last executing test programs: 1m34.615636363s ago: executing program 2 (id=3): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000100), 0x6) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r4) r5 = inotify_init1(0x0) fcntl$setstatus(r5, 0x4, 0x2800) r6 = gettid() fcntl$setown(r4, 0x8, r6) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0x82000e98) rmdir(&(0x7f0000001c00)='./control\x00') syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$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") syz_emit_ethernet(0x1e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setflags(r0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r7}, 0x10) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040), 0x1, 0x512, &(0x7f0000000380)="$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") 1m34.386712801s ago: executing program 2 (id=8): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000080)={r5, 0x4, 0x30, 0x3, 0x4}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000300)={r5, 0xfffffe3f, "4b39ee35b99f5657f098ec280dad341e4c3ab6101a742b758be21c1764b911540f706d111f8565e6006452d027795d9c5b399b2fb22bb9e73f8c1b"}, &(0x7f00000001c0)=0x43) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'pimreg0\x00', 0x100}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000200)=0xa9) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r7, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m33.4162826s ago: executing program 2 (id=20): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = dup(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d05, 0x0) 1m33.41612949s ago: executing program 32 (id=20): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = dup(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d05, 0x0) 1m29.842595791s ago: executing program 5 (id=21): open(0x0, 0x62000, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x61) 1m29.631443078s ago: executing program 5 (id=73): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 1m29.534630526s ago: executing program 5 (id=74): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m29.407274466s ago: executing program 5 (id=75): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x10}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = accept$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @loopback}, &(0x7f0000000300)=0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000340)={0x9, {{0x2, 0x4e20, @broadcast}}}, 0x88) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000010002000000000002000500", @ANYRES32=0x0, @ANYBLOB="04000006000000000800020080b07acddd35e8dbf28a3081ebf7250668a22818cfe20b8080a6c45d1cd4e733960f916549294a46453790f8704230a46af6260c5c32fab66eae34b95982499f915f", @ANYRES32=0x0, @ANYBLOB="10000500000000002000000000000000"], 0x34, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000e40)='net/raw6\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mq_open(0x0, 0x42, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x8010}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) r5 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0x1) gettid() keyctl$get_security(0x11, 0x0, &(0x7f0000000480)=""/232, 0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}, 0x1, 0x0, 0x0, 0x24008050}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0xafbd, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m28.99341089s ago: executing program 5 (id=84): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='workqueue_queue_work\x00', r1, 0x0, 0x9}, 0x18) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000180)='GPL\x00', 0xfffffffffffffffd) 1m27.608096593s ago: executing program 5 (id=110): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$TCSETSW2(r0, 0x5453, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800000}, [@map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x60, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m27.585980775s ago: executing program 33 (id=110): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$TCSETSW2(r0, 0x5453, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800000}, [@map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x60, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.006826186s ago: executing program 0 (id=2047): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) 1.906559594s ago: executing program 3 (id=2051): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000700)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, 0x0, 0x4000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x1c0, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_ADT={0xa0, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7e32}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}]}, @IPSET_ATTR_ADT={0x8c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa0}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fffffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0xc}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1000}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) syz_open_dev$hidraw(0x0, 0x0, 0x14a042) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40000000000000079102800000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport, r0}, 0x94) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) 1.904367315s ago: executing program 0 (id=2052): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.858746588s ago: executing program 3 (id=2053): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000000100)=""/170, 0xaa}], 0x3, &(0x7f0000000040)=[{&(0x7f0000008480)=""/95, 0x5f}, {&(0x7f0000000500)=""/4091, 0xffb}, {&(0x7f0000000000)=""/10, 0xa}], 0x3, 0x0) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x000N000000004e22,privport,\x00']) 1.325509812s ago: executing program 1 (id=2059): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x6d, 0x2c450, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4ad9, 0x10000, 0x3, 0x8, 0x8, 0x20002, 0x40b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00 '], 0x60}, 0x0) 1.280417476s ago: executing program 1 (id=2060): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaab6ee0e885ecf0800451000280065000002069078ac1414bbac1414aa4e204e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc200000778d5d8652fd0db7c2460ec0cf3"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'macvlan0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="9feb010018050000000e0000000000000e0500000000000000040000000000000803000000805f4f6100"], &(0x7f0000001280)=""/44, 0x39, 0x2c, 0x1, 0x8, 0x10000}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001380), &(0x7f00000013c0)=[0x0, 0x0], 0x0, 0x39, &(0x7f0000001400)=[{}], 0x8, 0x10, &(0x7f0000000840), &(0x7f0000001480), 0x8, 0xb7, 0x8, 0x8, &(0x7f00000014c0)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) 977.57261ms ago: executing program 6 (id=2063): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000700)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, 0x0, 0x4000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x1c0, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_ADT={0xa0, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7e32}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}]}, @IPSET_ATTR_ADT={0x8c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa0}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fffffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0xc}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1000}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) syz_open_dev$hidraw(0x0, 0x0, 0x14a042) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) 915.493205ms ago: executing program 0 (id=2064): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r3, 0x29000000, 0x4, 0x0, 0x0) 915.030675ms ago: executing program 3 (id=2065): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 914.056015ms ago: executing program 6 (id=2066): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x17, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000000002, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r0, 0x1}}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000600)={[{@grpjquota}, {@lazytime}, {@barrier}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@journal_async_commit}], [{@seclabel}]}, 0x3, 0x446, &(0x7f0000000d40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="b9c8583351678a3e57e8706461eba07937a8451f9c23f0926617bb365cbe62d55fd2a6d83eb261aa1c6efc32391aaa933183f26978eefe7bb4acf5e3da77b1c3dd43a54c7d9bae49fe2f4b5f6ba219bbde1f2b227616157f1dc6d627a98ff875da53ba712871a22bd8f3c459f8421b8b11043d214b4ae4c72ee26c7b924bcc5de625bb27473bb97ee45f0c2a1de40d771aa1efa3fdc3263d98f4ae4ca9cbd490c608c8edceaf782941af1cec2a027a292820ce6b2cd2497230b22a332557878b27d3be0c7826658c739dfd42fcec0d5bcc376306599c809c2a8b54ef4f5767e52e18b0010e1258656e4f", @ANYRESDEC=0x0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x400) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 879.059408ms ago: executing program 6 (id=2067): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty}, 0x1c) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x4c58, 0x4, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0xa) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0x20000007}, 0x1c) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000300)) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000f40)={{r0}, r3, 0x2, @unused=[0x0, 0x7, 0xcda, 0x6], @name="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"}) recvmmsg(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x20, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4010) 777.663227ms ago: executing program 6 (id=2068): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00 '], 0x60}, 0x0) 718.155461ms ago: executing program 4 (id=2071): setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0x1, @loopback, 0x4}}, 0x7, 0x942f}, 0x90) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d0f, &(0x7f0000000040)) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 695.138163ms ago: executing program 4 (id=2072): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x593, &(0x7f0000000400)={0x0, 0xc458, 0x800, 0x2, 0x3a1}, &(0x7f0000000300)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) (fail_nth: 7) 576.522953ms ago: executing program 4 (id=2073): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00050000000000000000"], 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000200), &(0x7f0000000500)) getgroups(0x2, &(0x7f0000000540)=[0xffffffffffffffff, 0xee01]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000680)={{0x3, r2, 0x0, r3, r4, 0x80, 0x8}, 0x0, 0x0, 0x4, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc5, 0x2, 0x9, r5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001580)=[{{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000900), 0x0, &(0x7f0000000940), 0x0, 0x4008021}}, {{&(0x7f0000000980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f00), 0x0, &(0x7f0000001200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="624d353f553df52c7b53aa58b668", @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000000400002000000", @ANYRES32, @ANYRES32=r4, @ANYRESHEX=r1, @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001800000000000000010000000100", @ANYRESOCT=r1], 0xd8, 0x484c1}}], 0x2, 0x0) getresgid(&(0x7f0000000080)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x11c}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000d70000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=r7, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90, 0x4000000}, 0x4c040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004f40)={0x0, 0x0}, &(0x7f0000004f80)=0xc) r10 = getegid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004fc0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005000)={0x0, 0x0}, &(0x7f0000005040)=0xc) lstat(&(0x7f0000005080)='./file0\x00', &(0x7f00000050c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{{&(0x7f0000000900)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000980)="da3e3e4e2d1bf9e0cb096acc55ab02532d29e086af1fd2d5c2140a973732b66d6fd15375eb107f3d8c71e5e64cf278dd410a", 0x32}], 0x1, 0x0, 0x0, 0x84}}, {{&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000b80)="c098035c32919172563af06d0c81e285dc72d33593da308e36654d52b1d4b7f67fc00769cddb961cb35c2d825631e54225601097cc3ad8bf297de854fcd6de30638ef2d782fbfe7c6619ec3f3ab66945aefd7c07956109f25bafd1e410f99b370d219418f69fa5adc0e423af0adfddb86846d0dacede329e57eef42089eaa139ee9a73671175ae65ed800ef2b977673b73fc5e2986575265c47a18a9b69374a020ea3d9afef3d036a91164bd11486941d98b46354ad3", 0xb6}, {&(0x7f0000000c40)="ba3f41c5637840e4b608ca7d20bd2626ed64a2ceebccecd9c8cf80e9951844c986e9aa2d561400caf339073576c9fd18e17b25bba802f94d8cb66cd35a08903ae6e881b0ce828a8dbed85143262cb94850eec053f3aa3702dec43d3a84cbc9e46f7b55499493dc9c5a7d32b4576bab42eeb34bb1fb6751612be71c6c88a3bbcc106f4a17befe6074296e86ce22390ff814a822871c45f5d0dd4bb7", 0x9b}], 0x2, 0x0, 0x0, 0x40}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="5160b19de525df2c2b7ef517ab7210eaa30ea72b360a4cf772226e518eee9009e583f9e626c19f5be9f524bbed6dc93a8bb04886252850e849a075c5b3be6e2c701e281e99f82a6f1287ebb386c9f2643989ba4d74099512ba3479c18f08240373c6f0aff63e326b8b5f777c3aaf6632d67d731a7df9d742ba7d42110fdcc997c8391c521120ab7977f0b64a228aa0c69fbe2dc6257fb06f8840d910283dcd93d2", 0xa1}], 0x1, &(0x7f0000000e00)=[@rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}], 0x88, 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000ec0)="cc85364762a18569cbb35ecb279d6dc9ea36ec8bdfa0cb0cbcacbbf6b0db4a36df4681aa19c88d1563338e79c7f24add3a82d37a1482dade0457711004b247239d42335407f8155fcde279116100e629683d5d90adecb6e3ef5ff5968bfb07e2d695", 0x62}], 0x1, &(0x7f0000001180)=[@rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70, 0x20001010}}, {{&(0x7f0000001200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003600)=[{&(0x7f0000001280)="5748620578606b6a398d1cd6980052820cb2a45ec132972b3af182549c0b5e17e6cdf5307bb29c0b1411b517962ef4e361ab5c34d9aade9405c708d7c99e5fb8832920fc", 0x44}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)="aaacb7c0e961df4d523d3d5c745bc800db798fcc11376001ccb12659f311ff967158346754d29005ac0a9eb824cc97e114653ddc1575327f2b353b71614345a84f66252e7a181ba0c8398139c349efda936f437a39bd27473f3c1def16bfb1757e9ccc7474e9a90ad60a4d3ed35122ad957bf2efbb4525badcf90721059fd883112893c45b71b7852053dff540addec522290a01160e99736f6f87aa9a3b0e97a75d63b8bcb7fb44411e1617c6c31456df2ede2299866aa28983324a4544c5281a7a12402d752169fe76fb9d9e1077f632fdfcdcd859b205f1ca13a0240b64fa531f693062910ef2b7e3", 0xea}, {&(0x7f0000003400)="08d5121c05c8c6a0c85125899cabc82062e712f44ef8c3f516ce54109838a6e1885a2c4cd224b4cfebd547ee6619d46e3ce0b13302f54321d01a84afe571c8660e683b7a2155a61abf799eed502ea372e681685b70e0a9623bdcb4ec2384e966b7e1136f568668fb4cd1be03fb5c22b356f3d89d6f05896592d998ab8eb3ebfc11b14fdf91b667c2963d99fe7bf88a41a546968aa2c6db2cf9f20efad19713847ba1463d06b8f5587dfeb1f1047fc24b5e57e8a55a39220f755340d5aedbface79cab7", 0xc3}, {&(0x7f0000003500)="228a2b95f655ecac9b8a95a7025560a19a11b9a431fcee5f3522c5e3fe95cdb14cce157362f172d663c16ebb0d0d726d9265bbc4db3ac5885d53a4989643ac6f4e546dc7d3bee3654ed23c00b4e20c9a88d4da5a454617c645f2f2ec9e446fcb4216d80b5171ef0bc245427c7f1c87247c9033f3328cdbd50f97273c63a2b2c1b7c2b82647864de3fdd253cf1a2f3979e8cb4f52d11bedf41721fad15aa828ebd0615f3313496789ef2975a28bbf27176fcada9a24fb4057d07e7b57ce522d3b16c0c694a64ad1e7a6fcfca722a813f80b3a529ce9a39c331d57d9865b", 0xdd}], 0x6, &(0x7f0000003a80)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}}], 0x118}}, {{&(0x7f0000003bc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004000)=[{&(0x7f0000003c40)="d45f12392c0e9c6a33c2b47cab8a5fdd60bbead5075454accfc2db01722215efab3c0469b7a588c63809f1cb40f4c77e3a5cc73f77042164e4ce2169b0ca5679d189eb36caa23e3baf1d1d339ec31a3c60f93c882590d03ad18db8d4a686c5d76e6951194d5c0c2db440505ffea9c143b705887e897a3677960a2ecde137bb3d55d6d211306cd04ab37b918f8caa06d6b0690881950d8f9c4cbfb81f791716bd6fa2ac2fb4e7796192ce8b37c89bc2b7e47eadba5056f18aacb5924960542a6a93fc5c7bf756fdc5ea462f1f9eb7ab19f96382d0cae37229a57cb50f02316db43058bafa", 0xe4}, {&(0x7f0000003d40)="8736ad6fdff348e9ddd8024b1a50d60482760f43c48ba72fffb649e56933b1cccf4e7d3f8c54e700cc178c6942cac839d5fa23ad3870ddc6ce66969edd61e89040516673d80ece139a40d6ce1c31b97bbf7d468a8da91e24e507441510e4cfe6276daf0b54f22a30de6650f6e1fe28c65523d67af29f7a90d0b3680775dd1618211974174e83c5751610a53be4dfb8ebeeb44ffe367d48a326c0ed58372dfcf014ccd096b54de5c8ba022a27f892155a83", 0xb1}, {&(0x7f0000003e00)="0a4d5e1d957644ab426634e7a77057d938ecb354451377f197876389b6502f627b787ae7567d0f31e0e21a4d9cdaeca3c396a13f7e", 0x35}, {&(0x7f0000003e40)="f1f8bda4677c6b5e1a77515856e0c7e332b207a4b32da454f4a4cf50c5699df06ca9824f5dc69904aa0b4ffc0e670e192e45165161447910742f11323aba13d0438245f083e0446a83185cad790d552e4b717e2a04f03f36190e9ffebe37f1dabcb61526ca845dbd2ac8ff2b53a8ec2dbc50d325e0a9968f89ddaac9c781adcf2bb1d57756d70a565d1f670e043e788922ef9a92fa17d853257cff57f08c9d3d0fca31c2e8e3f4758a7098b42052150ef28a687f23f7a61a3f2b45c6de8288", 0xbf}, {&(0x7f0000003f00)="4f60d5e3ee394680a45e9943ee60f29ad0510aa02830d3cd679b7d8fb2cdd1d2376eb934282b80beb28bc2af65913ff493913df7a08f60253abd9e", 0x3b}, {&(0x7f0000003f40)="bb5a1892e4a708ba84fb52de9555dcdfef5ec90758e30dfaebc47d2709c0e949783f41a3f173e6c4cd0bbb8dbf6815cda45423e4e22c52d0cd46ce06e18d14c9698436a0fd17d6c370c85a7cc636178ec89a7f0adaca0f63093bc476a7dc8f25f92fe4a7cf81a54f394b7c532f16f1ebe280689c5c78f33cb073b2dc0355f3067d9254569bf0ec5a1a310daa7f", 0x8d}], 0x6, &(0x7f00000040c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x4044050}}, {{&(0x7f0000004100)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004480)=[{&(0x7f0000004180)="0d750f79d51abe280f7d5702f74beb10c0f27aaf12a0bd576ebe31b4aafb202229df4d2fe8f1f5c434a97631f1c1c634dce4d1e09865a590570a59158f318323d13a2e478fb67348b96923", 