 103.993460][ T7345] __nla_validate_parse: 2 callbacks suppressed [ 103.993476][ T7345] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1161'. [ 104.018958][ T29] audit: type=1400 audit(1749648532.742:4262): avc: denied { mount } for pid=7058 comm="syz-executor" name="/" dev="gadgetfs" ino=3937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 104.088122][ T29] audit: type=1326 audit(1749648532.922:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7351 comm="syz.7.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20957ae929 code=0x7ffc0000 [ 104.113268][ T29] audit: type=1326 audit(1749648532.922:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7351 comm="syz.7.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20957ae929 code=0x7ffc0000 [ 104.137513][ T29] audit: type=1326 audit(1749648532.922:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7351 comm="syz.7.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20957ae929 code=0x7ffc0000 [ 104.206848][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'. [ 104.215974][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'. [ 104.236857][ T7360] hub 6-0:1.0: USB hub found [ 104.241633][ T7360] hub 6-0:1.0: 8 ports detected [ 104.294904][ T7373] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1170'. [ 104.316869][ T7373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.336463][ T7373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.348286][ T7375] loop2: detected capacity change from 0 to 512 [ 104.359016][ T7375] ext3: Unknown parameter 'dont_hash' [ 104.366335][ T7373] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 104.387556][ T7373] bond0 (unregistering): Released all slaves [ 104.523090][ T7385] loop6: detected capacity change from 0 to 128 [ 104.533289][ T7385] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.545783][ T7385] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.599265][ T7388] xt_l2tp: missing protocol rule (udp|l2tpip) [ 104.614158][ T7385] SELinux: failed to load policy [ 104.740825][ T7404] loop6: detected capacity change from 0 to 1024 [ 104.748304][ T7407] FAULT_INJECTION: forcing a failure. [ 104.748304][ T7407] name failslab, interval 1, probability 0, space 0, times 0 [ 104.761078][ T7407] CPU: 0 UID: 0 PID: 7407 Comm: syz.1.1183 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 104.761104][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.761190][ T7407] Call Trace: [ 104.761196][ T7407] [ 104.761203][ T7407] __dump_stack+0x1d/0x30 [ 104.761221][ T7407] dump_stack_lvl+0xe8/0x140 [ 104.761318][ T7407] dump_stack+0x15/0x1b [ 104.761335][ T7407] should_fail_ex+0x265/0x280 [ 104.761367][ T7407] should_failslab+0x8c/0xb0 [ 104.761442][ T7407] kmem_cache_alloc_noprof+0x50/0x310 [ 104.761468][ T7407] ? __kernfs_new_node+0x6d/0x350 [ 104.761551][ T7407] __kernfs_new_node+0x6d/0x350 [ 104.761570][ T7407] ? __rcu_read_unlock+0x4f/0x70 [ 104.761589][ T7407] ? __rcu_read_unlock+0x4f/0x70 [ 104.761606][ T7407] ? __rcu_read_unlock+0x4f/0x70 [ 104.761626][ T7407] ? kernfs_next_descendant_post+0xd3/0x110 [ 104.761651][ T7407] kernfs_new_node+0xd0/0x140 [ 104.761669][ T7407] kernfs_create_link+0x70/0x130 [ 104.761704][ T7407] sysfs_do_create_link_sd+0x6a/0x100 [ 104.761812][ T7407] sysfs_create_link+0x51/0x70 [ 104.761851][ T7407] device_add_class_symlinks+0x168/0x1d0 [ 104.761888][ T7407] device_add+0x359/0x770 [ 104.761997][ T7407] netdev_register_kobject+0xe8/0x210 [ 104.762037][ T7407] ? register_netdevice+0x916/0xf00 [ 104.762062][ T7407] register_netdevice+0x931/0xf00 [ 104.762090][ T7407] geneve_configure+0x414/0x5e0 [ 104.762181][ T7407] geneve_newlink+0xfd/0x160 [ 104.762280][ T7407] ? __pfx_geneve_newlink+0x10/0x10 [ 104.762394][ T7407] rtnl_newlink_create+0x1b9/0x620 [ 104.762430][ T7407] ? security_capable+0x83/0x90 [ 104.762464][ T7407] ? netlink_ns_capable+0x86/0xa0 [ 104.762504][ T7407] rtnl_newlink+0xf29/0x12d0 [ 104.762579][ T7407] ? xas_load+0x413/0x430 [ 104.762602][ T7407] ? __memcg_slab_free_hook+0x135/0x230 [ 104.762641][ T7407] ? __kfree_skb+0x109/0x150 [ 104.762711][ T7407] ? __rcu_read_unlock+0x4f/0x70 [ 104.762758][ T7407] ? avc_has_perm_noaudit+0x1b1/0x200 [ 104.762795][ T7407] ? selinux_capable+0x1f9/0x270 [ 104.762865][ T7407] ? security_capable+0x83/0x90 [ 104.762897][ T7407] ? ns_capable+0x7d/0xb0 [ 104.762918][ T7407] ? __pfx_rtnl_newlink+0x10/0x10 [ 104.762948][ T7407] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 104.763016][ T7407] netlink_rcv_skb+0x120/0x220 [ 104.763038][ T7407] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 104.763069][ T7407] rtnetlink_rcv+0x1c/0x30 [ 104.763092][ T7407] netlink_unicast+0x5a1/0x670 [ 104.763206][ T7407] netlink_sendmsg+0x58b/0x6b0 [ 104.763237][ T7407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.763266][ T7407] __sock_sendmsg+0x142/0x180 [ 104.763307][ T7407] ____sys_sendmsg+0x31e/0x4e0 [ 104.763348][ T7407] ___sys_sendmsg+0x17b/0x1d0 [ 104.763407][ T7407] __x64_sys_sendmsg+0xd4/0x160 [ 104.763439][ T7407] x64_sys_call+0x2999/0x2fb0 [ 104.763464][ T7407] do_syscall_64+0xd2/0x200 [ 104.763490][ T7407] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 104.763558][ T7407] ? clear_bhb_loop+0x40/0x90 [ 104.763579][ T7407] ? clear_bhb_loop+0x40/0x90 [ 104.763608][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.763726][ T7407] RIP: 0033:0x7f87be18e929 [ 104.763744][ T7407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.763802][ T7407] RSP: 002b:00007f87bc7f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.763827][ T7407] RAX: ffffffffffffffda RBX: 00007f87be3b5fa0 RCX: 00007f87be18e929 [ 104.763843][ T7407] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000005 [ 104.763859][ T7407] RBP: 00007f87bc7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 104.763875][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.763892][ T7407] R13: 0000000000000000 R14: 00007f87be3b5fa0 R15: 00007ffe135210c8 [ 104.763915][ T7407] [ 104.765373][ T7404] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.812361][ T7400] lo speed is unknown, defaulting to 1000 [ 105.276692][ T7422] syzkaller1: entered promiscuous mode [ 105.282421][ T7422] syzkaller1: entered allmulticast mode [ 105.310125][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.350952][ T7423] FAULT_INJECTION: forcing a failure. [ 105.350952][ T7423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.364218][ T7423] CPU: 1 UID: 0 PID: 7423 Comm: syz.4.1186 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 105.364317][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.364330][ T7423] Call Trace: [ 105.364338][ T7423] [ 105.364345][ T7423] __dump_stack+0x1d/0x30 [ 105.364369][ T7423] dump_stack_lvl+0xe8/0x140 [ 105.364389][ T7423] dump_stack+0x15/0x1b [ 105.364410][ T7423] should_fail_ex+0x265/0x280 [ 105.364477][ T7423] should_fail+0xb/0x20 [ 105.364514][ T7423] should_fail_usercopy+0x1a/0x20 [ 105.364596][ T7423] _copy_from_iter+0xcf/0xe40 [ 105.364662][ T7423] ? _copy_from_iter+0x16d/0xe40 [ 105.364734][ T7423] copy_page_from_iter+0x178/0x2a0 [ 105.364767][ T7423] skb_copy_datagram_from_iter+0x232/0x490 [ 105.364808][ T7423] tun_get_user+0xa0e/0x2500 [ 105.364910][ T7423] ? ref_tracker_alloc+0x1f2/0x2f0 [ 105.364947][ T7423] ? selinux_file_permission+0x1e4/0x320 [ 105.364983][ T7423] tun_chr_write_iter+0x15e/0x210 [ 105.365044][ T7423] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 105.365083][ T7423] vfs_write+0x49d/0x8e0 [ 105.365111][ T7423] ksys_write+0xda/0x1a0 [ 105.365135][ T7423] __x64_sys_write+0x40/0x50 [ 105.365169][ T7423] x64_sys_call+0x2cdd/0x2fb0 [ 105.365230][ T7423] do_syscall_64+0xd2/0x200 [ 105.365313][ T7423] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 105.365340][ T7423] ? clear_bhb_loop+0x40/0x90 [ 105.365362][ T7423] ? clear_bhb_loop+0x40/0x90 [ 105.365393][ T7423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.365462][ T7423] RIP: 0033:0x7f1c7b87e929 [ 105.365485][ T7423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.365504][ T7423] RSP: 002b:00007f1c79ec6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.365524][ T7423] RAX: ffffffffffffffda RBX: 00007f1c7baa6080 RCX: 00007f1c7b87e929 [ 105.365536][ T7423] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000003 [ 105.365624][ T7423] RBP: 00007f1c79ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 105.365636][ T7423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 105.365648][ T7423] R13: 0000000000000001 R14: 00007f1c7baa6080 R15: 00007fff35f628c8 [ 105.365676][ T7423] [ 105.683025][ T7427] loop2: detected capacity change from 0 to 256 [ 105.703434][ T7431] sd 0:0:1:0: device reset [ 105.726684][ T7429] netlink: 'syz.6.1187': attribute type 4 has an invalid length. [ 105.741735][ T7433] SELinux: syz.1.1192 (7433) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 105.778954][ T7434] netlink: 'syz.6.1187': attribute type 4 has an invalid length. [ 105.816570][ T7436] tipc: Enabling of bearer rejected, already enabled [ 105.888169][ T7447] loop2: detected capacity change from 0 to 512 [ 105.895368][ T7447] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 105.942750][ T7440] loop4: detected capacity change from 0 to 2048 [ 105.953418][ T7440] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.004030][ T7440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.049533][ T7458] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.124720][ T7440] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7440 comm=syz.4.1194 [ 106.137913][ T7440] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7440 comm=syz.4.1194 [ 106.186239][ T7467] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1194'. [ 106.224552][ T7458] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.275275][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.306434][ T7458] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.371373][ T7477] FAULT_INJECTION: forcing a failure. [ 106.371373][ T7477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.385382][ T7477] CPU: 1 UID: 0 PID: 7477 Comm: syz.1.1200 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 106.385419][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.385435][ T7477] Call Trace: [ 106.385444][ T7477] [ 106.385454][ T7477] __dump_stack+0x1d/0x30 [ 106.385477][ T7477] dump_stack_lvl+0xe8/0x140 [ 106.385499][ T7477] dump_stack+0x15/0x1b [ 106.385521][ T7477] should_fail_ex+0x265/0x280 [ 106.385571][ T7477] should_fail+0xb/0x20 [ 106.385603][ T7477] should_fail_usercopy+0x1a/0x20 [ 106.385701][ T7477] copy_folio_from_iter_atomic+0x278/0x1170 [ 106.385765][ T7477] ? shmem_write_begin+0xa8/0x190 [ 106.385800][ T7477] ? shmem_write_begin+0xe1/0x190 [ 106.385837][ T7477] generic_perform_write+0x2c2/0x490 [ 106.385936][ T7477] shmem_file_write_iter+0xc5/0xf0 [ 106.385960][ T7477] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 106.385988][ T7477] vfs_write+0x49d/0x8e0 [ 106.386021][ T7477] ksys_write+0xda/0x1a0 [ 106.386047][ T7477] __x64_sys_write+0x40/0x50 [ 106.386104][ T7477] x64_sys_call+0x2cdd/0x2fb0 [ 106.386132][ T7477] do_syscall_64+0xd2/0x200 [ 106.386160][ T7477] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 106.386192][ T7477] ? clear_bhb_loop+0x40/0x90 [ 106.386274][ T7477] ? clear_bhb_loop+0x40/0x90 [ 106.386303][ T7477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.386327][ T7477] RIP: 0033:0x7f87be18d3df [ 106.386342][ T7477] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 106.386365][ T7477] RSP: 002b:00007f87bc7f6df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 106.386465][ T7477] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f87be18d3df [ 106.386480][ T7477] RDX: 0000000000040000 RSI: 00007f87b43d7000 RDI: 0000000000000007 [ 106.386496][ T7477] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000045c [ 106.386512][ T7477] R10: 00000000000003bc R11: 0000000000000293 R12: 0000000000000007 [ 106.386528][ T7477] R13: 00007f87bc7f6ef0 R14: 00007f87bc7f6eb0 R15: 00007f87b43d7000 [ 106.386583][ T7477] [ 106.604650][ T7477] loop1: detected capacity change from 0 to 512 [ 106.611370][ T7477] EXT4-fs: Ignoring removed orlov option [ 106.617132][ T7477] EXT4-fs: Ignoring removed oldalloc option [ 106.672718][ T7458] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.674111][ T7477] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 220 vs 1023 free clusters [ 106.698743][ T7477] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1200: Parent and EA inode have the same ino 15 [ 106.713290][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1201'. [ 106.722644][ T7477] EXT4-fs (loop1): 1 orphan inode deleted [ 106.729244][ T7477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.800703][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.841628][ T7458] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.856076][ T7506] loop1: detected capacity change from 0 to 1024 [ 106.868155][ T7458] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.889059][ T7506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.890204][ T7458] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.927857][ T7458] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.963281][ T7512] FAULT_INJECTION: forcing a failure. [ 106.963281][ T7512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.977179][ T7512] CPU: 0 UID: 0 PID: 7512 Comm: syz.6.1206 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 106.977217][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.977302][ T7512] Call Trace: [ 106.977310][ T7512] [ 106.977333][ T7512] __dump_stack+0x1d/0x30 [ 106.977361][ T7512] dump_stack_lvl+0xe8/0x140 [ 106.977388][ T7512] dump_stack+0x15/0x1b [ 106.977406][ T7512] should_fail_ex+0x265/0x280 [ 106.977534][ T7512] should_fail+0xb/0x20 [ 106.977572][ T7512] should_fail_usercopy+0x1a/0x20 [ 106.977595][ T7512] _copy_to_user+0x20/0xa0 [ 106.977629][ T7512] ipip6_tunnel_siocdevprivate+0x1b3/0xdd0 [ 106.977769][ T7512] dev_ifsioc+0x8f5/0xaa0 [ 106.977802][ T7512] dev_ioctl+0x78d/0x960 [ 106.977833][ T7512] sock_ioctl+0x593/0x610 [ 106.977896][ T7512] ? __pfx_sock_ioctl+0x10/0x10 [ 106.977994][ T7512] __se_sys_ioctl+0xce/0x140 [ 106.978036][ T7512] __x64_sys_ioctl+0x43/0x50 [ 106.978069][ T7512] x64_sys_call+0x19a8/0x2fb0 [ 106.978093][ T7512] do_syscall_64+0xd2/0x200 [ 106.978192][ T7512] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 106.978268][ T7512] ? clear_bhb_loop+0x40/0x90 [ 106.978295][ T7512] ? clear_bhb_loop+0x40/0x90 [ 106.978318][ T7512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.978341][ T7512] RIP: 0033:0x7f67ffbee929 [ 106.978358][ T7512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.978392][ T7512] RSP: 002b:00007f67fe257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.978419][ T7512] RAX: ffffffffffffffda RBX: 00007f67ffe15fa0 RCX: 00007f67ffbee929 [ 106.978437][ T7512] RDX: 0000200000000080 RSI: 00000000000089f8 RDI: 0000000000000005 [ 106.978454][ T7512] RBP: 00007f67fe257090 R08: 0000000000000000 R09: 0000000000000000 [ 106.978496][ T7512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.978513][ T7512] R13: 0000000000000000 R14: 00007f67ffe15fa0 R15: 00007ffd9d571088 [ 106.978546][ T7512] [ 107.211302][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.235014][ T7519] loop6: detected capacity change from 0 to 512 [ 107.235916][ T7517] FAULT_INJECTION: forcing a failure. [ 107.235916][ T7517] name failslab, interval 1, probability 0, space 0, times 0 [ 107.242344][ T7519] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 107.254878][ T7517] CPU: 1 UID: 0 PID: 7517 Comm: syz.7.1207 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 107.254921][ T7517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.254997][ T7517] Call Trace: [ 107.255007][ T7517] [ 107.255018][ T7517] __dump_stack+0x1d/0x30 [ 107.255069][ T7517] dump_stack_lvl+0xe8/0x140 [ 107.255097][ T7517] dump_stack+0x15/0x1b [ 107.255121][ T7517] should_fail_ex+0x265/0x280 [ 107.255228][ T7517] ? tcf_proto_create+0x44/0x1a0 [ 107.255262][ T7517] should_failslab+0x8c/0xb0 [ 107.255297][ T7517] __kmalloc_cache_noprof+0x4c/0x320 [ 107.255418][ T7517] tcf_proto_create+0x44/0x1a0 [ 107.255452][ T7517] tc_new_tfilter+0x95c/0x10a0 [ 107.255503][ T7517] ? __pfx_tc_new_tfilter+0x10/0x10 [ 107.255539][ T7517] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 107.255614][ T7517] netlink_rcv_skb+0x120/0x220 [ 107.255643][ T7517] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 107.255689][ T7517] rtnetlink_rcv+0x1c/0x30 [ 107.255789][ T7517] netlink_unicast+0x5a1/0x670 [ 107.255841][ T7517] netlink_sendmsg+0x58b/0x6b0 [ 107.255900][ T7517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.255971][ T7517] __sock_sendmsg+0x142/0x180 [ 107.256081][ T7517] ____sys_sendmsg+0x31e/0x4e0 [ 107.256116][ T7517] ___sys_sendmsg+0x17b/0x1d0 [ 107.256166][ T7517] __x64_sys_sendmsg+0xd4/0x160 [ 107.256253][ T7517] x64_sys_call+0x2999/0x2fb0 [ 107.256356][ T7517] do_syscall_64+0xd2/0x200 [ 107.256417][ T7517] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 107.256502][ T7517] ? clear_bhb_loop+0x40/0x90 [ 107.256538][ T7517] ? clear_bhb_loop+0x40/0x90 [ 107.256572][ T7517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.256616][ T7517] RIP: 0033:0x7f20957ae929 [ 107.256639][ T7517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.256679][ T7517] RSP: 002b:00007f2093e17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.256732][ T7517] RAX: ffffffffffffffda RBX: 00007f20959d5fa0 RCX: 00007f20957ae929 [ 107.256750][ T7517] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000005 [ 107.256768][ T7517] RBP: 00007f2093e17090 R08: 0000000000000000 R09: 0000000000000000 [ 107.256857][ T7517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.256878][ T7517] R13: 0000000000000000 R14: 00007f20959d5fa0 R15: 00007fff9ff7e288 [ 107.256928][ T7517] [ 107.517911][ T7520] loop2: detected capacity change from 0 to 1024 [ 107.562514][ T7520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.574826][ T7520] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.640949][ T7524] tipc: Started in network mode [ 107.646784][ T7524] tipc: Node identity ac14140f, cluster identity 4711 [ 107.654646][ T7524] tipc: New replicast peer: 0.0.255.255 [ 107.660299][ T7524] tipc: Enabled bearer , priority 10 [ 107.687385][ T7519] EXT4-fs (loop6): 1 truncate cleaned up [ 107.708266][ T7519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.796690][ T7529] loop4: detected capacity change from 0 to 512 [ 107.804349][ T7529] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.825602][ T7529] EXT4-fs (loop4): 1 truncate cleaned up [ 107.832054][ T7529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.007137][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.044141][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 108.189991][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.201572][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 108.201588][ T29] audit: type=1400 audit(1749648537.042:4412): avc: denied { setopt } for pid=7549 comm="syz.2.