0x4b}, {&(0x7f0000004200)="b881856c38295192644eb85a6263ca6b337a33b15d126913d58d8b1f55d7d3c9b10473dcbae5997304dd0e7dd71373e58874ff29aae525c49dcf260a2ad9fcda", 0x40}, {&(0x7f0000004240)="320ecdfc17da3e19781201958e28a2645b68e66885d6e0197a4828ace521cc19f3ac23bb121800c506384884a9fe3be051ee0cb0e2f4dc77f5f3426ee80eee42cc5faad62474c7b92f317a25b6612c05fae029e220c2923a1eaba7a4f49c7c113923fd086b886c91a2431d03db2510d10c4ed71a3ce04d", 0x77}, {&(0x7f00000042c0)="74f65158cfaf169aa989a0ff8cb22925adca57d6cd35f0ec1a920c4f0b3d6ef36be4fc643aaf3db18268430ae5a6ceb5432988bf5b9258d920ec8e68384b1625a00a17167bd4ef3599c9871f9d6be5c2d2060a6758869a16cc8a2a3bd74f979b0b67bc6d2201adfc5d7f82fe629151d49f80044c8ccb0710f1408f79485a6af84e7fed50faf72f068ec6e7540246c5155c", 0x91}, {&(0x7f0000004380)="f4ee8f4684594f3e14a27d75c129388d59950aeabf2b243ae43b9e4e01f721ae463d070e7443293b56de4f4a46dfa9627d9f805ff8e990ee9a164afc3ef14603ab732a71ed5bf14453cd8fb6967b88b6227a29f5fafd1ba60926d9af5d923d0c6e4821cdf6a3c177febd2e73feb6fe88f8d788b337aea3952ec6cd3457258670cae213b438121eef2f5ebb0a449fbac3e423230f64265255f92b9618fb2354403f382c6e6eb72a89b4663da828ac6f886716cb418c9df9fdaba3fb8a3e0bc26224f0e4680bb488af2e1ac3e7b91ef21a274b0149296d4882aa95", 0xda}], 0x5, 0x0, 0x0, 0x4881}}, {{&(0x7f0000004500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004780)=[{&(0x7f0000004580)="52b380877f021022342677954539300e6b69c5a49c72a95f6126b89816bd9ef76e05e13f2c5db2c10bf21c53d201b2c604907621cba8262122f7eca7e8470749d4b662be2c681e61a7496685bd866015a44123f819fe1e7bde81f76e0536305eccdf904c24a42a1a7ee2105d80d3fbbf836f025c43b3092661f5448909bbc13d04f577f8a8b53a6849c6956319a27f0c23b910a3403375b39741be8a5d87e5a95f90352ffa01e7c9df044df285e9e48f18d63dbcefbfd052795b2976d940961a57a95bab03d2805a7365a35bc87d46283f", 0xd1}, {&(0x7f0000004680)="906392123a8b8df2acb31462574070b211f4c05018371bdc36bd53bf1988ec31436bc38ed4b3d144275a5aee01c24bac4e21a2ca814bbdd437c01e6ce878548b9f967ee5116abf411d64d69bf32e3cccae03cb30f977f343c25294ed8e0a1048fc9980b46e07509cd6d1634317d830f6251735f22933e82d37618f61b4cc04e2ac", 0x81}, {&(0x7f0000004740)="91add82c6d1289a6daba9edd20f4f20c0a250550be", 0x15}], 0x3, &(0x7f00000047c0)=[@rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0, r0, r0, 0xffffffffffffffff]}}], 0x58, 0x40}}, {{&(0x7f0000004840)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004940)=[{&(0x7f00000048c0)="cc38513e5349cba812aa8bca57e2279c51fe5eab0cf5748c9508012e7526eec3a0109be3721d6284106cd5d9e373289c422e8bb67e553183108583abfbba4221886fb10ec12caaeaf81bd789b896c2d75acd", 0x52}], 0x1, &(0x7f0000004a40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c}}], 0x88, 0x4000}}, {{&(0x7f0000004b00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004dc0)=[{&(0x7f0000004b80)="abfe4e9c014690a59bd6eb11402ee36a2f20ef488ec8", 0x16}, {&(0x7f0000004bc0)="2edf14a9296f6d61b8816c0893fbcd0c268e963436b18347a55d74f03c78911a29a5fcd09b5300dcfda269226c0cf1121ccd03204c224df39a370805af184fbbcea8a4d8db1b3d76dda790693c8bdc77b70a85e1912ca78a31c76e9d3e444c92d6da97939564ff8f9bae86d6b5559276b340f6957b23a6fd301fca272713697d274b343d1c0872819a49b3b3fd78de8bbda042977d7f76a05e63aae5224ab00859860e14cd33147513c349c85725a296cba1d74535fb7b643dcb00f6a710dfb21f97ed7fa9c2dd877aa821897d2d8ac8e92c403e4f", 0xd5}, {&(0x7f0000004cc0)="0f9ed8bf26506e65ab9db853eb998d8bd58234b1d7e76562400d564d37b1189db42f207df8a4a747c93504f9dece0e58a175816bd51f357447e058c502ef016b346d8c39974336cdccb0e671ccc216170ac03da73cebbe5a28d4b4dc3866d8a80e1a406b7cb7bfb3810f2ccf90eed063383956706372f89778aa15ff98d4dec47c872ca38d0882dc7e60037059eda66a8d7b4d49c12688bf8371ccb5a65024ff237d4597786b8a54f251222f0f460dceee1c036724c2c4c379cc71e18764df5eacaf02579a097a075fb800d38afdb296e0ec2d5b678e6af60aa8", 0xda}], 0x3, &(0x7f0000005140)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r8, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0xc0}}], 0xa, 0x8020) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ipvlan1\x00', 0x0}) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa3, 0xa3, 0x7, [@restrict={0xb}, @union={0xc, 0x0, 0x0, 0x5, 0x1, 0x3}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x2}, @datasec={0x7, 0x3, 0x0, 0xf, 0x3, [{0x4, 0x3ff, 0x5}, {0x4, 0xffffffc8, 0xfffffffe}, {0x5, 0xfffffffa, 0x4f}], "2a8c04"}, @volatile={0xa, 0x0, 0x0, 0x9, 0x3}, @func={0x4, 0x0, 0x0, 0xc, 0x2}, @enum64={0x10, 0x2, 0x0, 0x13, 0x1, 0x3, [{0xb, 0x1, 0x4}, {0x4, 0x4a1, 0x3}]}, @var={0x5, 0x0, 0x0, 0xe, 0x4, 0x1}]}, {0x0, [0x61, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000000580)=""/235, 0xc3, 0xeb, 0x0, 0xfffff6c1, 0x10000}, 0x28) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r16}, 0x20) r17 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x52, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r18 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x17, 0xc, &(0x7f0000000740)=ANY=[@ANYRES8=r16, @ANYRES32=r18, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095ffff571e4d5beeb91a8e059e780005acd0803eda37f14d39aa443394f750dce9530356afdea9dc60b7e18db3a2ffcf94029b9b"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r19, r17, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0x11, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x9d}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @alu={0x4, 0x1, 0x2, 0x6, 0xb, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x200, 0x68, &(0x7f00000000c0)=""/104, 0x41100, 0x64, '\x00', r14, @fallback=0xe, r15, 0x8, &(0x7f0000000680)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0xa, 0x7, 0xa790}, 0x10, r19, r0, 0x4, 0x0, &(0x7f0000000700)=[{0x0, 0x4, 0xa, 0x4}, {0x5, 0x3, 0x2, 0x5}, {0x4, 0x2, 0x5, 0x5}, {0x5, 0x3, 0xd, 0xb}], 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) 575.527663ms ago: executing program 4 (id=2074): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cfce1e090000001fb791643a5ee4ce1b14d6d930ede1d9d322fe7c9f8775730d165ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3f09ad809d5e1cace81ed0bffece0b42a9ecbee5dd6e4edef3d93452a92954b4337000000008af26c8b7b55f4d2cb1df0966736a1dfe444c65ac5b348eac7c2ea475327557ba566236ceb0000000000", 0xd8}], 0x1}, 0x4000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000001cc0), 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000003000000950000000000000038378c5f454c2d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000000c0)) fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x6) 458.913312ms ago: executing program 4 (id=2075): openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000202070250000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, 0x0}, 0x20000000}], 0x1, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x40004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000000600000001228290081e949b93897bc3b0000000040007d01ff020000000000000000000000000001"], 0xfdef) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffb}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x3}, {0x5, 0xffffffff}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x1, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x1000, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x6, 0x5}, {}, {0x0, 0x100, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x400000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x6}, {0x80}, {0x0, 0x8, 0x0, 0x5}, {}, {0x0, 0x0, 0x8, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x3, 0x0, 0x6e}, {0x0, 0xfffffff9, 0xfffffffe}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0xffffffff, 0x0, 0xfffffffe}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400001}, {0x0, 0x0, 0x200}, {0x2000000}, {0x0, 0x0, 0x0, 0x3}, {0x5, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x40, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x0, 0x1}, {0x10000000, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x800000, 0x0, 0x6, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0}, {0x800000}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x295}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1, 0xfffffff7}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x84}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x5, 0x0, 0x0, 0x9, 0x400000}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000, 0x800}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x0, 0x0, 0x0, 0xfffffffd}], [{}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {0x7, 0x1}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) r5 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r5, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010020, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010100008500000015000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 432.018905ms ago: executing program 1 (id=2076): r0 = socket(0x1e, 0x4, 0x0) sendto$inet(r0, 0xfffffffffffffffe, 0x0, 0x890, &(0x7f0000000240)={0x2, 0x4e24, @private=0xa010100}, 0x10) 372.736309ms ago: executing program 1 (id=2077): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cfce1e090000001fb791643a5ee4ce1b14d6d930ede1d9d322fe7c9f8775730d165ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3f09ad809d5e1cace81ed0bffece0b42a9ecbee5dd6e4edef3d93452a92954b4337000000008af26c8b7b55f4d2cb1df0966736a1dfe444c65ac5b348eac7c2ea475327557ba566236ceb0000000000", 0xd8}], 0x1}, 0x4000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000001cc0), 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000003000000950000000000000038378c5f454c2d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000000c0)) fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x6) 364.19287ms ago: executing program 3 (id=2078): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xfffffffc, 0x7ffffffe, 0x1, 0x20000000}, 0x0, 0x0) 316.137974ms ago: executing program 3 (id=2079): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = dup(0xffffffffffffffff) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[], 0x53) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[]) (fail_nth: 5) 79.486663ms ago: executing program 3 (id=2080): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) r1 = socket(0x1f, 0x80000, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) timer_create(0x2, &(0x7f00000001c0)={0x0, 0x40, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000240)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) socket$kcm(0x29, 0x2, 0x0) 79.006724ms ago: executing program 6 (id=2081): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x6d, 0x2c450, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4ad9, 0x10000, 0x3, 0x8, 0x8, 0x20002, 0x40b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00 '], 0x60}, 0x0) 50.779575ms ago: executing program 0 (id=2082): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 50.346906ms ago: executing program 0 (id=2083): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) (async, rerun: 32) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (rerun: 32) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0}, 0x20) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00fe7d1830daa688de001dfd99d53e5090bd0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) (rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64) syz_clone(0x20000000, &(0x7f0000001040)="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", 0x1000, &(0x7f0000002040), &(0x7f0000000080), &(0x7f00000001c0)="57156587095867f239687b952a8906492ea8f6be83a79fe1e88ade49356be93fc9e1f868197990609f3872c647e26faec0dcbee9f789") (async) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) (async) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={0x0, 0x2c0}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000b758d4690080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0f0000fbffffff00"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, 0x0, &(0x7f0000000100)=""/55}, 0x20) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240000000030800014000000012080003"], 0x122}}, 0x0) unshare(0x24020400) (async) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1840, 0x124, 0x8}, 0x18) (async) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) (async, rerun: 32) cachestat(r4, &(0x7f0000003a80)={0x80000001, 0x5e43}, 0x0, 0x0) (async, rerun: 32) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x8, 0xc, 0x2, 0x2}, {0x7fff, 0x0, 0x0, 0x1}]}) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) unshare(0x2040400) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f00000003c0)=0x800001, 0x4) unshare(0x26000400) (async) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000007, 0x2172, 0xffffffffffffffff, 0xffffc000) 49.733525ms ago: executing program 1 (id=2084): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x66}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10) (fail_nth: 8) 457.63µs ago: executing program 0 (id=2085): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cfce1e090000001fb791643a5ee4ce1b14d6d930ede1d9d322fe7c9f8775730d165ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3f09ad809d5e1cace81ed0bffece0b42a9ecbee5dd6e4edef3d93452a92954b4337000000008af26c8b7b55f4d2cb1df0966736a1dfe444c65ac5b348eac7c2ea475327557ba566236ceb0000000000", 0xd8}], 0x1}, 0x4000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000001cc0), 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000003000000950000000000000038378c5f454c2d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000000c0)) fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x6) 247.87µs ago: executing program 1 (id=2086): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) close(r0) 0s ago: executing program 6 (id=2087): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 0s ago: executing program 1 (id=2088): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x26, 0x336, &(0x7f00000001c0)="$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") (async, rerun: 32) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) (async, rerun: 32) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff030370", 0x7}], 0x2) (async) getdents(r0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2d6042) kernel console output (not intermixed with test programs): es leftover after parsing attributes in process `syz.1.1225'. [ 94.946290][ T8561] hub 9-0:1.0: USB hub found [ 94.951274][ T8561] hub 9-0:1.0: 8 ports detected [ 94.968554][ T8570] FAULT_INJECTION: forcing a failure. [ 94.968554][ T8570] name failslab, interval 1, probability 0, space 0, times 0 [ 94.981269][ T8570] CPU: 1 UID: 0 PID: 8570 Comm: syz.1.1231 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 94.981303][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.981342][ T8570] Call Trace: [ 94.981351][ T8570] [ 94.981360][ T8570] __dump_stack+0x1d/0x30 [ 94.981512][ T8570] dump_stack_lvl+0xe8/0x140 [ 94.981553][ T8570] dump_stack+0x15/0x1b [ 94.981568][ T8570] should_fail_ex+0x265/0x280 [ 94.981586][ T8570] should_failslab+0x8c/0xb0 [ 94.981656][ T8570] kmem_cache_alloc_noprof+0x50/0x310 [ 94.981683][ T8570] ? dst_alloc+0xbd/0x100 [ 94.981738][ T8570] dst_alloc+0xbd/0x100 [ 94.981772][ T8570] ? ipv4_sk_update_pmtu+0x432/0xac0 [ 94.981798][ T8570] ip_route_output_key_hash_rcu+0xef5/0x1380 [ 94.981903][ T8570] ip_route_output_key_hash+0x7a/0xb0 [ 94.981991][ T8570] tcp_v4_connect+0x3e2/0xad0 [ 94.982017][ T8570] __inet_stream_connect+0x169/0x7e0 [ 94.982047][ T8570] ? _raw_spin_unlock_bh+0x36/0x40 [ 94.982079][ T8570] ? lock_sock_nested+0x112/0x140 [ 94.982136][ T8570] inet_stream_connect+0x44/0x70 [ 94.982226][ T8570] kernel_connect+0x9f/0xf0 [ 94.982257][ T8570] smc_connect+0x4f3/0x670 [ 94.982285][ T8570] ? __pfx_smc_connect+0x10/0x10 [ 94.982306][ T8570] __sys_connect+0x1f2/0x2b0 [ 94.982376][ T8570] __x64_sys_connect+0x3f/0x50 [ 94.982409][ T8570] x64_sys_call+0x2c08/0x2ff0 [ 94.982429][ T8570] do_syscall_64+0xd2/0x200 [ 94.982469][ T8570] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.982500][ T8570] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 94.982587][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.982614][ T8570] RIP: 0033:0x7f426f44e9a9 [ 94.982649][ T8570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.982669][ T8570] RSP: 002b:00007f426daaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 94.982687][ T8570] RAX: ffffffffffffffda RBX: 00007f426f675fa0 RCX: 00007f426f44e9a9 [ 94.982698][ T8570] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 94.982709][ T8570] RBP: 00007f426daaf090 R08: 0000000000000000 R09: 0000000000000000 [ 94.982720][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.982748][ T8570] R13: 0000000000000000 R14: 00007f426f675fa0 R15: 00007ffed87a38e8 [ 94.982771][ T8570] [ 95.218000][ T8564] netlink: 'syz.6.1230': attribute type 13 has an invalid length. [ 95.270522][ T8564] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.295276][ T8579] hub 6-0:1.0: USB hub found [ 95.300160][ T8579] hub 6-0:1.0: 8 ports detected [ 95.440402][ T8603] netlink: 'syz.6.1243': attribute type 11 has an invalid length. [ 95.567723][ T8603] hub 9-0:1.0: USB hub found [ 95.572566][ T8603] hub 9-0:1.0: 8 ports detected [ 95.727856][ T8623] hub 6-0:1.0: USB hub found [ 95.742329][ T8623] hub 6-0:1.0: 8 ports detected [ 95.747690][ T8621] pim6reg1: entered promiscuous mode [ 95.753171][ T8621] pim6reg1: entered allmulticast mode [ 95.928941][ T8643] loop4: detected capacity change from 0 to 512 [ 95.983369][ T8654] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1259'. [ 96.006681][ T8643] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1256: Failed to acquire dquot type 1 [ 96.044466][ T8643] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.1256: corrupted inode contents [ 96.062307][ T8643] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #16: comm syz.4.1256: mark_inode_dirty error [ 96.089114][ T8643] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.1256: corrupted inode contents [ 96.102131][ T8643] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1256: mark_inode_dirty error [ 96.115932][ T8643] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.1256: corrupted inode contents [ 96.128374][ T8643] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 96.144372][ T8676] pim6reg1: entered promiscuous mode [ 96.149713][ T8676] pim6reg1: entered allmulticast mode [ 96.163364][ T8643] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.1256: corrupted inode contents [ 96.184273][ T8643] EXT4-fs error (device loop4): ext4_truncate:4592: inode #16: comm syz.4.1256: mark_inode_dirty error [ 96.200169][ T8643] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 96.224146][ T8643] EXT4-fs (loop4): 1 truncate cleaned up [ 96.230393][ T8643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.266753][ T8643] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.285842][ T8690] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1264'. [ 96.564304][ T8721] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1256: Failed to acquire dquot type 1 [ 96.977891][ T8744] pim6reg1: entered promiscuous mode [ 96.983299][ T8744] pim6reg1: entered allmulticast mode [ 97.065006][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.160948][ T8764] netlink: 'syz.0.1285': attribute type 11 has an invalid length. [ 97.191219][ T8770] FAULT_INJECTION: forcing a failure. [ 97.191219][ T8770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.204382][ T8770] CPU: 0 UID: 0 PID: 8770 Comm: syz.1.1287 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 97.204412][ T8770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 97.204429][ T8770] Call Trace: [ 97.204437][ T8770] [ 97.204505][ T8770] __dump_stack+0x1d/0x30 [ 97.204558][ T8770] dump_stack_lvl+0xe8/0x140 [ 97.204597][ T8770] dump_stack+0x15/0x1b [ 97.204671][ T8770] should_fail_ex+0x265/0x280 [ 97.204690][ T8770] should_fail+0xb/0x20 [ 97.204710][ T8770] should_fail_usercopy+0x1a/0x20 [ 97.204737][ T8770] _copy_from_user+0x1c/0xb0 [ 97.204771][ T8770] memdup_user+0x5e/0xd0 [ 97.204886][ T8770] con_font_op+0x6c3/0x930 [ 97.204927][ T8770] ? selinux_capable+0x31/0x40 [ 97.204967][ T8770] ? should_fail_ex+0xdb/0x280 [ 97.204993][ T8770] vt_ioctl+0x153c/0x1880 [ 97.205097][ T8770] tty_ioctl+0x7de/0xb80 [ 97.205127][ T8770] ? __pfx_tty_ioctl+0x10/0x10 [ 97.205262][ T8770] __se_sys_ioctl+0xcb/0x140 [ 97.205283][ T8770] __x64_sys_ioctl+0x43/0x50 [ 97.205341][ T8770] x64_sys_call+0x1816/0x2ff0 [ 97.205410][ T8770] do_syscall_64+0xd2/0x200 [ 97.205437][ T8770] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 97.205463][ T8770] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 97.205546][ T8770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.205606][ T8770] RIP: 0033:0x7f426f44e9a9 [ 97.205622][ T8770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.205646][ T8770] RSP: 002b:00007f426daaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.205669][ T8770] RAX: ffffffffffffffda RBX: 00007f426f675fa0 RCX: 00007f426f44e9a9 [ 97.205685][ T8770] RDX: 00002000000000c0 RSI: 0000000000004b72 RDI: 0000000000000004 [ 97.205702][ T8770] RBP: 00007f426daaf090 R08: 0000000000000000 R09: 0000000000000000 [ 97.205715][ T8770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.205727][ T8770] R13: 0000000000000000 R14: 00007f426f675fa0 R15: 00007ffed87a38e8 [ 97.205774][ T8770] [ 97.287753][ T8764] hub 9-0:1.0: USB hub found [ 97.287879][ T8764] hub 9-0:1.0: 8 ports detected [ 97.469218][ T8779] loop4: detected capacity change from 0 to 8192 [ 97.555028][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 97.555078][ T29] audit: type=1400 audit(2000000016.690:6138): avc: denied { load_policy } for pid=8789 comm="syz.0.1295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 97.555266][ T8790] SELinux: failed to load policy [ 97.595237][ T8792] pim6reg1: entered promiscuous mode [ 97.600645][ T8792] pim6reg1: entered allmulticast mode [ 97.623404][ T29] audit: type=1326 audit(2000000016.760:6139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f44e9a9 code=0x7ffc0000 [ 97.650115][ T29] audit: type=1326 audit(2000000016.790:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f426f44e9a9 code=0x7ffc0000 [ 97.673313][ T29] audit: type=1326 audit(2000000016.790:6141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f44e9a9 code=0x7ffc0000 [ 97.696353][ T29] audit: type=1326 audit(2000000016.790:6142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f426f44e9a9 code=0x7ffc0000 [ 97.719255][ T29] audit: type=1326 audit(2000000016.790:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f44e9a9 code=0x7ffc0000 [ 97.742188][ T29] audit: type=1326 audit(2000000016.790:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f426f44e9a9 code=0x7ffc0000 [ 97.764966][ T29] audit: type=1326 audit(2000000016.790:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f44e9a9 code=0x7ffc0000 [ 97.787772][ T29] audit: type=1326 audit(2000000016.790:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f426f44e9a9 code=0x7ffc0000 [ 97.810591][ T29] audit: type=1326 audit(2000000016.790:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f44e9a9 code=0x7ffc0000 [ 97.838818][ T8804] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 97.995410][ T8838] loop3: detected capacity change from 0 to 512 [ 98.002927][ T8838] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.018359][ T8838] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 98.049325][ T8838] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1307: invalid block [ 98.066449][ T8838] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1307: invalid indirect mapped block 4294967295 (level 1) [ 98.086288][ T8838] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1307: invalid indirect mapped block 4294967295 (level 1) [ 98.107931][ T8863] $H: renamed from bond0 (while UP) [ 98.113018][ T8838] EXT4-fs (loop3): 2 truncates cleaned up [ 98.119943][ T8838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.138526][ T8863] $H: entered promiscuous mode [ 98.143687][ T8863] bond_slave_0: entered promiscuous mode [ 98.149562][ T8863] bond_slave_1: entered promiscuous mode [ 98.159093][ T8867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.166450][ T8867] IPv6: NLM_F_CREATE should be set when creating new route [ 98.173809][ T8867] IPv6: NLM_F_CREATE should be set when creating new route [ 98.181025][ T8867] IPv6: NLM_F_CREATE should be set when creating new route [ 98.189056][ T8855] pim6reg1: entered promiscuous mode [ 98.194420][ T8855] pim6reg1: entered allmulticast mode [ 98.206294][ T8867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.224848][ T8869] loop1: detected capacity change from 0 to 128 [ 98.232440][ T8869] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.245488][ T8869] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.264567][ T8869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8869 comm=syz.1.1318 [ 98.285238][ T8870] loop6: detected capacity change from 0 to 512 [ 98.327418][ T8870] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.1317: error while reading EA inode 32 err=-116 [ 98.351179][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.367884][ T8870] EXT4-fs (loop6): Remounting filesystem read-only [ 98.374574][ T8870] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 98.386077][ T8870] EXT4-fs (loop6): 1 orphan inode deleted [ 98.392379][ T8870] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.412163][ T8914] loop3: detected capacity change from 0 to 512 [ 98.419158][ T8870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.475170][ T8914] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.1323: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 98.495759][ T8914] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.1323: Bad quota inode: 3, type: 0 [ 98.507083][ T8914] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 98.522303][ T8914] EXT4-fs (loop3): mount failed [ 98.530279][ T8932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.537559][ T8932] IPv6: NLM_F_CREATE should be set when creating new route [ 98.544789][ T8932] IPv6: NLM_F_CREATE should be set when creating new route [ 98.561847][ T8932] loop1: detected capacity change from 0 to 1024 [ 98.591003][ T8932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.611596][ T8932] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.625893][ T8937] hub 6-0:1.0: USB hub found [ 98.626227][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'. [ 98.630771][ T8937] hub 6-0:1.0: 8 ports detected [ 98.647750][ T8947] loop3: detected capacity change from 0 to 1024 [ 98.674499][ T8947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.698694][ T8947] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1333'. [ 98.727764][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.788313][ T8963] pim6reg1: entered promiscuous mode [ 98.793780][ T8963] pim6reg1: entered allmulticast mode [ 98.805403][ T8966] pim6reg1: entered promiscuous mode [ 98.810778][ T8966] pim6reg1: entered allmulticast mode [ 98.959929][ T8982] pim6reg1: entered promiscuous mode [ 98.965368][ T8982] pim6reg1: entered allmulticast mode [ 99.039175][ T8997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1347'. [ 99.041235][ T8998] netlink: '+}[@': attribute type 21 has an invalid length. [ 99.057180][ T8998] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 99.178578][ T9014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.187958][ T9014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.271108][ T9028] pim6reg1: entered promiscuous mode [ 99.276537][ T9028] pim6reg1: entered allmulticast mode [ 99.320318][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.415684][ T9057] loop1: detected capacity change from 0 to 512 [ 99.431065][ T9057] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.443917][ T9057] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 99.461046][ T9060] pim6reg1: entered promiscuous mode [ 99.466592][ T9060] pim6reg1: entered allmulticast mode [ 99.561928][ T9080] wireguard0: entered promiscuous mode [ 99.567589][ T9080] wireguard0: entered allmulticast mode [ 99.628982][ T9092] hub 6-0:1.0: USB hub found [ 99.637058][ T9092] hub 6-0:1.0: 8 ports detected [ 99.901053][ T9115] loop3: detected capacity change from 0 to 8192 [ 99.968859][ T9134] __nla_validate_parse: 1 callbacks suppressed [ 99.968874][ T9134] netlink: 356 bytes leftover after parsing attributes in process `syz.6.1393'. [ 100.057310][ T9148] pim6reg1: entered promiscuous mode [ 100.062971][ T9148] pim6reg1: entered allmulticast mode [ 100.223123][ T9161] loop3: detected capacity change from 0 to 8192 [ 100.325056][ T9195] pim6reg1: entered promiscuous mode [ 100.330293][ T9202] netlink: 'syz.0.1416': attribute type 11 has an invalid length. [ 100.330524][ T9195] pim6reg1: entered allmulticast mode [ 100.355876][ T9193] pim6reg1: entered promiscuous mode [ 100.361395][ T9193] pim6reg1: entered allmulticast mode [ 100.431599][ T9202] hub 9-0:1.0: USB hub found [ 100.436445][ T9202] hub 9-0:1.0: 8 ports detected [ 100.541279][ T9225] sch_fq: defrate 4294967295 ignored. [ 100.553438][ T9222] loop4: detected capacity change from 0 to 8192 [ 100.672419][ T9243] pim6reg1: entered promiscuous mode [ 100.677758][ T9243] pim6reg1: entered allmulticast mode [ 100.724476][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1430'. [ 100.733540][ T9249] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1430'. [ 100.789111][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1433'. [ 100.800974][ T9261] SELinux: Context is not valid (left unmapped). [ 100.818710][ T9259] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1433'. [ 100.848665][ T9263] netlink: '+}[@': attribute type 21 has an invalid length. [ 100.856863][ T9263] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 100.924610][ T9267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.957542][ T9267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.088050][ T9273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.095339][ T9273] IPv6: NLM_F_CREATE should be set when creating new route [ 101.149398][ T9278] pim6reg1: entered promiscuous mode [ 101.154993][ T9278] pim6reg1: entered allmulticast mode [ 101.258623][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1444'. [ 101.267721][ T9290] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1444'. [ 101.335284][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1447'. [ 101.354140][ T9298] pim6reg1: entered promiscuous mode [ 101.359516][ T9298] pim6reg1: entered allmulticast mode [ 101.367616][ T9296] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1447'. [ 101.505775][ T9316] pim6reg1: entered promiscuous mode [ 101.511205][ T9316] pim6reg1: entered allmulticast mode [ 101.680876][ T9332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=9332 comm=syz.6.1456 [ 101.788601][ T9336] IPv6: Can't replace route, no match found [ 101.811046][ T9338] tipc: Enabling of bearer rejected, failed to enable media [ 101.990373][ T9344] pim6reg1: entered promiscuous mode [ 101.995835][ T9344] pim6reg1: entered allmulticast mode [ 102.417107][ T9367] loop6: detected capacity change from 0 to 8192 [ 102.581221][ T9381] sch_fq: defrate 4294967295 ignored. [ 102.616261][ T9384] netlink: 'syz.6.1471': attribute type 11 has an invalid length. [ 102.677328][ T9389] loop1: detected capacity change from 0 to 8192 [ 102.702016][ T9387] loop0: detected capacity change from 0 to 8192 [ 102.720461][ T9399] pim6reg1: entered promiscuous mode [ 102.725898][ T9399] pim6reg1: entered allmulticast mode [ 102.742667][ T9384] hub 9-0:1.0: USB hub found [ 102.747416][ T9384] hub 9-0:1.0: 8 ports detected [ 102.856932][ T9416] loop0: detected capacity change from 0 to 8192 [ 102.976278][ T29] kauditd_printk_skb: 949 callbacks suppressed [ 102.976296][ T29] audit: type=1326 audit(2000000022.111:7097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f44e9a9 code=0x7ffc0000 [ 103.014900][ T29] audit: type=1326 audit(2000000022.141:7098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f426f44e9a9 code=0x7ffc0000 [ 103.038297][ T29] audit: type=1326 audit(2000000022.141:7099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f44e9a9 code=0x7ffc0000 [ 103.061815][ T29] audit: type=1326 audit(2000000022.141:7100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f44e9a9 code=0x7ffc0000 [ 103.085531][ T29] audit: type=1326 audit(2000000022.141:7101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f426f44e9a9 code=0x7ffc0000 [ 103.109150][ T29] audit: type=1326 audit(2000000022.141:7102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f44e9a9 code=0x7ffc0000 [ 103.132627][ T29] audit: type=1326 audit(2000000022.141:7103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f44e9a9 code=0x7ffc0000 [ 103.156048][ T29] audit: type=1326 audit(2000000022.141:7104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f426f44e9a9 code=0x7ffc0000 [ 103.165351][ T9450] netlink: 'syz.4.1490': attribute type 11 has an invalid length. [ 103.179676][ T29] audit: type=1400 audit(2000000022.141:7105): avc: denied { create } for pid=9433 comm="syz.1.1486" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.189450][ T9445] loop1: detected capacity change from 0 to 1024 [ 103.208464][ T29] audit: type=1326 audit(2000000022.141:7106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f44e9a9 code=0x7ffc0000 [ 103.264563][ T9445] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.313566][ T9445] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.1486: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.372962][ T9450] hub 9-0:1.0: USB hub found [ 103.379029][ T9450] hub 9-0:1.0: 8 ports detected [ 103.427684][ T9445] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1486: Failed to acquire dquot type 0 [ 103.462458][ T9445] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.1486: Freeing blocks not in datazone - block = 0, count = 4096 [ 103.504875][ T9445] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1486: Invalid inode bitmap blk 0 in block_group 0 [ 103.520257][ T9476] pim6reg1: entered promiscuous mode [ 103.525663][ T9476] pim6reg1: entered allmulticast mode [ 103.531861][ T122] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.548632][ T9445] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 103.550276][ T122] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 103.571887][ T9445] EXT4-fs (loop1): 1 orphan inode deleted [ 103.577838][ T9483] loop6: detected capacity change from 0 to 512 [ 103.578276][ T9445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.586949][ T9483] ext3: Unknown parameter 'smackfsroot' [ 103.632017][ T9445] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.689577][ T9493] hub 6-0:1.0: USB hub found [ 103.699475][ T9493] hub 6-0:1.0: 8 ports detected [ 103.732202][ T9445] loop1: detected capacity change from 0 to 2048 [ 103.764057][ T9445] Alternate GPT is invalid, using primary GPT. [ 103.770622][ T9445] loop1: p1 p2 p3 [ 103.834833][ T9520] loop1: detected capacity change from 0 to 1024 [ 103.846800][ T9520] EXT4-fs: Ignoring removed orlov option [ 103.866850][ T9522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.881902][ T9522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.898482][ T9520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.928823][ T9520] netlink: 'syz.1.1509': attribute type 15 has an invalid length. [ 103.953451][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.980644][ T9541] sch_fq: defrate 4294967295 ignored. [ 104.153736][ T9560] hub 6-0:1.0: USB hub found [ 104.176094][ T9560] hub 6-0:1.0: 8 ports detected [ 104.183068][ T9567] loop6: detected capacity change from 0 to 2048 [ 104.246278][ T9567] loop6: p1 < > p4 [ 104.263101][ T9567] loop6: p4 size 8388608 extends beyond EOD, truncated [ 104.317156][ T9567] Invalid ELF header magic: != ELF [ 104.337357][ T9610] $H: renamed from bond0 (while UP) [ 104.346169][ T9610] $H: entered promiscuous mode [ 104.351334][ T9610] bond_slave_0: entered promiscuous mode [ 104.357179][ T9610] bond_slave_1: entered promiscuous mode [ 104.367831][ T9608] hub 6-0:1.0: USB hub found [ 104.372678][ T9608] hub 6-0:1.0: 8 ports detected [ 104.575639][ T9630] hub 6-0:1.0: USB hub found [ 104.580501][ T9630] hub 6-0:1.0: 8 ports detected [ 104.680784][ T9645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.689419][ T9645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.701133][ T9647] team0 (unregistering): Port device team_slave_0 removed [ 104.710615][ T9647] team0 (unregistering): Port device team_slave_1 removed [ 104.977064][ T9684] loop3: detected capacity change from 0 to 8192 [ 105.044532][ T9693] hub 6-0:1.0: USB hub found [ 105.049338][ T9693] hub 6-0:1.0: 8 ports detected [ 105.075570][ T9701] __nla_validate_parse: 7 callbacks suppressed [ 105.075621][ T9701] netlink: 332 bytes leftover after parsing attributes in process `syz.6.1545'. [ 105.078586][ T9700] pim6reg1: entered promiscuous mode [ 105.096349][ T9700] pim6reg1: entered allmulticast mode [ 105.195295][ T9713] $H: renamed from bond0 (while UP) [ 105.213400][ T9713] $H: entered promiscuous mode [ 105.218487][ T9713] bond_slave_0: entered promiscuous mode [ 105.224374][ T9713] bond_slave_1: entered promiscuous mode [ 105.236227][ T9712] loop3: detected capacity change from 0 to 8192 [ 105.276980][ T9716] pim6reg1: entered promiscuous mode [ 105.282380][ T9716] pim6reg1: entered allmulticast mode [ 105.328201][ T9734] pim6reg1: entered promiscuous mode [ 105.333764][ T9734] pim6reg1: entered allmulticast mode [ 105.383552][ T9727] loop1: detected capacity change from 0 to 8192 [ 105.459606][ T9757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.463159][ T9752] pim6reg1: entered promiscuous mode [ 105.473347][ T9752] pim6reg1: entered allmulticast mode [ 105.490239][ T9756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.504635][ T9756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.512775][ T9757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.710919][ T9783] pim6reg1: entered promiscuous mode [ 105.716294][ T9783] pim6reg1: entered allmulticast mode [ 105.768834][ T9789] loop3: detected capacity change from 0 to 8192 [ 105.829031][ T9796] pim6reg1: entered promiscuous mode [ 105.834491][ T9796] pim6reg1: entered allmulticast mode [ 105.908012][ T9804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.917158][ T9804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.009384][ T9811] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1575'. [ 106.083173][ T9815] loop3: detected capacity change from 0 to 512 [ 106.090561][ T9815] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.101103][ T9815] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 106.155948][ T9722] syz.6.1551 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 106.170271][ T9722] CPU: 0 UID: 0 PID: 9722 Comm: syz.6.1551 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 106.170311][ T9722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.170329][ T9722] Call Trace: [ 106.170338][ T9722] [ 106.170357][ T9722] __dump_stack+0x1d/0x30 [ 106.170383][ T9722] dump_stack_lvl+0xe8/0x140 [ 106.170471][ T9722] dump_stack+0x15/0x1b [ 106.170493][ T9722] dump_header+0x81/0x220 [ 106.170584][ T9722] oom_kill_process+0x342/0x400 [ 106.170612][ T9722] out_of_memory+0x979/0xb80 [ 106.170637][ T9722] try_charge_memcg+0x5e6/0x9e0 [ 106.170685][ T9722] obj_cgroup_charge_pages+0xa6/0x150 [ 106.170763][ T9722] __memcg_kmem_charge_page+0x9f/0x170 [ 106.170792][ T9722] __alloc_frozen_pages_noprof+0x188/0x360 [ 106.170907][ T9722] alloc_pages_mpol+0xb3/0x250 [ 106.170941][ T9722] alloc_pages_noprof+0x90/0x130 [ 106.171031][ T9722] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 106.171078][ T9722] __kvmalloc_node_noprof+0x30f/0x4e0 [ 106.171102][ T9722] ? ip_set_alloc+0x1f/0x30 [ 106.171166][ T9722] ? ip_set_alloc+0x1f/0x30 [ 106.171200][ T9722] ? hash_netiface_create+0x21b/0x740 [ 106.171256][ T9722] ? __kmalloc_cache_noprof+0x189/0x320 [ 106.171286][ T9722] ip_set_alloc+0x1f/0x30 [ 106.171372][ T9722] hash_netiface_create+0x282/0x740 [ 106.171482][ T9722] ? __pfx_hash_netiface_create+0x10/0x10 [ 106.171518][ T9722] ip_set_create+0x3cc/0x960 [ 106.171567][ T9722] ? __nla_parse+0x40/0x60 [ 106.171653][ T9722] nfnetlink_rcv_msg+0x4c6/0x590 [ 106.171723][ T9722] netlink_rcv_skb+0x123/0x220 [ 106.171797][ T9722] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 106.171837][ T9722] nfnetlink_rcv+0x16b/0x1690 [ 106.171870][ T9722] ? nlmon_xmit+0x4f/0x60 [ 106.171902][ T9722] ? consume_skb+0x49/0x150 [ 106.171980][ T9722] ? nlmon_xmit+0x4f/0x60 [ 106.172009][ T9722] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 106.172050][ T9722] ? __dev_queue_xmit+0x1200/0x2000 [ 106.172183][ T9722] ? __dev_queue_xmit+0x182/0x2000 [ 106.172225][ T9722] ? ref_tracker_free+0x37d/0x3e0 [ 106.172329][ T9722] ? __netlink_deliver_tap+0x4dc/0x500 [ 106.172371][ T9722] netlink_unicast+0x5bd/0x690 [ 106.172407][ T9722] netlink_sendmsg+0x58b/0x6b0 [ 106.172528][ T9722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.172570][ T9722] __sock_sendmsg+0x142/0x180 [ 106.172602][ T9722] ____sys_sendmsg+0x31e/0x4e0 [ 106.172649][ T9722] ___sys_sendmsg+0x17b/0x1d0 [ 106.172758][ T9722] __x64_sys_sendmsg+0xd4/0x160 [ 106.172798][ T9722] x64_sys_call+0x191e/0x2ff0 [ 106.172937][ T9722] do_syscall_64+0xd2/0x200 [ 106.173008][ T9722] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 106.173115][ T9722] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 106.173161][ T9722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.173185][ T9722] RIP: 0033:0x7fb329d5e9a9 [ 106.173205][ T9722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.173250][ T9722] RSP: 002b:00007fb3283bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.173333][ T9722] RAX: ffffffffffffffda RBX: 00007fb329f85fa0 RCX: 00007fb329d5e9a9 [ 106.173346][ T9722] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 106.173359][ T9722] RBP: 00007fb329de0d69 R08: 0000000000000000 R09: 0000000000000000 [ 106.173372][ T9722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.173384][ T9722] R13: 0000000000000000 R14: 00007fb329f85fa0 R15: 00007fffff668e48 [ 106.173406][ T9722] [ 106.510191][ T9722] memory: usage 307200kB, limit 307200kB, failcnt 166 [ 106.517131][ T9722] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 106.525113][ T9722] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 106.532457][ T9722] Memory cgroup stats for /syz6: [ 106.533021][ T9722] cache 0 [ 106.540938][ T9722] rss 0 [ 106.543769][ T9722] shmem 0 [ 106.546710][ T9722] mapped_file 0 [ 106.550181][ T9722] dirty 0 [ 106.553196][ T9722] writeback 0 [ 106.556767][ T9722] workingset_refault_anon 39 [ 106.561410][ T9722] workingset_refault_file 0 [ 106.565975][ T9722] swap 208896 [ 106.569338][ T9722] swapcached 0 [ 106.572868][ T9722] pgpgin 57537 [ 106.576286][ T9722] pgpgout 57537 [ 106.579756][ T9722] pgfault 96984 [ 106.583254][ T9722] pgmajfault 42 [ 106.586724][ T9722] inactive_anon 0 [ 106.590363][ T9722] active_anon 0 [ 106.593923][ T9722] inactive_file 0 [ 106.597570][ T9722] active_file 0 [ 106.601095][ T9722] unevictable 0 [ 106.604742][ T9722] hierarchical_memory_limit 314572800 [ 106.610131][ T9722] hierarchical_memsw_limit 9223372036854771712 [ 106.616430][ T9722] total_cache 0 [ 106.619926][ T9722] total_rss 0 [ 106.623267][ T9722] total_shmem 0 [ 106.626739][ T9722] total_mapped_file 0 [ 106.630734][ T9722] total_dirty 0 [ 106.634553][ T9722] total_writeback 0 [ 106.638380][ T9722] total_workingset_refault_anon 39 [ 106.643786][ T9722] total_workingset_refault_file 0 [ 106.648828][ T9722] total_swap 208896 [ 106.652660][ T9722] total_swapcached 0 [ 106.656568][ T9722] total_pgpgin 57537 [ 106.660517][ T9722] total_pgpgout 57537 [ 106.664548][ T9722] total_pgfault 96984 [ 106.668533][ T9722] total_pgmajfault 42 [ 106.672624][ T9722] total_inactive_anon 0 [ 106.676822][ T9722] total_active_anon 0 [ 106.680818][ T9722] total_inactive_file 0 [ 106.685026][ T9722] total_active_file 0 [ 106.689032][ T9722] total_unevictable 0 [ 106.693099][ T9722] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1551,pid=9717,uid=0 [ 106.707834][ T9722] Memory cgroup out of memory: Killed process 9717 (syz.6.1551) total-vm:93760kB, anon-rss:944kB, file-rss:22492kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 106.888925][ T9835] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1583'. [ 106.898167][ T9835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1583'. [ 106.908115][ T9835] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1583'. [ 106.997617][ T9851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.006837][ T9851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.067756][ T9863] pim6reg1: entered promiscuous mode [ 107.073266][ T9863] pim6reg1: entered allmulticast mode [ 107.131477][ T9870] sch_fq: defrate 4294967295 ignored. [ 107.240560][ T9875] loop6: detected capacity change from 0 to 512 [ 107.267007][ T9877] pim6reg1: entered promiscuous mode [ 107.273082][ T9877] pim6reg1: entered allmulticast mode [ 107.278917][ T9875] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 107.309655][ T9875] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 107.431753][ T9900] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1601'. [ 107.477540][ T9904] sch_fq: defrate 4294967295 ignored. [ 109.527521][ T9918] loop3: detected capacity change from 0 to 512 [ 109.773756][ T9918] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.797273][ T9918] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 109.846051][ T9931] pim6reg1: entered promiscuous mode [ 109.851470][ T9931] pim6reg1: entered allmulticast mode [ 110.002173][ T9936] pim6reg1: entered promiscuous mode [ 110.007595][ T9936] pim6reg1: entered allmulticast mode [ 110.193391][ T9952] Invalid ELF header magic: != ELF [ 110.252650][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 110.252668][ T29] audit: type=1326 audit(2000000029.391:7484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 110.403957][ T29] audit: type=1326 audit(2000000029.421:7485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 110.426966][ T29] audit: type=1326 audit(2000000029.421:7486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 110.449880][ T29] audit: type=1326 audit(2000000029.421:7487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 110.472645][ T29] audit: type=1326 audit(2000000029.421:7488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 110.495362][ T29] audit: type=1326 audit(2000000029.421:7489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 110.518060][ T29] audit: type=1326 audit(2000000029.421:7490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 110.540789][ T29] audit: type=1326 audit(2000000029.421:7491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 110.563569][ T29] audit: type=1326 audit(2000000029.421:7492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 110.586306][ T29] audit: type=1326 audit(2000000029.421:7493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 110.808884][ T9982] loop1: detected capacity change from 0 to 512 [ 110.842758][ T9982] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 110.863774][ T9982] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 110.967159][T10001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.979372][T10001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.081349][ T9995] loop6: detected capacity change from 0 to 8192 [ 111.226559][T10022] pim6reg1: entered promiscuous mode [ 111.231997][T10022] pim6reg1: entered allmulticast mode [ 111.246031][T10019] loop0: detected capacity change from 0 to 512 [ 111.254081][T10019] EXT4-fs: dax option not supported [ 111.282414][T10019] loop0: detected capacity change from 0 to 4096 [ 111.306701][T10019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.325993][T10036] loop6: detected capacity change from 0 to 512 [ 111.341510][T10037] pim6reg1: entered promiscuous mode [ 111.346886][T10037] pim6reg1: entered allmulticast mode [ 111.347815][T10036] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 111.363243][T10036] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 111.372537][T10019] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 111.417269][T10046] pim6reg1: entered promiscuous mode [ 111.422832][T10046] pim6reg1: entered allmulticast mode [ 111.445878][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.693483][T10064] loop0: detected capacity change from 0 to 8192 [ 111.730566][T10078] FAULT_INJECTION: forcing a failure. [ 111.730566][T10078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.743740][T10078] CPU: 1 UID: 0 PID: 10078 Comm: syz.6.1650 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 111.743842][T10078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.743859][T10078] Call Trace: [ 111.743867][T10078] [ 111.743906][T10078] __dump_stack+0x1d/0x30 [ 111.743933][T10078] dump_stack_lvl+0xe8/0x140 [ 111.744004][T10078] dump_stack+0x15/0x1b [ 111.744024][T10078] should_fail_ex+0x265/0x280 [ 111.744049][T10078] should_fail+0xb/0x20 [ 111.744069][T10078] should_fail_usercopy+0x1a/0x20 [ 111.744095][T10078] _copy_from_iter+0xcf/0xe40 [ 111.744181][T10078] ? __build_skb_around+0x1a0/0x200 [ 111.744239][T10078] ? __alloc_skb+0x223/0x320 [ 111.744263][T10078] ? skb_set_owner_w+0x16a/0x1c0 [ 111.744324][T10078] pppol2tp_sendmsg+0x2f8/0x440 [ 111.744366][T10078] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 111.744405][T10078] __sock_sendmsg+0x142/0x180 [ 111.744507][T10078] sock_write_iter+0x165/0x1b0 [ 111.744549][T10078] do_iter_readv_writev+0x41e/0x4c0 [ 111.744582][T10078] vfs_writev+0x2df/0x8b0 [ 111.744637][T10078] do_writev+0xe7/0x210 [ 111.744742][T10078] __x64_sys_writev+0x45/0x50 [ 111.744773][T10078] x64_sys_call+0x1e9a/0x2ff0 [ 111.744800][T10078] do_syscall_64+0xd2/0x200 [ 111.744897][T10078] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 111.745003][T10078] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 111.745036][T10078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.745057][T10078] RIP: 0033:0x7fb329d5e9a9 [ 111.745117][T10078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.745138][T10078] RSP: 002b:00007fb3283bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 111.745157][T10078] RAX: ffffffffffffffda RBX: 00007fb329f85fa0 RCX: 00007fb329d5e9a9 [ 111.745225][T10078] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000006 [ 111.745240][T10078] RBP: 00007fb3283bf090 R08: 0000000000000000 R09: 0000000000000000 [ 111.745256][T10078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.745271][T10078] R13: 0000000000000000 R14: 00007fb329f85fa0 R15: 00007fffff668e48 [ 111.745297][T10078] [ 111.783203][T10083] loop1: detected capacity change from 0 to 512 [ 111.844273][T10082] sch_fq: defrate 4294967295 ignored. [ 111.881948][T10083] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.010417][T10083] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 112.117776][T10120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.127066][T10120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.688408][T10158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10158 comm=syz.6.1674 [ 112.703430][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1674'. [ 112.737472][T10162] pim6reg1: entered promiscuous mode [ 112.742861][T10162] pim6reg1: entered allmulticast mode [ 112.949098][T10184] sch_fq: defrate 4294967295 ignored. [ 113.209726][T10213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.244195][T10213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.263092][T10216] pim6reg1: entered promiscuous mode [ 113.268435][T10216] pim6reg1: entered allmulticast mode [ 113.800700][T10241] sch_fq: defrate 4294967295 ignored. [ 113.981019][T10268] netlink: 'syz.4.1703': attribute type 11 has an invalid length. [ 114.070625][T10268] hub 9-0:1.0: USB hub found [ 114.075365][T10268] hub 9-0:1.0: 8 ports detected [ 114.138260][T10282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.147331][T10282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.207773][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1711'. [ 114.244456][T10290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.251933][T10290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.293878][T10290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.301430][T10290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.364415][T10305] loop6: detected capacity change from 0 to 512 [ 114.374438][T10305] journal_path: Non-blockdev passed as './bus' [ 114.380664][T10305] EXT4-fs: error: could not find journal device path [ 114.418081][T10310] pim6reg1: entered promiscuous mode [ 114.423488][T10310] pim6reg1: entered allmulticast mode [ 114.530037][T10322] netlink: 'syz.6.1719': attribute type 11 has an invalid length. [ 114.541596][T10320] loop4: detected capacity change from 0 to 512 [ 114.548135][T10320] ext4: Unknown parameter '.' [ 114.624206][T10332] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1722'. [ 114.637640][T10322] hub 9-0:1.0: USB hub found [ 114.643797][T10322] hub 9-0:1.0: 8 ports detected [ 114.650646][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'. [ 114.675224][T10332] bridge0: entered promiscuous mode [ 114.694881][T10332] bridge0: port 3(macvlan2) entered blocking state [ 114.701539][T10332] bridge0: port 3(macvlan2) entered disabled state [ 114.740034][T10332] macvlan2: entered allmulticast mode [ 114.745543][T10332] bridge0: entered allmulticast mode [ 114.762522][T10332] macvlan2: left allmulticast mode [ 