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.332121][ T29] audit: type=1400 audit(1749648537.162:4413): avc: denied { create } for pid=7559 comm="syz.7.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.356296][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.374308][ T29] audit: type=1326 audit(1749648537.172:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.4.1219" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f1c7b87e929 code=0x0 [ 108.407547][ T7565] loop6: detected capacity change from 0 to 512 [ 108.415136][ T7565] ext3: Unknown parameter 'fsname' [ 108.453210][ T29] audit: type=1400 audit(1749648537.292:4415): avc: denied { read } for pid=7576 comm="syz.4.1226" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 108.476612][ T29] audit: type=1400 audit(1749648537.292:4416): avc: denied { open } for pid=7576 comm="syz.4.1226" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 108.531089][ T29] audit: type=1400 audit(1749648537.362:4417): avc: denied { create } for pid=7582 comm="syz.6.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.547816][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1222'. [ 108.550769][ T29] audit: type=1400 audit(1749648537.362:4418): avc: denied { bind } for pid=7582 comm="syz.6.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.560391][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1222'. [ 108.579056][ T29] audit: type=1400 audit(1749648537.362:4419): avc: denied { name_bind } for pid=7582 comm="syz.6.1228" src=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 108.609078][ T29] audit: type=1400 audit(1749648537.362:4420): avc: denied { node_bind } for pid=7582 comm="syz.6.1228" src=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 108.617982][ T7584] hub 6-0:1.0: USB hub found [ 108.630379][ T29] audit: type=1400 audit(1749648537.452:4421): avc: denied { ioctl } for pid=7576 comm="syz.4.1226" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 108.637071][ T7584] hub 6-0:1.0: 8 ports detected [ 108.665596][ T7585] netlink: 'syz.6.1228': attribute type 1 has an invalid length. [ 108.666493][ T23] tipc: Node number set to 2886997007 [ 108.804710][ T7588] FAULT_INJECTION: forcing a failure. [ 108.804710][ T7588] name failslab, interval 1, probability 0, space 0, times 0 [ 108.817420][ T7588] CPU: 1 UID: 0 PID: 7588 Comm: syz.2.1229 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 108.817537][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.817561][ T7588] Call Trace: [ 108.817570][ T7588] [ 108.817579][ T7588] __dump_stack+0x1d/0x30 [ 108.817606][ T7588] dump_stack_lvl+0xe8/0x140 [ 108.817631][ T7588] dump_stack+0x15/0x1b [ 108.817706][ T7588] should_fail_ex+0x265/0x280 [ 108.817780][ T7588] should_failslab+0x8c/0xb0 [ 108.817812][ T7588] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 108.817848][ T7588] ? sidtab_sid2str_get+0xa0/0x130 [ 108.817897][ T7588] kmemdup_noprof+0x2b/0x70 [ 108.817921][ T7588] sidtab_sid2str_get+0xa0/0x130 [ 108.817965][ T7588] security_sid_to_context_core+0x1eb/0x2e0 [ 108.818001][ T7588] security_sid_to_context+0x27/0x40 [ 108.818039][ T7588] selinux_lsmprop_to_secctx+0x67/0xf0 [ 108.818074][ T7588] security_lsmprop_to_secctx+0x43/0x80 [ 108.818172][ T7588] audit_log_task_context+0x77/0x190 [ 108.818218][ T7588] audit_log_task+0xf4/0x250 [ 108.818263][ T7588] audit_seccomp+0x61/0x100 [ 108.818296][ T7588] ? __seccomp_filter+0x68c/0x10d0 [ 108.818395][ T7588] __seccomp_filter+0x69d/0x10d0 [ 108.818522][ T7588] __secure_computing+0x82/0x150 [ 108.818553][ T7588] syscall_trace_enter+0xcf/0x1e0 [ 108.818586][ T7588] do_syscall_64+0xac/0x200 [ 108.818612][ T7588] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 108.818715][ T7588] ? clear_bhb_loop+0x40/0x90 [ 108.818736][ T7588] ? clear_bhb_loop+0x40/0x90 [ 108.818808][ T7588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.818837][ T7588] RIP: 0033:0x7f2f6bbbd33c [ 108.818857][ T7588] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 108.818950][ T7588] RSP: 002b:00007f2f6a227030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.818975][ T7588] RAX: ffffffffffffffda RBX: 00007f2f6bde5fa0 RCX: 00007f2f6bbbd33c [ 108.818991][ T7588] RDX: 000000000000000f RSI: 00007f2f6a2270a0 RDI: 0000000000000005 [ 108.819066][ T7588] RBP: 00007f2f6a227090 