114.767702][T10332] bridge0: left allmulticast mode [ 114.773615][T10332] bridge0: left promiscuous mode [ 114.891946][T10360] FAULT_INJECTION: forcing a failure. [ 114.891946][T10360] name failslab, interval 1, probability 0, space 0, times 0 [ 114.904626][T10360] CPU: 0 UID: 0 PID: 10360 Comm: syz.0.1730 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 114.904662][T10360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.904674][T10360] Call Trace: [ 114.904680][T10360] [ 114.904736][T10360] __dump_stack+0x1d/0x30 [ 114.904759][T10360] dump_stack_lvl+0xe8/0x140 [ 114.904803][T10360] dump_stack+0x15/0x1b [ 114.904822][T10360] should_fail_ex+0x265/0x280 [ 114.904900][T10360] should_failslab+0x8c/0xb0 [ 114.904940][T10360] kmem_cache_alloc_noprof+0x50/0x310 [ 114.904961][T10360] ? skb_clone+0x151/0x1f0 [ 114.905012][T10360] skb_clone+0x151/0x1f0 [ 114.905043][T10360] dev_queue_xmit_nit+0x146/0x680 [ 114.905072][T10360] dev_hard_start_xmit+0xd3/0x3e0 [ 114.905155][T10360] ? validate_xmit_skb+0x746/0x910 [ 114.905189][T10360] __dev_queue_xmit+0x10f9/0x2000 [ 114.905229][T10360] ? __dev_queue_xmit+0x182/0x2000 [ 114.905276][T10360] ? __htab_map_lookup_elem+0x148/0x150 [ 114.905380][T10360] ? __skb_clone+0x2a6/0x2d0 [ 114.905422][T10360] __netlink_deliver_tap+0x3c3/0x500 [ 114.905486][T10360] netlink_unicast+0x66b/0x690 [ 114.905516][T10360] netlink_sendmsg+0x58b/0x6b0 [ 114.905580][T10360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.905614][T10360] __sock_sendmsg+0x142/0x180 [ 114.905636][T10360] ____sys_sendmsg+0x345/0x4e0 [ 114.905726][T10360] ___sys_sendmsg+0x17b/0x1d0 [ 114.905832][T10360] __sys_sendmmsg+0x178/0x300 [ 114.905902][T10360] __x64_sys_sendmmsg+0x57/0x70 [ 114.905943][T10360] x64_sys_call+0x1c4a/0x2ff0 [ 114.905970][T10360] do_syscall_64+0xd2/0x200 [ 114.905997][T10360] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 114.906161][T10360] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 114.906197][T10360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.906225][T10360] RIP: 0033:0x7fa58e7ce9a9 [ 114.906244][T10360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.906262][T10360] RSP: 002b:00007fa58ce37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 114.906333][T10360] RAX: ffffffffffffffda RBX: 00007fa58e9f5fa0 RCX: 00007fa58e7ce9a9 [ 114.906350][T10360] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 114.906366][T10360] RBP: 00007fa58ce37090 R08: 0000000000000000 R09: 0000000000000000 [ 114.906381][T10360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.906397][T10360] R13: 0000000000000000 R14: 00007fa58e9f5fa0 R15: 00007ffebb4f0a08 [ 114.906422][T10360] [ 114.909989][T10360] vlan2: entered allmulticast mode [ 115.073347][T10366] FAULT_INJECTION: forcing a failure. [ 115.073347][T10366] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 115.077067][T10360] syz_tun: entered allmulticast mode [ 115.083056][T10366] CPU: 1 UID: 0 PID: 10366 Comm: syz.6.1728 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 115.083096][T10366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.083113][T10366] Call Trace: [ 115.083125][T10366] [ 115.083136][T10366] __dump_stack+0x1d/0x30 [ 115.083178][T10366] dump_stack_lvl+0xe8/0x140 [ 115.083230][T10366] dump_stack+0x15/0x1b [ 115.083252][T10366] should_fail_ex+0x265/0x280 [ 115.083280][T10366] should_fail_alloc_page+0xf2/0x100 [ 115.083334][T10366] __alloc_frozen_pages_noprof+0xff/0x360 [ 115.083376][T10366] alloc_pages_mpol+0xb3/0x250 [ 115.083406][T10366] vma_alloc_folio_noprof+0x1aa/0x300 [ 115.083441][T10366] do_wp_page+0x673/0x2400 [ 115.083546][T10366] ? __rcu_read_lock+0x37/0x50 [ 115.083582][T10366] handle_mm_fault+0x77d/0x2c20 [ 115.083622][T10366] ? mas_walk+0xf2/0x120 [ 115.083657][T10366] do_user_addr_fault+0x636/0x1090 [ 115.083720][T10366] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 115.083765][T10366] exc_page_fault+0x62/0xa0 [ 115.083885][T10366] asm_exc_page_fault+0x26/0x30 [ 115.083945][T10366] RIP: 0033:0x7fb329c20ca3 [ 115.084040][T10366] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 115.084066][T10366] RSP: 002b:00007fb32837c4a0 EFLAGS: 00010202 [ 115.084086][T10366] RAX: 0000000000000400 RBX: 00007fb32837c540 RCX: 00007fb31ff5d000 [ 115.084104][T10366] RDX: 00007fb32837c6e0 RSI: 0000000000000009 RDI: 00007fb32837c5e0 [ 115.084121][T10366] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a8 [ 115.084136][T10366] R10: 00000000000000be R11: 00007fb32837c540 R12: 0000000000000001 [ 115.084147][T10366] R13: 00007fb329dfc880 R14: 0000000000000020 R15: 00007fb32837c5e0 [ 115.084172][T10366] [ 115.084217][T10366] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 115.375681][T10366] loop6: detected capacity change from 0 to 512 [ 115.382808][T10366] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.392356][T10366] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 115.417794][T10366] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.1728: invalid block [ 115.432997][T10377] sch_fq: defrate 4294967295 ignored. [ 115.456529][T10366] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1728: invalid indirect mapped block 4294967295 (level 1) [ 115.500580][T10366] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1728: invalid indirect mapped block 4294967295 (level 1) [ 115.539621][T10366] EXT4-fs (loop6): 2 truncates cleaned up [ 115.556399][T10366] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.572106][ T29] kauditd_printk_skb: 563 callbacks suppressed [ 115.572123][ T29] audit: type=1326 audit(2000000034.711:8057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.6.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb329d5e9a9 code=0x7ffc0000 [ 115.602095][ T29] audit: type=1326 audit(2000000034.711:8058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.6.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fb329d5e9a9 code=0x7ffc0000 [ 115.625542][ T29] audit: type=1326 audit(2000000034.711:8059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.6.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb329d5e9a9 code=0x7ffc0000 [ 115.649125][ T29] audit: type=1326 audit(2000000034.711:8060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.6.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fb329d5e9a9 code=0x7ffc0000 [ 115.672646][ T29] audit: type=1326 audit(2000000034.711:8061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.6.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb329d5e9a9 code=0x7ffc0000 [ 115.696260][ T29] audit: type=1326 audit(2000000034.711:8062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.6.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb329d5e9a9 code=0x7ffc0000 [ 115.719841][ T29] audit: type=1326 audit(2000000034.791:8063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10280 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 115.743481][ T29] audit: type=1326 audit(2000000034.791:8064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10280 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 115.767254][ T29] audit: type=1326 audit(2000000034.841:8065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10383 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58e7ce9a9 code=0x7ffc0000 [ 115.768225][ T3939] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.790170][ T29] audit: type=1326 audit(2000000034.841:8066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10383 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58e7ce9a9 code=0x7ffc0000 [ 115.879251][T10394] netlink: 'syz.4.1736': attribute type 11 has an invalid length. [ 115.963502][T10394] hub 9-0:1.0: USB hub found [ 115.968467][T10394] hub 9-0:1.0: 8 ports detected [ 116.102989][T10414] hub 9-0:1.0: USB hub found [ 116.109612][T10415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.124361][T10414] hub 9-0:1.0: 8 ports detected [ 116.128167][T10415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.217820][T10424] netlink: 'syz.0.1745': attribute type 11 has an invalid length. [ 116.271870][T10427] pim6reg1: entered promiscuous mode [ 116.274835][T10424] hub 9-0:1.0: USB hub found [ 116.277235][T10427] pim6reg1: entered allmulticast mode [ 116.283264][T10424] hub 9-0:1.0: 8 ports detected [ 116.362712][T10438] hsr_slave_0: left promiscuous mode [ 116.379753][T10438] hsr_slave_1: left promiscuous mode [ 116.743811][T10467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.766021][T10467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.782418][T10471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.791893][T10471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.033093][T10476] netlink: 'syz.0.1759': attribute type 11 has an invalid length. [ 117.088300][T10476] hub 9-0:1.0: USB hub found [ 117.093180][T10476] hub 9-0:1.0: 8 ports detected [ 117.232394][T10483] loop0: detected capacity change from 0 to 512 [ 117.239564][T10483] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 117.252705][T10483] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 117.287316][T10490] $H: renamed from bond0 (while UP) [ 117.296924][T10490] $H: entered promiscuous mode [ 117.302176][T10490] bond_slave_0: entered promiscuous mode [ 117.307974][T10490] bond_slave_1: entered promiscuous mode [ 117.336258][T10490] dummy0: entered promiscuous mode [ 117.406363][T10504] netlink: 'syz.3.1768': attribute type 11 has an invalid length. [ 117.491597][T10504] hub 9-0:1.0: USB hub found [ 117.496427][T10504] hub 9-0:1.0: 8 ports detected [ 117.586564][T10520] pim6reg1: entered promiscuous mode [ 117.592059][T10520] pim6reg1: entered allmulticast mode [ 117.603238][T10522] loop3: detected capacity change from 0 to 512 [ 117.635212][T10522] loop3: detected capacity change from 0 to 1024 [ 117.681430][T10522] EXT4-fs: test_dummy_encryption option not supported [ 117.722592][T10522] lo: entered promiscuous mode [ 117.729333][T10522] tunl0: entered promiscuous mode [ 117.736586][T10522] gre0: entered promiscuous mode [ 117.757360][T10522] gretap0: entered promiscuous mode [ 117.778028][T10522] erspan0: entered promiscuous mode [ 117.795981][T10522] ip_vti0: entered promiscuous mode [ 117.811209][T10522] ip6_vti0: entered promiscuous mode [ 117.832904][T10522] sit0: entered promiscuous mode [ 117.843757][T10522] ip6tnl0: entered promiscuous mode [ 117.854809][T10522] ip6gre0: entered promiscuous mode [ 117.872887][T10522] syz_tun: entered promiscuous mode [ 117.895511][T10522] ip6gretap0: entered promiscuous mode [ 117.912759][T10522] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.920151][T10522] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.944023][T10522] bridge0: entered promiscuous mode [ 117.959179][T10522] vcan0: entered promiscuous mode [ 117.974153][T10522] dummy0: entered promiscuous mode [ 117.992504][T10522] nlmon0: entered promiscuous mode [ 117.999318][T10522] caif0: entered promiscuous mode [ 118.010549][T10522] batadv0: entered promiscuous mode [ 118.028681][T10522] vxcan0: entered promiscuous mode [ 118.039392][T10522] vxcan1: entered promiscuous mode [ 118.053259][T10522] veth0: entered promiscuous mode [ 118.062480][T10522] veth1: entered promiscuous mode [ 118.085654][T10522] wg0: entered promiscuous mode [ 118.100572][T10522] wg1: entered promiscuous mode [ 118.118139][T10522] wg2: left allmulticast mode [ 118.128100][T10522] veth0_to_bridge: entered promiscuous mode [ 118.129037][T10501] syz.1.1769 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 118.145091][T10501] CPU: 0 UID: 0 PID: 10501 Comm: syz.1.1769 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 118.145127][T10501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.145143][T10501] Call Trace: [ 118.145138][T10522] veth1_to_bridge: entered promiscuous mode [ 118.145150][T10501] [ 118.145161][T10501] __dump_stack+0x1d/0x30 [ 118.145202][T10501] dump_stack_lvl+0xe8/0x140 [ 118.145244][T10501] dump_stack+0x15/0x1b [ 118.145267][T10501] dump_header+0x81/0x220 [ 118.145314][T10501] oom_kill_process+0x342/0x400 [ 118.145414][T10501] out_of_memory+0x979/0xb80 [ 118.145449][T10501] try_charge_memcg+0x5e6/0x9e0 [ 118.145501][T10501] charge_memcg+0x51/0xc0 [ 118.145534][T10501] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 118.145582][T10501] __read_swap_cache_async+0x1df/0x350 [ 118.145649][T10501] swap_cluster_readahead+0x376/0x3e0 [ 118.145692][T10501] swapin_readahead+0xde/0x6f0 [ 118.145777][T10501] ? __filemap_get_folio+0x4f7/0x6b0 [ 118.145809][T10501] ? __rcu_read_unlock+0x34/0x70 [ 118.145886][T10501] ? swap_cache_get_folio+0x77/0x200 [ 118.145920][T10501] do_swap_page+0x301/0x2430 [ 118.145960][T10501] ? css_rstat_updated+0xcd/0x5b0 [ 118.146124][T10501] ? __pfx_default_wake_function+0x10/0x10 [ 118.146161][T10501] handle_mm_fault+0x9a5/0x2c20 [ 118.146211][T10501] ? mas_walk+0xf2/0x120 [ 118.146320][T10501] do_user_addr_fault+0x636/0x1090 [ 118.146371][T10501] exc_page_fault+0x62/0xa0 [ 118.146448][T10501] asm_exc_page_fault+0x26/0x30 [ 118.146520][T10501] RIP: 0033:0x7f426f481213 [ 118.146538][T10501] Code: e7 08 00 48 8d 3d 76 e7 08 00 e8 e8 48 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 1e 63 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 118.146564][T10501] RSP: 002b:00007ffed87a3a08 EFLAGS: 00010293 [ 118.146585][T10501] RAX: 00000000fffffffa RBX: 00007f426f675fa0 RCX: 0000000000000000 [ 118.146602][T10501] RDX: 00007ffed87a3a20 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.146619][T10501] RBP: 00007f426f677ba0 R08: 000000000353c04b R09: 7fffffffffffffff [ 118.146637][T10501] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001cdc4 [ 118.146653][T10501] R13: 00007f426f676080 R14: ffffffffffffffff R15: 00007ffed87a3b60 [ 118.146717][T10501] [ 118.146726][T10501] memory: usage 307200kB, limit 307200kB, failcnt 321 [ 118.164220][T10522] veth0_to_bond: entered promiscuous mode [ 118.167508][T10501] memory+swap: usage 307544kB, limit 9007199254740988kB, failcnt 0 [ 118.174997][T10522] veth1_to_bond: entered promiscuous mode [ 118.176742][T10501] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 118.176761][T10501] Memory cgroup stats for /syz1: [ 118.399119][T10501] cache 0 [ 118.407323][T10501] rss 0 [ 118.410486][T10501] shmem 0 [ 118.413639][T10501] mapped_file 0 [ 118.417208][T10501] dirty 0 [ 118.420162][T10501] writeback 0 [ 118.423537][T10501] workingset_refault_anon 36 [ 118.428136][T10501] workingset_refault_file 101 [ 118.432935][T10501] swap 352256 [ 118.436233][T10501] swapcached 0 [ 118.439676][T10501] pgpgin 60038 [ 118.443138][T10501] pgpgout 60038 [ 118.446608][T10501] pgfault 80418 [ 118.450072][T10501] pgmajfault 36 [ 118.453603][T10501] inactive_anon 0 [ 118.457234][T10501] active_anon 0 [ 118.460728][T10501] inactive_file 0 [ 118.464362][T10501] active_file 0 [ 118.467853][T10501] unevictable 0 [ 118.471384][T10501] hierarchical_memory_limit 314572800 [ 118.476904][T10501] hierarchical_memsw_limit 9223372036854771712 [ 118.483115][T10501] total_cache 0 [ 118.486582][T10501] total_rss 0 [ 118.489866][T10501] total_shmem 0 [ 118.490747][T10522] veth0_to_team: entered promiscuous mode [ 118.493389][T10501] total_mapped_file 0 [ 118.502362][T10522] team_slave_0: entered promiscuous mode [ 118.503143][T10501] total_dirty 0 [ 118.512541][T10501] total_writeback 0 [ 118.516358][T10501] total_workingset_refault_anon 36 [ 118.521514][T10501] total_workingset_refault_file 101 [ 118.526727][T10501] total_swap 352256 [ 118.530568][T10501] total_swapcached 0 [ 118.534691][T10501] total_pgpgin 60038 [ 118.538586][T10501] total_pgpgout 60038 [ 118.542609][T10501] total_pgfault 80418 [ 118.546603][T10501] total_pgmajfault 36 [ 118.550586][T10501] total_inactive_anon 0 [ 118.554814][T10501] total_active_anon 0 [ 118.558808][T10501] total_inactive_file 0 [ 118.563000][T10501] total_active_file 0 [ 118.567001][T10501] total_unevictable 0 [ 118.571040][T10501] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1769,pid=10501,uid=0 [ 118.585798][T10501] Memory cgroup out of memory: Killed process 10501 (syz.1.1769) total-vm:95808kB, anon-rss:944kB, file-rss:22336kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 118.603124][T10522] veth1_to_team: entered promiscuous mode [ 118.611533][T10522] team_slave_1: entered promiscuous mode [ 118.617558][T10522] veth0_to_batadv: entered promiscuous mode [ 118.638570][T10522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.650084][T10547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.657458][T10522] batadv_slave_0: entered promiscuous mode [ 118.658908][T10547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.675963][T10522] veth1_to_batadv: entered promiscuous mode [ 118.692592][T10522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.709228][T10522] batadv_slave_1: entered promiscuous mode [ 118.724737][T10522] xfrm0: entered promiscuous mode [ 118.740366][T10522] veth0_to_hsr: entered promiscuous mode [ 118.755390][T10522] hsr_slave_0: entered promiscuous mode [ 118.772403][T10522] veth1_to_hsr: entered promiscuous mode [ 118.789239][T10522] hsr_slave_1: entered promiscuous mode [ 118.796302][T10522] veth1_virt_wifi: entered promiscuous mode [ 118.803864][T10522] veth0_virt_wifi: entered promiscuous mode [ 118.817113][T10522] vlan0: entered promiscuous mode [ 118.822354][T10522] vlan1: entered promiscuous mode [ 118.833385][T10522] macvlan0: entered promiscuous mode [ 118.840083][T10522] macvlan1: entered promiscuous mode [ 118.846740][T10522] ipvlan0: entered promiscuous mode [ 118.852702][T10522] ipvlan1: entered promiscuous mode [ 118.865913][T10522] macvtap0: entered promiscuous mode [ 118.876856][T10522] macsec0: entered promiscuous mode [ 118.883848][T10522] geneve0: entered promiscuous mode [ 118.892330][T10522] geneve1: entered promiscuous mode [ 118.901461][T10522] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 