R08: 0000000000000000 R09: 0000000000000000 [ 108.819079][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.819091][ T7588] R13: 0000000000000000 R14: 00007f2f6bde5fa0 R15: 00007ffc34deb328 [ 108.819116][ T7588] [ 109.077011][ T7593] netlink: 'syz.4.1232': attribute type 4 has an invalid length. [ 109.103114][ T7593] netlink: 'syz.4.1232': attribute type 4 has an invalid length. [ 109.164270][ T7600] cgroup: release_agent respecified [ 109.192449][ T7599] netlink: 'syz.4.1234': attribute type 39 has an invalid length. [ 109.204897][ T7600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1233'. [ 109.280672][ T7615] 9pnet_fd: Insufficient options for proto=fd [ 109.285307][ T7618] loop4: detected capacity change from 0 to 512 [ 109.289436][ T7617] FAULT_INJECTION: forcing a failure. [ 109.289436][ T7617] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 109.294027][ T7618] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.307284][ T7617] CPU: 1 UID: 0 PID: 7617 Comm: syz.1.1240 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 109.307326][ T7617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.307346][ T7617] Call Trace: [ 109.307356][ T7617] [ 109.307368][ T7617] __dump_stack+0x1d/0x30 [ 109.307472][ T7617] dump_stack_lvl+0xe8/0x140 [ 109.307500][ T7617] dump_stack+0x15/0x1b [ 109.307525][ T7617] should_fail_ex+0x265/0x280 [ 109.307576][ T7617] should_fail_alloc_page+0xf2/0x100 [ 109.307627][ T7617] __alloc_frozen_pages_noprof+0xff/0x360 [ 109.307733][ T7617] alloc_pages_mpol+0xb3/0x250 [ 109.307779][ T7617] alloc_pages_noprof+0x90/0x130 [ 109.307824][ T7617] pte_alloc_one+0x2d/0x120 [ 109.307964][ T7617] __pte_alloc+0x32/0x2b0 [ 109.308003][ T7617] ? mas_state_walk+0x574/0x650 [ 109.308034][ T7617] handle_mm_fault+0x1c16/0x2be0 [ 109.308074][ T7617] ? mas_walk+0xf2/0x120 [ 109.308111][ T7617] do_user_addr_fault+0x636/0x1090 [ 109.308162][ T7617] ? arch_exit_work+0x30/0x40 [ 109.308195][ T7617] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 109.308288][ T7617] exc_page_fault+0x62/0xa0 [ 109.308334][ T7617] asm_exc_page_fault+0x26/0x30 [ 109.308363][ T7617] RIP: 0033:0x7f87be050d46 [ 109.308388][ T7617] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 109.308463][ T7617] RSP: 002b:00007f87bc7f64a0 EFLAGS: 00010206 [ 109.308486][ T7617] RAX: 0000000000029001 RBX: 00007f87bc7f6540 RCX: 000000000000009d [ 109.308505][ T7617] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f87bc7f65e0 [ 109.308522][ T7617] RBP: 0000000000000102 R08: 00007f87b43d7000 R09: 0000000000029000 [ 109.308579][ T7617] R10: 0000000000000000 R11: 00007f87bc7f6550 R12: 0000000000000001 [ 109.308610][ T7617] R13: 00007f87be22c020 R14: 0000000000000000 R15: 00007f87bc7f65e0 [ 109.308638][ T7617] [ 109.308654][ T7617] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 109.333533][ T7618] EXT4-fs (loop4): 1 truncate cleaned up [ 109.345738][ T7617] loop1: detected capacity change from 0 to 512 [ 109.350732][ T7618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.359827][ T7617] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 109.465393][ T7622] loop6: detected capacity change from 0 to 512 [ 109.472109][ T7617] EXT4-fs (loop1): orphan cleanup on readonly fs [ 109.508509][ T7622] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 109.533545][ T7624] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1242'. [ 109.546847][ T7617] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #15: comm syz.1.1240: iget: bad i_size value: 360287970189639690 [ 109.550798][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.556724][ T7617] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.1240: Bad quota inode: 15, type: 2 [ 109.582127][ T7622] EXT4-fs (loop6): 1 truncate cleaned up [ 109.622549][ T7622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.634806][ T7617] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 109.650197][ T7617] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 109.657826][ T7617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.671116][ T7617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.699943][ T7630] tipc: Enabled bearer , priority 0 [ 109.730749][ T7626] tipc: Resetting bearer [ 109.747326][ T5400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.773040][ T7626] tipc: Disabling bearer [ 109.794046][ T7632] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 109.925553][ T7638] tipc: Enabled bearer , priority 0 [ 109.996627][ T7641] netlink: 332 bytes leftover after parsing attributes in process `syz.7.1244'. [ 110.043353][ T7641] program syz.7.1244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.056069][ T7637] tipc: Resetting bearer [ 110.072983][ T7637] tipc: Disabling bearer [ 110.284078][ T7650] tipc: Enabled bearer , priority 0 [ 110.360255][ T7646] tipc: Resetting bearer [ 110.375612][ T7646] tipc: Disabling bearer [ 110.432819][ T7657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=7657 comm=syz.4.1254 [ 110.447550][ T7657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7657 comm=syz.4.1254 [ 110.518335][ T7663] loop4: detected capacity change from 0 to 512 [ 110.536626][ T7663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.552068][ T7663] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.600001][ T7663] FAULT_INJECTION: forcing a failure. [ 110.600001][ T7663] name failslab, interval 1, probability 0, space 0, times 0 [ 110.612775][ T7663] CPU: 1 UID: 0 PID: 7663 Comm: syz.4.1255 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 110.612869][ T7663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.612885][ T7663] Call Trace: [ 110.612893][ T7663] [ 110.612903][ T7663] __dump_stack+0x1d/0x30 [ 110.612931][ T7663] dump_stack_lvl+0xe8/0x140 [ 110.612956][ T7663] dump_stack+0x15/0x1b [ 110.613031][ T7663] should_fail_ex+0x265/0x280 [ 110.613096][ T7663] should_failslab+0x8c/0xb0 [ 110.613127][ T7663] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 110.613164][ T7663] ? __d_alloc+0x3d/0x350 [ 110.613196][ T7663] ? selinux_file_open+0x2df/0x330 [ 110.613313][ T7663] __d_alloc+0x3d/0x350 [ 110.613345][ T7663] ? avc_has_perm_noaudit+0x1b1/0x200 [ 110.613386][ T7663] d_alloc_parallel+0x53/0xc40 [ 110.613437][ T7663] ? selinux_inode_permission+0x532/0x620 [ 110.613529][ T7663] ? make_vfsuid+0x49/0xa0 [ 110.613558][ T7663] ? lockref_get_not_dead+0x120/0x1c0 [ 110.613591][ T7663] ? __rcu_read_unlock+0x4f/0x70 [ 110.613621][ T7663] __lookup_slow+0x8c/0x250 [ 110.613719][ T7663] lookup_slow+0x3c/0x60 [ 110.613755][ T7663] walk_component+0x1ec/0x220 [ 110.613790][ T7663] path_lookupat+0xfe/0x2a0 [ 110.613828][ T7663] filename_lookup+0x147/0x340 [ 110.613975][ T7663] path_listxattrat+0xd1/0x2a0 [ 110.614014][ T7663] __x64_sys_llistxattr+0x4d/0x60 [ 110.614043][ T7663] x64_sys_call+0x2a1d/0x2fb0 [ 110.614067][ T7663] do_syscall_64+0xd2/0x200 [ 110.614105][ T7663] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 110.614185][ T7663] ? clear_bhb_loop+0x40/0x90 [ 110.614226][ T7663] ? clear_bhb_loop+0x40/0x90 [ 110.614249][ T7663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.614272][ T7663] RIP: 0033:0x7f1c7b87e929 [ 110.614304][ T7663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.614324][ T7663] RSP: 002b:00007f1c79ee7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 110.614345][ T7663] RAX: ffffffffffffffda RBX: 00007f1c7baa5fa0 RCX: 00007f1c7b87e929 [ 110.614359][ T7663] RDX: 000000000000fff0 RSI: 0000000000000000 RDI: 0000200000000280 [ 110.614419][ T7663] RBP: 00007f1c79ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.614432][ T7663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.614445][ T7663] R13: 0000000000000000 R14: 00007f1c7baa5fa0 R15: 00007fff35f628c8 [ 110.614542][ T7663] [ 110.641130][ T7669] loop1: detected capacity change from 0 to 4096 [ 110.646415][ T7670] netlink: 'syz.2.1256': attribute type 1 has an invalid length. [ 110.725470][ T7669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.895482][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.900150][ T7672] SELinux: security_context_str_to_sid (÷ÿ) failed with errno=-22 [ 110.908872][ T7669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1257'. [ 110.941984][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.971549][ T7680] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 110.993726][ T7676] netlink: 'syz.4.1259': attribute type 9 has an invalid length. [ 111.001641][ T7676] netlink: 'syz.4.1259': attribute type 6 has an invalid length. [ 111.013211][ T7685] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1263'. [ 111.028919][ T7686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.038121][ T7686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.055686][ T7685] loop7: detected capacity change from 0 to 512 [ 111.074244][ T7685] EXT4-fs: test_dummy_encryption option not supported [ 111.114148][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1266'. [ 111.148774][ T7699] loop4: detected capacity change from 0 to 512 [ 111.166788][ T7699] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 111.178998][ T7699] EXT4-fs (loop4): 1 truncate cleaned up [ 111.186836][ T7699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.217261][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.392618][ T7714] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 111.399205][ T7714] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.406902][ T7714] vhci_hcd vhci_hcd.0: Device attached [ 111.419800][ T7717] vhci_hcd: connection closed [ 111.419947][ T4621] vhci_hcd: stop threads [ 111.429042][ T4621] vhci_hcd: release socket [ 111.433605][ T4621] vhci_hcd: disconnect device [ 111.655801][ T7731] loop1: detected capacity change from 0 to 512 [ 111.675737][ T7731] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.698446][ T7731] EXT4-fs (loop1): 1 truncate cleaned up [ 111.704668][ T7731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.820337][ T7734] batadv_slave_1: entered promiscuous mode [ 111.827302][ T7734] batadv_slave_1: left promiscuous mode [ 111.835694][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.904024][ T7738] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1280'. [ 111.922416][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1281'. [ 111.944271][ T7738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.965100][ T7738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.978860][ T7738] bond0 (unregistering): Released all slaves [ 111.989721][ T7742] loop4: detected capacity change from 0 to 128 [ 112.039698][ T4659] kworker/u8:28: attempt to access beyond end of device [ 112.039698][ T4659] loop4: rw=1, sector=145, nr_sectors = 3 limit=128 [ 112.124126][ T7753] loop1: detected capacity change from 0 to 2048 [ 112.141848][ T7753] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.155807][ T7755] loop4: detected capacity change from 0 to 8192 [ 112.173078][ T7753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.197504][ T7753] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.206586][ T7755] loop4: p1 p3 p4 [ 112.210506][ T7755] loop4: p1 size 8390912 extends beyond EOD, truncated [ 112.229068][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.229074][ T7755] loop4: p3 size 589824 extends beyond EOD, [ 112.229177][ T7755] ================================================================== [ 112.238159][ T7755] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 112.238216][ T7755] [ 112.238227][ T7755] write to 0xffffffff88e4dc0b of 22 bytes by task 3307 on cpu 1: [ 112.238249][ T7755] vsnprintf+0x2ce/0x890 [ 112.238276][ T7755] pointer+0x833/0xcf0 [ 112.238303][ T7755] vsnprintf+0x491/0x890 [ 112.238331][ T7755] vscnprintf+0x41/0x90 [ 112.238365][ T7755] printk_sprint+0x30/0x2d0 [ 112.238389][ T7755] vprintk_store+0x599/0x860 [ 112.238410][ T7755] vprintk_emit+0x178/0x650 [ 112.238430][ T7755] vprintk_default+0x26/0x30 [ 112.238456][ T7755] vprintk+0x1d/0x30 [ 112.238487][ T7755] _printk+0x79/0xa0 [ 112.238522][ T7755] __ext4_msg+0x18f/0x1a0 [ 112.238553][ T7755] ext4_put_super+0x90/0x7d0 [ 112.238586][ T7755] generic_shutdown_super+0xe3/0x210 [ 112.238620][ T7755] kill_block_super+0x2a/0x70 [ 112.238646][ T7755] ext4_kill_sb+0x42/0x80 [ 112.238672][ T7755] deactivate_locked_super+0x75/0x1c0 [ 112.238703][ T7755] deactivate_super+0x97/0xa0 [ 112.238736][ T7755] cleanup_mnt+0x269/0x2e0 [ 112.238760][ T7755] __cleanup_mnt+0x19/0x20 [ 112.238785][ T7755] task_work_run+0x12e/0x1a0 [ 112.238815][ T7755] exit_to_user_mode_loop+0xe4/0x100 [ 112.238852][ T7755] do_syscall_64+0x1d6/0x200 [ 112.238881][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.238910][ T7755] [ 112.238917][ T7755] read to 0xffffffff88e4dc20 of 8 bytes by task 7755 on cpu 0: [ 112.238934][ T7755] data_push_tail+0xfd/0x420 [ 112.238974][ T7755] data_alloc+0xbf/0x2b0 [ 112.239012][ T7755] prb_reserve+0x808/0xaf0 [ 112.239042][ T7755] vprintk_store+0x56d/0x860 [ 112.239060][ T7755] vprintk_emit+0x178/0x650 [ 112.239078][ T7755] vprintk_default+0x26/0x30 [ 112.239100][ T7755] vprintk+0x1d/0x30 [ 112.239133][ T7755] _printk+0x79/0xa0 [ 112.239170][ T7755] bdev_disk_changed+0x874/0xcb0 [ 112.239210][ T7755] loop_set_status+0x516/0x5c0 [ 112.239234][ T7755] lo_ioctl+0x75b/0x15d0 [ 112.239256][ T7755] blkdev_ioctl+0x352/0x440 [ 112.239279][ T7755] __se_sys_ioctl+0xce/0x140 [ 112.239318][ T7755] __x64_sys_ioctl+0x43/0x50 [ 112.239357][ T7755] x64_sys_call+0x19a8/0x2fb0 [ 112.239382][ T7755] do_syscall_64+0xd2/0x200 [ 112.239403][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.239431][ T7755] [ 112.239439][ T7755] value changed: 0x00000000ffffe9a1 -> 0x00000000ffffe920 [ 112.239455][ T7755] [ 112.239462][ T7755] Reported by Kernel Concurrency Sanitizer on: [ 112.239479][ T7755] CPU: 0 UID: 0 PID: 7755 Comm: syz.4.1286 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 112.239517][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.239532][ T7755] ================================================================== [ 112.516888][ T7755] truncated