118.912056][T10522] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 118.920997][T10522] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 118.929380][T10522] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 118.938176][T10522] gtp0: left allmulticast mode [ 118.943998][T10522] : entered promiscuous mode [ 118.949160][T10522] gtp1: left allmulticast mode [ 118.963966][ T4035] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.976224][ T4035] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.991900][T10553] pim6reg1: entered promiscuous mode [ 118.997261][T10553] pim6reg1: entered allmulticast mode [ 119.004673][ T4035] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.018632][ T4035] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.068020][T10572] netlink: 'syz.3.1783': attribute type 11 has an invalid length. [ 119.132994][T10572] hub 9-0:1.0: USB hub found [ 119.139208][T10572] hub 9-0:1.0: 8 ports detected [ 119.342986][T10605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.381593][T10605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.391135][T10609] loop4: detected capacity change from 0 to 256 [ 119.404392][T10609] FAT-fs (loop4): Directory bread(block 64) failed [ 119.413852][T10609] FAT-fs (loop4): Directory bread(block 65) failed [ 119.420413][T10609] FAT-fs (loop4): Directory bread(block 66) failed [ 119.427074][T10609] FAT-fs (loop4): Directory bread(block 67) failed [ 119.438945][T10609] FAT-fs (loop4): Directory bread(block 68) failed [ 119.460829][T10609] FAT-fs (loop4): Directory bread(block 69) failed [ 119.467409][T10609] FAT-fs (loop4): Directory bread(block 70) failed [ 119.476144][T10609] FAT-fs (loop4): Directory bread(block 71) failed [ 119.481907][T10615] pim6reg1: entered promiscuous mode [ 119.487986][T10615] pim6reg1: entered allmulticast mode [ 119.516109][T10609] FAT-fs (loop4): Directory bread(block 72) failed [ 119.533544][T10609] FAT-fs (loop4): Directory bread(block 73) failed [ 119.558610][T10609] syz.4.1794: attempt to access beyond end of device [ 119.558610][T10609] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 119.652489][T10630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.670941][T10630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.162841][T10646] loop3: detected capacity change from 0 to 1024 [ 120.189372][T10648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.200198][T10648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.226890][T10646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.250370][T10662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.259157][T10662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.271871][T10665] pim6reg1: entered promiscuous mode [ 120.277272][T10665] pim6reg1: entered allmulticast mode [ 120.296611][T10672] loop6: detected capacity change from 0 to 512 [ 120.312345][T10672] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.325141][T10672] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.339246][T10672] EXT4-fs error (device loop6): ext4_do_update_inode:5563: inode #2: comm syz.6.1810: corrupted inode contents [ 120.348029][T10676] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 120.352408][T10672] EXT4-fs error (device loop6): ext4_dirty_inode:6454: inode #2: comm syz.6.1810: mark_inode_dirty error [ 120.367593][T10676] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 120.380836][T10672] EXT4-fs error (device loop6): ext4_do_update_inode:5563: inode #2: comm syz.6.1810: corrupted inode contents [ 120.388789][T10676] EXT4-fs (loop3): This should not happen!! Data will be lost [ 120.388789][T10676] [ 120.407018][T10677] EXT4-fs error (device loop6): ext4_do_update_inode:5563: inode #2: comm syz.6.1810: corrupted inode contents [ 120.410237][T10676] EXT4-fs (loop3): Total free blocks count 0 [ 120.423678][T10677] EXT4-fs error (device loop6): ext4_dirty_inode:6454: inode #2: comm syz.6.1810: mark_inode_dirty error [ 120.428083][T10676] EXT4-fs (loop3): Free/Dirty block details [ 120.440370][T10677] EXT4-fs error (device loop6): ext4_do_update_inode:5563: inode #2: comm syz.6.1810: corrupted inode contents [ 120.445362][T10676] EXT4-fs (loop3): free_blocks=20480 [ 120.458618][T10677] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.1810: mark_inode_dirty error [ 120.462559][T10676] EXT4-fs (loop3): dirty_blocks=80 [ 120.462578][T10676] EXT4-fs (loop3): Block reservation details [ 120.475929][T10677] EXT4-fs error (device loop6): ext4_do_update_inode:5563: inode #2: comm syz.6.1810: corrupted inode contents [ 120.478920][T10676] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 120.499238][T10646] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 120.506679][T10677] EXT4-fs error (device loop6): ext4_dirty_inode:6454: inode #2: comm syz.6.1810: mark_inode_dirty error [ 120.557572][T10672] EXT4-fs error (device loop6): ext4_do_update_inode:5563: inode #2: comm syz.6.1810: corrupted inode contents [ 120.602536][ T29] kauditd_printk_skb: 638 callbacks suppressed [ 120.602554][ T29] audit: type=1326 audit(2000000039.742:8705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 120.660585][ T29] audit: type=1326 audit(2000000039.742:8706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 120.683564][ T29] audit: type=1326 audit(2000000039.742:8707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 120.706425][ T29] audit: type=1326 audit(2000000039.742:8708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 120.729285][ T29] audit: type=1326 audit(2000000039.742:8709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 120.752267][ T29] audit: type=1326 audit(2000000039.742:8710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 120.775159][ T29] audit: type=1326 audit(2000000039.742:8711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 120.798042][ T29] audit: type=1326 audit(2000000039.742:8712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 120.821126][ T29] audit: type=1326 audit(2000000039.742:8713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 120.844083][ T29] audit: type=1326 audit(2000000039.742:8714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb999be9a9 code=0x7ffc0000 [ 120.903929][T10690] pim6reg1: entered promiscuous mode [ 120.909349][T10690] pim6reg1: entered allmulticast mode [ 120.996075][T10698] pim6reg1: entered promiscuous mode [ 121.001517][T10698] pim6reg1: entered allmulticast mode [ 121.026872][T10704] FAULT_INJECTION: forcing a failure. [ 121.026872][T10704] name failslab, interval 1, probability 0, space 0, times 0 [ 121.039657][T10704] CPU: 0 UID: 0 PID: 10704 Comm: syz.4.1817 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 121.039752][T10704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.039769][T10704] Call Trace: [ 121.039776][T10704] [ 121.039786][T10704] __dump_stack+0x1d/0x30 [ 121.039813][T10704] dump_stack_lvl+0xe8/0x140 [ 121.039856][T10704] dump_stack+0x15/0x1b [ 121.039871][T10704] should_fail_ex+0x265/0x280 [ 121.039895][T10704] should_failslab+0x8c/0xb0 [ 121.039961][T10704] kmem_cache_alloc_node_noprof+0x57/0x320 [ 121.040026][T10704] ? __alloc_skb+0x101/0x320 [ 121.040063][T10704] __alloc_skb+0x101/0x320 [ 121.040101][T10704] ? audit_log_start+0x365/0x6c0 [ 121.040184][T10704] audit_log_start+0x380/0x6c0 [ 121.040256][T10704] audit_seccomp+0x48/0x100 [ 121.040292][T10704] ? __seccomp_filter+0x68c/0x10d0 [ 121.040352][T10704] __seccomp_filter+0x69d/0x10d0 [ 121.040380][T10704] ? __se_sys_mbind+0xa47/0xac0 [ 121.040410][T10704] __secure_computing+0x82/0x150 [ 121.040436][T10704] syscall_trace_enter+0xcf/0x1e0 [ 121.040515][T10704] do_syscall_64+0xac/0x200 [ 121.040540][T10704] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 121.040568][T10704] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 121.040605][T10704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.040640][T10704] RIP: 0033:0x7f528438d3bc [ 121.040657][T10704] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 121.040678][T10704] RSP: 002b:00007f52829f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.040699][T10704] RAX: ffffffffffffffda RBX: 00007f52845b5fa0 RCX: 00007f528438d3bc [ 121.040739][T10704] RDX: 000000000000000f RSI: 00007f52829f70a0 RDI: 0000000000000004 [ 121.040753][T10704] RBP: 00007f52829f7090 R08: 0000000000000000 R09: 0000000000000000 [ 121.040766][T10704] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.040779][T10704] R13: 0000000000000000 R14: 00007f52845b5fa0 R15: 00007fffc8572778 [ 121.040857][T10704] [ 121.297377][ T3939] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.348360][T10719] netlink: 'syz.1.1824': attribute type 11 has an invalid length. [ 121.397450][T10726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.406415][T10730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.411014][T10726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.420300][T10719] hub 9-0:1.0: USB hub found [ 121.428280][T10719] hub 9-0:1.0: 8 ports detected [ 121.470030][T10730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.537646][T10744] vfat: Unknown parameter 'percpu_free_percpu' [ 122.001990][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1831'. [ 122.011855][T10796] FAULT_INJECTION: forcing a failure. [ 122.011855][T10796] name failslab, interval 1, probability 0, space 0, times 0 [ 122.024524][T10796] CPU: 0 UID: 0 PID: 10796 Comm: syz.0.1831 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 122.024616][T10796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.024628][T10796] Call Trace: [ 122.024635][T10796] [ 122.024642][T10796] __dump_stack+0x1d/0x30 [ 122.024673][T10796] dump_stack_lvl+0xe8/0x140 [ 122.024711][T10796] dump_stack+0x15/0x1b [ 122.024727][T10796] should_fail_ex+0x265/0x280 [ 122.024752][T10796] should_failslab+0x8c/0xb0 [ 122.024792][T10796] kmem_cache_alloc_node_noprof+0x57/0x320 [ 122.024876][T10796] ? dup_task_struct+0x70/0x6a0 [ 122.024906][T10796] dup_task_struct+0x70/0x6a0 [ 122.024938][T10796] ? path_openat+0x1bf8/0x2170 [ 122.024968][T10796] copy_process+0x399/0x2000 [ 122.025021][T10796] ? copy_clone_args_from_user+0x3ce/0x490 [ 122.025054][T10796] kernel_clone+0x16c/0x5c0 [ 122.025090][T10796] __se_sys_clone3+0x1c2/0x200 [ 122.025156][T10796] ? fpregs_restore_userregs+0xad/0x1d0 [ 122.025192][T10796] __x64_sys_clone3+0x31/0x40 [ 122.025321][T10796] x64_sys_call+0x1fc9/0x2ff0 [ 122.025347][T10796] do_syscall_64+0xd2/0x200 [ 122.025372][T10796] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 122.025397][T10796] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 122.025478][T10796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.025519][T10796] RIP: 0033:0x7fa58e7ce9a9 [ 122.025538][T10796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.025561][T10796] RSP: 002b:00007fa58ce36f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 122.025585][T10796] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fa58e7ce9a9 [ 122.025598][T10796] RDX: 00007fa58ce36f20 RSI: 0000000000000058 RDI: 00007fa58ce36f20 [ 122.025609][T10796] RBP: 00007fa58ce37090 R08: 0000000000000000 R09: 0000000000000058 [ 122.025631][T10796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.025647][T10796] R13: 0000000000000000 R14: 00007fa58e9f5fa0 R15: 00007ffebb4f0a08 [ 122.025673][T10796] [ 122.419435][T10808] netlink: 'syz.3.1836': attribute type 11 has an invalid length. [ 122.526349][T10820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.540309][T10820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.625495][T10808] hub 9-0:1.0: USB hub found [ 122.630465][T10808] hub 9-0:1.0: 8 ports detected [ 122.713151][T10838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.722848][T10838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.734755][T10843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.744873][T10843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.064439][T10857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.074072][T10857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.363837][T10870] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1849'. [ 123.373026][T10870] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1849'. [ 123.382022][T10870] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1849'. [ 123.395050][T10870] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1849'. [ 123.465920][T10876] netlink: 'syz.3.1852': attribute type 11 has an invalid length. [ 123.527019][T10876] hub 9-0:1.0: USB hub found [ 123.531766][T10876] hub 9-0:1.0: 8 ports detected [ 123.559363][T10887] loop6: detected capacity change from 0 to 128 [ 123.569033][T10887] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.590031][T10890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.599759][T10890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.622011][T10887] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.637032][T10896] sch_fq: defrate 4294967295 ignored. [ 123.647121][T10887] FAULT_INJECTION: forcing a failure. [ 123.647121][T10887] name failslab, interval 1, probability 0, space 0, times 0 [ 123.659872][T10887] CPU: 0 UID: 0 PID: 10887 Comm: syz.6.1854 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 123.659902][T10887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.659996][T10887] Call Trace: [ 123.660005][T10887] [ 123.660014][T10887] __dump_stack+0x1d/0x30 [ 123.660036][T10887] dump_stack_lvl+0xe8/0x140 [ 123.660074][T10887] dump_stack+0x15/0x1b [ 123.660092][T10887] should_fail_ex+0x265/0x280 [ 123.660116][T10887] should_failslab+0x8c/0xb0 [ 123.660189][T10887] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 123.660216][T10887] ? __d_alloc+0x3d/0x340 [ 123.660259][T10887] __d_alloc+0x3d/0x340 [ 123.660312][T10887] d_alloc+0x2e/0x100 [ 123.660392][T10887] lookup_one_qstr_excl+0x99/0x250 [ 123.660436][T10887] do_rmdir+0x13d/0x440 [ 123.660469][T10887] __x64_sys_unlinkat+0x86/0xb0 [ 123.660557][T10887] x64_sys_call+0x2ede/0x2ff0 [ 123.660582][T10887] do_syscall_64+0xd2/0x200 [ 123.660658][T10887] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 123.660727][T10887] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 123.660771][T10887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.660791][T10887] RIP: 0033:0x7fb329d5e9a9 [ 123.660842][T10887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.660859][T10887] RSP: 002b:00007fb3283bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 123.660877][T10887] RAX: ffffffffffffffda RBX: 00007fb329f85fa0 RCX: 00007fb329d5e9a9 [ 123.660893][T10887] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 123.660969][T10887] RBP: 00007fb3283bf090 R08: 0000000000000000 R09: 0000000000000000 [ 123.660982][T10887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.660998][T10887] R13: 0000000000000000 R14: 00007fb329f85fa0 R15: 00007fffff668e48 [ 123.661084][T10887] [ 123.894930][T10903] pim6reg1: entered promiscuous mode [ 123.900309][T10903] pim6reg1: entered allmulticast mode [ 123.911655][T10814] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.933519][T10907] Q6\bY4: renamed from lo (while UP) [ 123.971682][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1865'. [ 123.980794][T10922] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1865'. [ 123.996083][T10924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.003432][T10924] IPv6: NLM_F_CREATE should be set when creating new route [ 124.010703][T10924] IPv6: NLM_F_CREATE should be set when creating new route [ 124.011156][T10931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.026567][T10931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.061323][T10936] sch_fq: defrate 4294967295 ignored. [ 124.075192][T10938] 9pnet_fd: Insufficient options for proto=fd [ 124.083209][T10939] 9pnet_fd: Insufficient options for proto=fd [ 124.113895][T10943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.124224][T10943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.268854][T10953] loop3: detected capacity change from 0 to 1024 [ 124.275935][T10953] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.292940][T10953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.305599][T10953] FAULT_INJECTION: forcing a failure. [ 124.305599][T10953] name failslab, interval 1, probability 0, space 0, times 0 [ 124.318321][T10953] CPU: 0 UID: 0 PID: 10953 Comm: syz.3.1872 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 124.318420][T10953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.318487][T10953] Call Trace: [ 124.318496][T10953] [ 124.318506][T10953] __dump_stack+0x1d/0x30 [ 124.318527][T10953] dump_stack_lvl+0xe8/0x140 [ 124.318560][T10953] dump_stack+0x15/0x1b [ 124.318646][T10953] should_fail_ex+0x265/0x280 [ 124.318669][T10953] ? __se_sys_mount+0xef/0x2e0 [ 124.318693][T10953] should_failslab+0x8c/0xb0 [ 124.318868][T10953] __kmalloc_cache_noprof+0x4c/0x320 [ 124.318967][T10953] ? memdup_user+0x99/0xd0 [ 124.319061][T10953] __se_sys_mount+0xef/0x2e0 [ 124.319094][T10953] ? __bpf_trace_sys_enter+0x10/0x30 [ 124.319194][T10953] ? trace_sys_enter+0xd0/0xf0 [ 124.319220][T10953] __x64_sys_mount+0x67/0x80 [ 124.319254][T10953] x64_sys_call+0x2b4d/0x2ff0 [ 124.319324][T10953] do_syscall_64+0xd2/0x200 [ 124.319353][T10953] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 124.319490][T10953] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 124.319578][T10953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.319609][T10953] RIP: 0033:0x7fcb999c014a [ 124.319627][T10953] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.319650][T10953] RSP: 002b:00007fcb9801ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.319672][T10953] RAX: ffffffffffffffda RBX: 00007fcb9801eef0 RCX: 00007fcb999c014a [ 124.319707][T10953] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 124.319719][T10953] RBP: 0000200000000180 R08: 00007fcb9801eef0 R09: 0000000000000061 [ 124.319733][T10953] R10: 0000000000000061 R11: 0000000000000246 R12: 0000200000000100 [ 124.319748][T10953] R13: 00007fcb9801eeb0 R14: 0000000000000000 R15: 00002000000001c0 [ 124.319842][T10953] [ 124.515934][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.680201][T10974] loop3: detected capacity change from 0 to 2048 [ 124.692424][T10974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.741438][T10980] pim6reg1: entered promiscuous mode [ 124.746868][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1877'. [ 124.746968][T10980] pim6reg1: entered allmulticast mode [ 124.781625][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1879'. [ 124.790582][T10987] netlink: 356 bytes leftover after parsing attributes in process `syz.6.1879'. [ 124.800512][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.839933][T10993] sch_fq: defrate 4294967295 ignored. [ 124.868135][T10997] loop6: detected capacity change from 0 to 1024 [ 124.876838][T10997] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 124.893825][T10997] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #3: block 1: comm syz.6.1883: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.909712][T10997] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1883: Failed to acquire dquot type 0 [ 124.924416][T10997] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.1883: Freeing blocks not in datazone - block = 0, count = 4096 [ 124.938157][T10997] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1883: Invalid inode bitmap blk 0 in block_group 0 [ 124.957103][T10999] loop3: detected capacity change from 0 to 1024 [ 124.980866][T10999] ext4: Bad value for 'barrier' [ 125.003887][T10997] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 125.016041][T10997] EXT4-fs (loop6): 1 orphan inode deleted [ 125.023351][T10997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.031159][ T4035] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 125.061426][ T4035] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 125.085445][T10997] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.119075][T10997] loop6: detected capacity change from 0 to 2048 [ 125.133588][T11026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.145724][T11029] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.147817][T11030] loop1: detected capacity change from 0 to 512 [ 125.153009][T11029] IPv6: NLM_F_CREATE should be set when creating new route [ 125.153021][T11029] IPv6: NLM_F_CREATE should be set when creating new route [ 125.155393][T11026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.160841][T11030] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.191994][T11030] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 125.222576][T11038] tipc: Started in network mode [ 125.227514][T11038] tipc: Node identity 86fab39033f7, cluster identity 6 [ 125.234496][T11038] tipc: Enabled bearer , priority 0 [ 125.251525][T11038] syzkaller0: entered promiscuous mode [ 125.251549][T11038] syzkaller0: entered allmulticast mode [ 125.255328][T11038] tipc: Resetting bearer [ 125.338742][T11037] tipc: Resetting bearer [ 125.346419][T11037] tipc: Disabling bearer [ 125.472006][T11064] loop6: detected capacity change from 0 to 512 [ 125.480158][T11064] EXT4-fs error (device loop6): ext4_iget_extra_inode:5030: inode #15: comm syz.6.1898: corrupted in-inode xattr: invalid ea_ino [ 125.494135][T11064] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.1898: couldn't read orphan inode 15 (err -117) [ 125.507366][T11064] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.522807][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.530324][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.537731][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.545242][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.552692][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.554954][T11062] loop1: detected capacity change from 0 to 8192 [ 125.560200][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.560288][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.581442][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.588932][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.593916][T11062] netlink: 'syz.1.1897': attribute type 1 has an invalid length. [ 125.596580][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.611669][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.619189][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.621508][ T29] kauditd_printk_skb: 491 callbacks suppressed [ 125.621525][ T29] audit: type=1326 audit(2000000044.752:9201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11061 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f44e9a9 code=0x7ffc0000 [ 125.626644][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.663747][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.671207][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.678675][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.679941][ T29] audit: type=1326 audit(2000000044.812:9202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11061 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f44e9a9 code=0x7ffc0000 [ 125.686136][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.717050][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.724911][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.732372][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.740025][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.747502][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.755142][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.762651][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.770077][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.777544][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.784980][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.792471][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.799884][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.807341][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.814861][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.822329][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.829733][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.837274][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.844717][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.852157][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.859568][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.867217][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.874676][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.882411][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.889985][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.896395][T11080] loop4: detected capacity change from 0 to 512 [ 125.897429][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.908944][T11080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.911123][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.930511][ T3409] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 125.938624][ T3409] hid-generic 0000:0000:0008.0001: hidraw0: HID vc.87 Device [syz0] on syz1 [ 125.951463][T11080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.975609][T11091] FAULT_INJECTION: forcing a failure. [ 125.975609][T11091] name failslab, interval 1, probability 0, space 0, times 0 [ 125.988385][T11091] CPU: 0 UID: 0 PID: 11091 Comm: syz.0.1902 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 125.988414][T11091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.988427][T11091] Call Trace: [ 125.988434][T11091] [ 125.988442][T11091] __dump_stack+0x1d/0x30 [ 125.988496][T11091] dump_stack_lvl+0xe8/0x140 [ 125.988531][T11091] dump_stack+0x15/0x1b [ 125.988545][T11091] should_fail_ex+0x265/0x280 [ 125.988566][T11091] should_failslab+0x8c/0xb0 [ 125.988614][T11091] kmem_cache_alloc_noprof+0x50/0x310 [ 125.988633][T11091] ? skb_clone+0x151/0x1f0 [ 125.988681][T11091] skb_clone+0x151/0x1f0 [ 125.988742][T11091] __netlink_deliver_tap+0x2c9/0x500 [ 125.988860][T11091] netlink_unicast+0x66b/0x690 [ 125.988898][T11091] netlink_sendmsg+0x58b/0x6b0 [ 125.989003][T11091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.989120][T11091] __sock_sendmsg+0x142/0x180 [ 125.989149][T11091] ____sys_sendmsg+0x31e/0x4e0 [ 125.989195][T11091] ___sys_sendmsg+0x17b/0x1d0 [ 125.989253][T11091] __x64_sys_sendmsg+0xd4/0x160 [ 125.989316][T11091] x64_sys_call+0x191e/0x2ff0 [ 125.989340][T11091] do_syscall_64+0xd2/0x200 [ 125.989365][T11091] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 125.989423][T11091] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 125.989464][T11091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.989530][T11091] RIP: 0033:0x7fa58e7ce9a9 [ 125.989545][T11091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.989621][T11091] RSP: 002b:00007fa58ce37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.989646][T11091] RAX: ffffffffffffffda RBX: 00007fa58e9f5fa0 RCX: 00007fa58e7ce9a9 [ 125.989662][T11091] RDX: 0000000000001000 RSI: 0000200000000140 RDI: 0000000000000005 [ 125.989712][T11091] RBP: 00007fa58ce37090 R08: 0000000000000000 R09: 0000000000000000 [ 125.989724][T11091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.989735][T11091] R13: 0000000000000000 R14: 00007fa58e9f5fa0 R15: 00007ffebb4f0a08 [ 125.989826][T11091] [ 126.210677][ T3939] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.236595][T11102] netlink: 'syz.0.1905': attribute type 11 has an invalid length. [ 126.237271][T11096] pim6reg1: entered promiscuous mode [ 126.249816][T11096] pim6reg1: entered allmulticast mode [ 126.330676][T11102] hub 9-0:1.0: USB hub found [ 126.335509][T11102] hub 9-0:1.0: 8 ports detected [ 126.372117][ T29] audit: type=1326 audit(2000000045.512:9203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11119 comm="syz.6.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb329d5e9a9 code=0x7ffc0000 [ 126.395849][ T29] audit: type=1326 audit(2000000045.512:9204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11119 comm="syz.6.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb329d5e9a9 code=0x7ffc0000 [ 126.403190][T11120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.431056][ T29] audit: type=1326 audit(2000000045.542:9205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11119 comm="syz.6.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb329d5e9a9 code=0x7ffc0000 [ 126.447343][T11120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.454672][ T29] audit: type=1326 audit(2000000045.542:9206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11119 comm="syz.6.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb329d5e9a9 code=0x7ffc0000 [ 126.485921][ T29] audit: type=1326 audit(2000000045.542:9207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11119 comm="syz.6.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb329d5e9a9 code=0x7ffc0000 [ 126.509596][ T29] audit: type=1326 audit(2000000045.542:9208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11119 comm="syz.6.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb329d5e9a9 code=0x7ffc0000 [ 126.524287][T11127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.533266][ T29] audit: type=1326 audit(2000000045.542:9209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11119 comm="syz.6.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb329d5e9a9 code=0x7ffc0000 [ 126.542429][T11127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.565105][ T29] audit: type=1326 audit(2000000045.542:9210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11119 comm="syz.6.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb329d5e9a9 code=0x7ffc0000 [ 126.641796][T11137] loop3: detected capacity change from 0 to 256 [ 126.691056][T11137] FAT-fs (loop3): Directory bread(block 64) failed [ 126.697622][T11137] FAT-fs (loop3): Directory bread(block 65) failed [ 126.718094][T11137] FAT-fs (loop3): Directory bread(block 66) failed [ 126.725749][T11137] FAT-fs (loop3): Directory bread(block 67) failed [ 126.732766][T11137] FAT-fs (loop3): Directory bread(block 68) failed [ 126.739420][T11137] FAT-fs (loop3): Directory bread(block 69) failed [ 126.747325][T11137] FAT-fs (loop3): Directory bread(block 70) failed [ 126.754216][T11137] FAT-fs (loop3): Directory bread(block 71) failed [ 126.762158][T11137] FAT-fs (loop3): Directory bread(block 72) failed [ 126.768956][T11137] FAT-fs (loop3): Directory bread(block 73) failed [ 126.793723][T11137] syz.3.1911: attempt to access beyond end of device [ 126.793723][T11137] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 126.795504][T11143] netlink: 'syz.4.1912': attribute type 1 has an invalid length. [ 126.891374][T11152] netlink: 'syz.3.1914': attribute type 11 has an invalid length. [ 126.953600][T11152] hub 9-0:1.0: USB hub found [ 126.958322][T11152] hub 9-0:1.0: 8 ports detected [ 127.110942][T11174] netlink: 'syz.4.1920': attribute type 11 has an invalid length. [ 127.173702][T11174] hub 9-0:1.0: USB hub found [ 127.178533][T11174] hub 9-0:1.0: 8 ports detected [ 127.251604][T11183] loop4: detected capacity change from 0 to 2048 [ 127.264496][T11183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.298284][T11189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.307390][T11189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.320058][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.341646][T11194] __nla_validate_parse: 6 callbacks suppressed [ 127.341664][T11194] netlink: 344 bytes leftover after parsing attributes in process `syz.6.1927'. [ 127.402256][T11203] FAULT_INJECTION: forcing a failure. [ 127.402256][T11203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.415636][T11203] CPU: 1 UID: 0 PID: 11203 Comm: syz.4.1929 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 127.415672][T11203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.415687][T11203] Call Trace: [ 127.415695][T11203] [ 127.415704][T11203] __dump_stack+0x1d/0x30 [ 127.415728][T11203] dump_stack_lvl+0xe8/0x140 [ 127.415767][T11203] dump_stack+0x15/0x1b [ 127.415785][T11203] should_fail_ex+0x265/0x280 [ 127.415888][T11203] should_fail+0xb/0x20 [ 127.415905][T11203] should_fail_usercopy+0x1a/0x20 [ 127.415928][T11203] _copy_from_user+0x1c/0xb0 [ 127.415957][T11203] __sys_bpf+0x178/0x7b0 [ 127.415989][T11203] __x64_sys_bpf+0x41/0x50 [ 127.416067][T11203] x64_sys_call+0x2aea/0x2ff0 [ 127.416089][T11203] do_syscall_64+0xd2/0x200 [ 127.416113][T11203] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 127.416180][T11203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.416203][T11203] RIP: 0033:0x7f528438e9a9 [ 127.416220][T11203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.416241][T11203] RSP: 002b:00007f52829f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.416262][T11203] RAX: ffffffffffffffda RBX: 00007f52845b5fa0 RCX: 00007f528438e9a9 [ 127.416350][T11203] RDX: 0000000000000094 RSI: 0000200000001540 RDI: 0000000000000005 [ 127.416388][T11203] RBP: 00007f52829f7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.416402][T11203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.416415][T11203] R13: 0000000000000000 R14: 00007f52845b5fa0 R15: 00007fffc8572778 [ 127.416437][T11203] [ 127.703965][T11215] netlink: 'syz.4.1933': attribute type 11 has an invalid length. [ 127.753782][T11215] hub 9-0:1.0: USB hub found [ 127.758606][T11215] hub 9-0:1.0: 8 ports detected [ 127.817855][T11223] FAULT_INJECTION: forcing a failure. [ 127.817855][T11223] name failslab, interval 1, probability 0, space 0, times 0 [ 127.830878][T11223] CPU: 0 UID: 0 PID: 11223 Comm: syz.4.1935 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 127.830911][T11223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.830936][T11223] Call Trace: [ 127.830941][T11223] [ 127.830947][T11223] __dump_stack+0x1d/0x30 [ 127.830969][T11223] dump_stack_lvl+0xe8/0x140 [ 127.831012][T11223] dump_stack+0x15/0x1b [ 127.831029][T11223] should_fail_ex+0x265/0x280 [ 127.831047][T11223] should_failslab+0x8c/0xb0 [ 127.831092][T11223] __kvmalloc_node_noprof+0x123/0x4e0 [ 127.831175][T11223] ? file_tty_write+0x1a8/0x670 [ 127.831258][T11223] file_tty_write+0x1a8/0x670 [ 127.831377][T11223] ? __pfx_tty_write+0x10/0x10 [ 127.831409][T11223] tty_write+0x25/0x30 [ 127.831521][T11223] vfs_write+0x49d/0x8e0 [ 127.831559][T11223] ksys_write+0xda/0x1a0 [ 127.831585][T11223] __x64_sys_write+0x40/0x50 [ 127.831610][T11223] x64_sys_call+0x27fe/0x2ff0 [ 127.831690][T11223] do_syscall_64+0xd2/0x200 [ 127.831717][T11223] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 127.831749][T11223] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 127.831815][T11223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.831835][T11223] RIP: 0033:0x7f528438e9a9 [ 127.831849][T11223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.831866][T11223] RSP: 002b:00007f52829f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.831913][T11223] RAX: ffffffffffffffda RBX: 00007f52845b5fa0 RCX: 00007f528438e9a9 [ 127.831924][T11223] RDX: 00000000fffffecc RSI: 0000200000000240 RDI: 0000000000000003 [ 127.832011][T11223] RBP: 00007f52829f7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.832025][T11223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.832041][T11223] R13: 0000000000000000 R14: 00007f52845b5fa0 R15: 00007fffc8572778 [ 127.832063][T11223] [ 128.059511][T11237] sch_fq: defrate 4294967295 ignored. [ 128.115561][T11249] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1943'. [ 128.143118][T11252] netlink: 'syz.4.1945': attribute type 11 has an invalid length. [ 128.230919][T11265] sch_fq: defrate 4294967295 ignored. [ 128.241448][T11266] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.246243][T11252] hub 9-0:1.0: USB hub found [ 128.255039][T11252] hub 9-0:1.0: 8 ports detected [ 128.276444][T11268] loop3: detected capacity change from 0 to 512 [ 128.295663][T11268] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.316661][T11268] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 128.341349][T11268] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1952: invalid block [ 128.354217][T11277] FAULT_INJECTION: forcing a failure. [ 128.354217][T11277] name failslab, interval 1, probability 0, space 0, times 0 [ 128.366960][T11277] CPU: 0 UID: 0 PID: 11277 Comm: syz.0.1954 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 128.366997][T11277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.367013][T11277] Call Trace: [ 128.367093][T11277] [ 128.367111][T11277] __dump_stack+0x1d/0x30 [ 128.367137][T11277] dump_stack_lvl+0xe8/0x140 [ 128.367180][T11277] dump_stack+0x15/0x1b [ 128.367200][T11277] should_fail_ex+0x265/0x280 [ 128.367232][T11277] should_failslab+0x8c/0xb0 [ 128.367266][T11277] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 128.367345][T11277] ? __d_alloc+0x3d/0x340 [ 128.367393][T11277] __d_alloc+0x3d/0x340 [ 128.367474][T11277] ? selinux_inode_rename+0x4d3/0x5d0 [ 128.367548][T11277] d_alloc+0x2e/0x100 [ 128.367587][T11277] shmem_rename2+0x135/0x290 [ 128.367626][T11277] ? __pfx_shmem_rename2+0x10/0x10 [ 128.367709][T11277] vfs_rename+0x7f3/0xa40 [ 128.367753][T11277] do_renameat2+0x557/0xa10 [ 128.367812][T11277] __x64_sys_renameat2+0x7e/0x90 [ 128.367883][T11277] x64_sys_call+0x3f9/0x2ff0 [ 128.367910][T11277] do_syscall_64+0xd2/0x200 [ 128.367938][T11277] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 128.367964][T11277] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 128.368042][T11277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.368070][T11277] RIP: 0033:0x7fa58e7ce9a9 [ 128.368090][T11277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.368113][T11277] RSP: 002b:00007fa58ce37038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 128.368137][T11277] RAX: ffffffffffffffda RBX: 00007fa58e9f5fa0 RCX: 00007fa58e7ce9a9 [ 128.368205][T11277] RDX: ffffffffffffff9c RSI: 00002000000007c0 RDI: ffffffffffffff9c [ 128.368217][T11277] RBP: 00007fa58ce37090 R08: 0000000000000004 R09: 0000000000000000 [ 128.368229][T11277] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 128.368312][T11277] R13: 0000000000000000 R14: 00007fa58e9f5fa0 R15: 00007ffebb4f0a08 [ 128.368340][T11277] [ 128.572489][T11268] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1952: invalid indirect mapped block 4294967295 (level 1) [ 128.590236][T11268] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1952: invalid indirect mapped block 4294967295 (level 1) [ 128.617207][T11283] netlink: 344 bytes leftover after parsing attributes in process `syz.4.1956'. [ 128.617608][T11268] EXT4-fs (loop3): 2 truncates cleaned up [ 128.633096][T11268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.686939][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.791305][T11301] sch_fq: defrate 4294967295 ignored. [ 128.819095][T11305] pim6reg1: entered promiscuous mode [ 128.824499][T11305] pim6reg1: entered allmulticast mode [ 128.865407][T11315] netlink: 'syz.4.1966': attribute type 11 has an invalid length. [ 128.877335][T11318] netlink: 'syz.3.1967': attribute type 11 has an invalid length. [ 128.935893][T11315] hub 9-0:1.0: USB hub found [ 128.942444][T11315] hub 9-0:1.0: 8 ports detected [ 128.971098][T11318] hub 9-0:1.0: USB hub found [ 128.975792][T11318] hub 9-0:1.0: 8 ports detected [ 129.027286][T11333] netlink: 332 bytes leftover after parsing attributes in process `syz.6.1970'. [ 129.059660][T11338] loop4: detected capacity change from 0 to 2048 [ 129.103262][T11338] Alternate GPT is invalid, using primary GPT. [ 129.109910][T11338] loop4: p2 p3 p7 [ 129.409249][T11387] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1987'. [ 129.423199][T11376] hub 6-0:1.0: USB hub found [ 129.428145][T11376] hub 6-0:1.0: 8 ports detected [ 129.583324][T11411] pim6reg1: entered promiscuous mode [ 129.588692][T11411] pim6reg1: entered allmulticast mode [ 129.641727][T11430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.669845][T11437] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2001'. [ 129.864643][T11468] pim6reg1: entered promiscuous mode [ 129.870119][T11468] pim6reg1: entered allmulticast mode [ 129.902422][T11475] pim6reg1: entered promiscuous mode [ 129.907784][T11475] pim6reg1: entered allmulticast mode [ 129.966001][T11482] netlink: 'syz.1.2012': attribute type 11 has an invalid length. [ 130.022161][T11487] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2014'. [ 130.029350][T11482] hub 9-0:1.0: USB hub found [ 130.036082][T11482] hub 9-0:1.0: 8 ports detected [ 130.111140][T11502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.120564][T11502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.629994][ T29] kauditd_printk_skb: 457 callbacks suppressed [ 130.630012][ T29] audit: type=1326 audit(2000000049.762:9668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11517 comm="syz.0.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58e7ce9a9 code=0x7ffc0000 [ 130.663707][ T29] audit: type=1326 audit(2000000049.772:9669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11517 comm="syz.0.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58e7ce9a9 code=0x7ffc0000 [ 130.726744][T11525] pim6reg1: entered promiscuous mode [ 130.732287][T11525] pim6reg1: entered allmulticast mode [ 130.857842][T11536] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2028'. [ 131.974630][T11550] pim6reg1: entered promiscuous mode [ 131.980143][T11550] pim6reg1: entered allmulticast mode [ 132.288251][T11568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.333812][T11568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.371547][ T29] audit: type=1326 audit(2000000051.512:9670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11587 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528438e9a9 code=0x7ffc0000 [ 132.408592][T11597] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2039'. [ 132.424289][ T29] audit: type=1326 audit(2000000051.512:9671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11587 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528438e9a9 code=0x7ffc0000 [ 132.447149][ T29] audit: type=1326 audit(2000000051.512:9672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11587 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f528438e9a9 code=0x7ffc0000 [ 132.469989][ T29] audit: type=1326 audit(2000000051.512:9673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11587 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528438e9a9 code=0x7ffc0000 [ 132.492903][ T29] audit: type=1326 audit(2000000051.512:9674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11587 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528438e9a9 code=0x7ffc0000 [ 132.515771][ T29] audit: type=1326 audit(2000000051.512:9675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11587 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f528438e9a9 code=0x7ffc0000 [ 132.519476][T11603] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2043'. [ 132.538745][ T29] audit: type=1326 audit(2000000051.512:9676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11587 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528438e9a9 code=0x7ffc0000 [ 132.570484][ T29] audit: type=1326 audit(2000000051.512:9677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11587 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f528438e9a9 code=0x7ffc0000 [ 132.607408][T11609] pim6reg1: entered promiscuous mode [ 132.612795][T11609] pim6reg1: entered allmulticast mode [ 132.637834][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2040'. [ 132.772614][T11630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.793386][T11630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.052414][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 133.063590][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.077018][T11652] FAULT_INJECTION: forcing a failure. [ 133.077018][T11652] name failslab, interval 1, probability 0, space 0, times 0 [ 133.089832][T11652] CPU: 0 UID: 0 PID: 11652 Comm: syz.1.2057 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 133.089894][T11652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.089910][T11652] Call Trace: [ 133.089919][T11652] [ 133.089929][T11652] __dump_stack+0x1d/0x30 [ 133.089954][T11652] dump_stack_lvl+0xe8/0x140 [ 133.090004][T11652] dump_stack+0x15/0x1b [ 133.090075][T11652] should_fail_ex+0x265/0x280 [ 133.090098][T11652] ? __request_module+0x1c4/0x3e0 [ 133.090128][T11652] should_failslab+0x8c/0xb0 [ 133.090163][T11652] ? dev_load+0x61/0xc0 [ 133.090251][T11652] __kmalloc_cache_noprof+0x4c/0x320 [ 133.090279][T11652] ? dev_load+0x61/0xc0 [ 133.090299][T11652] __request_module+0x1c4/0x3e0 [ 133.090327][T11652] ? capable+0x7c/0xb0 [ 133.090347][T11652] ? security_capable+0x83/0x90 [ 133.090443][T11652] dev_load+0x61/0xc0 [ 133.090464][T11652] dev_ioctl+0x777/0x960 [ 133.090483][T11652] sock_ioctl+0x593/0x610 [ 133.090505][T11652] ? __pfx_sock_ioctl+0x10/0x10 [ 133.090528][T11652] __se_sys_ioctl+0xcb/0x140 [ 133.090590][T11652] __x64_sys_ioctl+0x43/0x50 [ 133.090615][T11652] x64_sys_call+0x1816/0x2ff0 [ 133.090641][T11652] do_syscall_64+0xd2/0x200 [ 133.090747][T11652] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 133.090779][T11652] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 133.090814][T11652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.090927][T11652] RIP: 0033:0x7f426f44e9a9 [ 133.090946][T11652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.090968][T11652] RSP: 002b:00007f426daaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.090989][T11652] RAX: ffffffffffffffda RBX: 00007f426f675fa0 RCX: 00007f426f44e9a9 [ 133.091011][T11652] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000005 [ 133.091027][T11652] RBP: 00007f426daaf090 R08: 0000000000000000 R09: 0000000000000000 [ 133.091042][T11652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.091056][T11652] R13: 0000000000000000 R14: 00007f426f675fa0 R15: 00007ffed87a38e8 [ 133.091139][T11652] [ 133.313440][T11659] pim6reg1: entered promiscuous mode [ 133.318812][T11659] pim6reg1: entered allmulticast mode [ 133.409175][T11674] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2062'. [ 133.418385][T11674] FAULT_INJECTION: forcing a failure. [ 133.418385][T11674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.431729][T11674] CPU: 0 UID: 0 PID: 11674 Comm: syz.6.2062 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 133.431766][T11674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.431778][T11674] Call Trace: [ 133.431784][T11674] [ 133.431791][T11674] __dump_stack+0x1d/0x30 [ 133.431810][T11674] dump_stack_lvl+0xe8/0x140 [ 133.431973][T11674] dump_stack+0x15/0x1b [ 133.431987][T11674] should_fail_ex+0x265/0x280 [ 133.432005][T11674] should_fail+0xb/0x20 [ 133.432019][T11674] should_fail_usercopy+0x1a/0x20 [ 133.432037][T11674] _copy_from_user+0x1c/0xb0 [ 133.432112][T11674] kstrtouint_from_user+0x69/0xf0 [ 133.432131][T11674] ? 0xffffffff81000000 [ 133.432143][T11674] ? selinux_file_permission+0x1e4/0x320 [ 133.432163][T11674] proc_fail_nth_write+0x50/0x160 [ 133.432215][T11674] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 133.432242][T11674] vfs_write+0x269/0x8e0 [ 133.432262][T11674] ? vfs_read+0x47f/0x6f0 [ 133.432314][T11674] ? __rcu_read_unlock+0x4f/0x70 [ 133.432334][T11674] ? __fget_files+0x184/0x1c0 [ 133.432366][T11674] ksys_write+0xda/0x1a0 [ 133.432389][T11674] __x64_sys_write+0x40/0x50 [ 133.432412][T11674] x64_sys_call+0x27fe/0x2ff0 [ 133.432458][T11674] do_syscall_64+0xd2/0x200 [ 133.432478][T11674] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 133.432502][T11674] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 133.432550][T11674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.432604][T11674] RIP: 0033:0x7fb329d5d45f [ 133.432617][T11674] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 133.432639][T11674] RSP: 002b:00007fb3283bf030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 133.432662][T11674] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb329d5d45f [ 133.432679][T11674] RDX: 0000000000000001 RSI: 00007fb3283bf0a0 RDI: 0000000000000004 [ 133.432691][T11674] RBP: 00007fb3283bf090 R08: 0000000000000000 R09: 0000000000000000 [ 133.432702][T11674] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 133.432714][T11674] R13: 0000000000000000 R14: 00007fb329f85fa0 R15: 00007fffff668e48 [ 133.432793][T11674] [ 133.655013][T11634] 9pnet_fd: p9_fd_create_tcp (11634): problem connecting socket to 127.0.0.1 [ 133.676310][T11675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.705844][T11681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.715772][T11681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.734771][T11686] loop6: detected capacity change from 0 to 512 [ 133.743092][T11686] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 133.758271][T11686] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 133.791887][T11692] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2067'. [ 133.809379][T11692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11692 comm=syz.6.2067 [ 133.953048][T11713] netem: change failed [ 134.068563][T11723] netlink: 'syz.4.2074': attribute type 11 has an invalid length. [ 134.130451][T11723] hub 9-0:1.0: USB hub found [ 134.135243][T11723] hub 9-0:1.0: 8 ports detected [ 134.251172][T11734] netlink: 'syz.1.2077': attribute type 11 has an invalid length. [ 134.337933][T11734] hub 9-0:1.0: USB hub found [ 134.347640][T11734] hub 9-0:1.0: 8 ports detected [ 134.357654][T11741] FAULT_INJECTION: forcing a failure. [ 134.357654][T11741] name failslab, interval 1, probability 0, space 0, times 0 [ 134.370409][T11741] CPU: 1 UID: 0 PID: 11741 Comm: syz.3.2079 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 134.370447][T11741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.370463][T11741] Call Trace: [ 134.370470][T11741] [ 134.370478][T11741] __dump_stack+0x1d/0x30 [ 134.370498][T11741] dump_stack_lvl+0xe8/0x140 [ 134.370557][T11741] dump_stack+0x15/0x1b [ 134.370572][T11741] should_fail_ex+0x265/0x280 [ 134.370592][T11741] should_failslab+0x8c/0xb0 [ 134.370690][T11741] kmem_cache_alloc_noprof+0x50/0x310 [ 134.370715][T11741] ? getname_flags+0x80/0x3b0 [ 134.370771][T11741] getname_flags+0x80/0x3b0 [ 134.370814][T11741] user_path_at+0x28/0x130 [ 134.370855][T11741] __se_sys_mount+0x25b/0x2e0 [ 134.370880][T11741] ? fput+0x8f/0xc0 [ 134.370901][T11741] __x64_sys_mount+0x67/0x80 [ 134.370933][T11741] x64_sys_call+0x2b4d/0x2ff0 [ 134.371034][T11741] do_syscall_64+0xd2/0x200 [ 134.371124][T11741] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.371150][T11741] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 134.371246][T11741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.371269][T11741] RIP: 0033:0x7fcb999be9a9 [ 134.371315][T11741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.371337][T11741] RSP: 002b:00007fcb9801f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 134.371361][T11741] RAX: ffffffffffffffda RBX: 00007fcb99be5fa0 RCX: 00007fcb999be9a9 [ 134.371376][T11741] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 134.371391][T11741] RBP: 00007fcb9801f090 R08: 0000200000000240 R09: 0000000000000000 [ 134.371402][T11741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.371431][T11741] R13: 0000000000000000 R14: 00007fcb99be5fa0 R15: 00007ffed4605698 [ 134.371449][T11741] [ 134.623275][T11753] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 134.638992][T11757] netlink: 'syz.0.2085': attribute type 11 has an invalid length. [ 134.675009][T11762] pim6reg1: entered promiscuous mode [ 134.680506][T11762] pim6reg1: entered allmulticast mode [ 134.701332][T11769] ================================================================== [ 134.709465][T11769] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 134.716253][T11769] [ 134.718580][T11769] write to 0xffff888104043e08 of 8 bytes by task 11770 on cpu 0: [ 134.726302][T11769] call_rcu+0x51/0x3f0 [ 134.730479][T11769] mas_replace_node+0x2e7/0x410 [ 134.735349][T11769] mas_wr_store_entry+0x2406/0x2b50 [ 134.740556][T11769] mas_store_prealloc+0x74d/0x9e0 [ 134.745593][T11769] vma_iter_store_new+0x1c5/0x200 [ 134.750670][T11769] mmap_region+0x102c/0x1580 [ 134.755280][T11769] do_mmap+0x9b3/0xbe0 [ 134.759357][T11769] vm_mmap_pgoff+0x17a/0x2e0 [ 134.763950][T11769] ksys_mmap_pgoff+0xc2/0x310 [ 134.768638][T11769] x64_sys_call+0x14a3/0x2ff0 [ 134.773340][T11769] do_syscall_64+0xd2/0x200 [ 134.777857][T11769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.783761][T11769] [ 134.786088][T11769] read to 0xffff888104043e08 of 8 bytes by task 11769 on cpu 1: [ 134.793723][T11769] mas_state_walk+0x28f/0x650 [ 134.798409][T11769] mas_walk+0x30/0x120 [ 134.802486][T11769] lock_vma_under_rcu+0xa2/0x2f0 [ 134.807432][T11769] do_user_addr_fault+0x233/0x1090 [ 134.812567][T11769] exc_page_fault+0x62/0xa0 [ 134.817090][T11769] asm_exc_page_fault+0x26/0x30 [ 134.821951][T11769] [ 134.824279][T11769] value changed: 0x0000555579f68fff -> 0x0000000000000000 [ 134.831388][T11769] [ 134.833744][T11769] Reported by Kernel Concurrency Sanitizer on: [ 134.839924][T11769] CPU: 1 UID: 0 PID: 11769 Comm: syz.1.2088 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 134.852087][T11769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.862177][T11769] ================================================================== [ 134.875666][T11770] loop1: detected capacity change from 0 to 258 [ 134.901787][T11757] hub 9-0:1.0: USB hub found [ 134.916748][T11757] hub 9-0:1.0: 8 ports detected