last executing test programs: 4m10.286469304s ago: executing program 3 (id=4): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2310, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x4, 0x3, 0x7, 0x6, 0x8d, "bca2eab1eaabc68a"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (fail_nth: 1) 4m9.89192767s ago: executing program 3 (id=6): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2310, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3ff, 0x2}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000640), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003007665616376746170000000180016801400018010000200f9ffffff38010000810000000000000000"], 0x4c}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000802, r4, &(0x7f0000000080)={0x2, 0x7, 0x6, 0x1, 0x6, 0xb, 0x6, 0x8, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=M']) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000dc0)='./file1\x00') unshare(0x6c040400) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000100)={0x4, 0x3, 0x7, 0x6, 0x8d, "bca2eab1eaabc68a"}) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 4m9.326123239s ago: executing program 3 (id=9): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) (fail_nth: 1) close_range(r2, 0xffffffffffffffff, 0x0) 4m8.441906862s ago: executing program 3 (id=28): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="8000000000000000240012800900eb7537a11d5d862482c501007866726d00000000140002800800020002000010d6e18c70ad809890554045270800010003000000140003007866726dd91f3a51c0809c8e2842f9e38037811adddec8b87e7cce9517512de6fea3093baa31dad883aaad"], 0x58}}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4b800, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000640), 0x2) r2 = getpgrp(0x0) ptrace$getregset(0x4204, r2, 0x6, &(0x7f00000000c0)={&(0x7f0000000500)=""/137, 0x89}) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffd) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0) r6 = socket$inet6(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000a, 0x42032, 0xffffffffffffffff, 0x180000000) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) 4m8.416732972s ago: executing program 32 (id=28): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="8000000000000000240012800900eb7537a11d5d862482c501007866726d00000000140002800800020002000010d6e18c70ad809890554045270800010003000000140003007866726dd91f3a51c0809c8e2842f9e38037811adddec8b87e7cce9517512de6fea3093baa31dad883aaad"], 0x58}}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4b800, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000640), 0x2) r2 = getpgrp(0x0) ptrace$getregset(0x4204, r2, 0x6, &(0x7f00000000c0)={&(0x7f0000000500)=""/137, 0x89}) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffd) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0) r6 = socket$inet6(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000a, 0x42032, 0xffffffffffffffff, 0x180000000) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) 3.254413211s ago: executing program 1 (id=5148): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffffff, 0x0, 0x1001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x88c, 0x30, 0xffff, 0x3, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8001, 0x5, 0x0, 0x0, 0x7f, 0x0, 0x22, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x437, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1a6d, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x7, 0x20, 0x0, 0xfffffffe, {0x4, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x2, 0x4, 0x0, 0x0, 0x1, 0x1, 0x25d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x2, 0x8]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r0, @ANYBLOB], 0xc4}}, 0x4008800) sendto$inet6(r3, &(0x7f00000001c0)="12339d48aee4c99e3be56d957109a766a5034a15a12a", 0x16, 0x800, &(0x7f0000000200)={0xa, 0x4e23, 0x100000, @private0, 0x7}, 0x1c) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f80965b1734afd701fa4a80b7db1058a610bd104ea6f32d5300b2302c8ec8788b7069a6590f0ced16c80fb1a2712986fec9662119537f9f43df037eada616f0fdffdb0526c142f0fe9b53fac87604a6a10915d7ada099e971af83c02516d2bfb170a199201b997d98a62eeffaf5b74115637de5fd6e9d503e216caa5c144cb4eed48a7ab2d4e88998f1bc4df16a3766f2a48b1a079f99a1ac50c36b2e83b9675620a3246"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x2, 0x12) dup(r3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) acct(0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setpriority(0x1, 0x0, 0x5) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) 2.837823187s ago: executing program 4 (id=5159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRESDEC=r0], 0x7c}}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) (async) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r4, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000800)=r4, 0x4) (async) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000800)=r4, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}]}}}]}, 0x7c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}]}}}]}, 0x7c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa8, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r10, 0x1, 0x43, 0x0, &(0x7f0000000040)=0x47) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000840)=ANY=[@ANYRESOCT=r6, @ANYRES16=0x0, @ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRESDEC=r1], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) r13 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) 1.862274622s ago: executing program 2 (id=5178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0xa, 0x3) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x330, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = epoll_create1(0x80000) sendfile(r2, r2, &(0x7f0000000080)=0x800, 0x400) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.829323553s ago: executing program 4 (id=5179): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0xa, 0x3) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x330, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = epoll_create1(0x80000) sendfile(r2, r2, &(0x7f0000000080)=0x800, 0x400) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.828721942s ago: executing program 1 (id=5180): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="060000000000000000000000000000000000000044776721647f9e81f9c72727f836c451405731e52e858cdee6404545b5df9fc41714b1327b771fe4f3bef0ba126e0ca43dc4b057e09b703788c7038241163c3f2439db4a2c07ba0c07c1615d6325a423c9e1a74329651a1c2e2bd71cab2940a3b533c2dadd1f794b595d76e702ad52478804aac23e206f4ff3fb1c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000500"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x12, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000017000000000000003e0f000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185900000200000000000000000000009500000000000000bf91000000000000b702000000e300008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x6, 0xa3, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000003c0), &(0x7f00000004c0)=[{0x5, 0x1, 0x3, 0x9}, {0x4, 0x1, 0x3, 0x7}, {0x5, 0x4, 0x2, 0x1}, {0x5, 0x4, 0xb, 0x2}, {0x3, 0x2, 0x9, 0x6}, {0x4, 0x2, 0xb, 0x8}], 0x10, 0x5}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) stat(0x0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYRES16=r1, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="3075253f97c78b70e75f469022b12c3de45ca0c79c5217f2f164e61a5f0967ad748f3e080d98a0bd726374b642dda15d32f838df70ab74d927f8eef21675a01f18cc2a8a1a94005aa96ffde0a7d0c10ec126e5ad3b33a9b21f814bac9b701c92d22baa8ef2ff024dc09d10", @ANYRES16, @ANYRES32, @ANYRES32], 0xffffffffffffff41, 0x24008084}, 0x80) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r4) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=ANY=[@ANYRESDEC, @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES64, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r2, @ANYBLOB="00000200", @ANYRES64, @ANYBLOB="101134a98f83abd7970f8d53c9fe3b0e6f2c99609640b6082ec96d74eafc70e18e1e49ecf606bb1537f6b19ef8d90d688842f870114104da7884d0745ed38f7c20f69891dd50e5c8717c367677a620b59355abe81a22aa2cd1b0ac7e2cf6ab7dfcfd6605fee5ea4a7fbf0c20a027123bf92a0978a6ffbf15c21324e34f798e62816e56ab9d4e1f", @ANYRES32=0xee00, @ANYRES8, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f", @ANYRESDEC=r3, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x2) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20010e, &(0x7f0000000340)={[], [{@fowner_eq}, {@appraise}, {@flag='silent'}, {@uid_eq={'uid', 0x3d, r3}}, {@obj_user={'obj_user', 0x3d, 'kfree\x00'}}, {@euid_eq={'euid', 0x3d, r3}}]}, 0x3, 0x480, &(0x7f0000000580)="$eJzs3M1vG0UbAPBnN07avm3fhPLZDyBQEBEfaZMW6IEDIJA4gITEpRxDklalaYuaINGqgoJQOaJK3BFHJP4CTnBBwAmJK5y4oEoV6oUCl0Vr7yb21jZOcWsa/36S25nd8e48nh17Z8ZOAENrMv8nidgWET9FxHgj21pgsvHf1Svn5v+4cm4+iSx77bekXu73K+fmy6Ll87YWmak0Iv0wid1tzrt85uzxuaWlxdNFft/Kibf2LZ85+8SxE3NHF48unpw9dOjggZmnn5p9ch3RjHXcc1te113vntqz86XXL74yf/jiG999kZTxV+Lok8luOx/Osj6fbrC2N6WTWpE4PqDK0LORiMiba7Te/8djJGqr+8bjxQ8GWjnghsoKHXafz4ANLIlB1wAYjPKDPh//lo+IzVEMDTa8y881BkB53FeLR2NPLdJoDIxGK+PbfpqMiMPn//w0f8SNmYcAAGjxVX7/83j1/i+Xxl1N5f5frA1NFGspOyLi9oi4IyLujKiXvTsi7lnn+auLJNfe/6SXriuwHuX3f88Ua1ut939pWWRipMhtr2dGkyPHlhb3F6/JVIxuyvMzXc7x9Qs/ftxpX/P9X/7Iz1/eCxb1uFTb1PqchbmVuX8Tc7PL70fsqrWLP1ldCUgiYmdE7OrtkJurG449+vmeToWr8WdJt0M/25qt9VahbrLPIh5ptP/5qMRfSrqvT2YjsbS4f195VVzr+x8uvNrudYme2r9F38dkefv/r+31vxr/RNK8Xru8/nNc+PmjjmOa6eu6/tc2lCu+78ytrJyeiRhLXm5Uunn77Npzy3xZPo9/am/7/r8j1l6J3RGRX8T3RsR9EXF/0XYPRMSDEbG3S/zfPv/Qm532rbP9+y6Pf6HS/hOtRSrtv5YYi+qW9omR49982XrEtWRv738H66mpYkvx/vfL1i5x9VKv67uaAQAA4NaTRsS2SNLp1XSaTk/Xv8O/Kd+0dGp55bEjp94+udD4jcBEjKblTFdjPrgxHzpTDOvL/Gwlf6CYR/kkNq9+6XBh0MHDkNvaof/nfh2KbwDBkOvDOhpwi6rVlzG7yDr/Qgi4tfn8h+HVtv8n1b8EAmxEbfr/lkHUA7j52n3+v7eWzMZvZmWAm6rS/y37wRAx/wfDS/+H4dXc/035w9BY3hL//CN5CYlrEpH+J6rRn0TSvhf8lfXpFNv6cJzD3cuM9KeqY2Vi0O9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fF3AAAA///YVfAE") r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r9) getsockname$packet(r9, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x81ff, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x4817, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r10, 0x826d, 0x68020}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000080)={@private1, r10}, 0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000240)={r8, @in6={{0xa, 0x4e28, 0x8, @empty, 0x1000}}, 0x3, 0x401, 0x3, 0xcb6d, 0x81, 0x800, 0x1}, &(0x7f0000000000)=0x9c) 1.729927894s ago: executing program 2 (id=5182): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001140)={[{@errors_continue}, {@data_err_abort}, {@init_itable}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b0}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x0, 0x0, 0x7, 0xfffffffffffffffb, 0x1000, 0x2, 0x6, 0xa722, 0x7}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',uname=']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x1, 0x1}, 0xef94, 0x44, &(0x7f0000000300), 0x0, 0x0, 0x200, 0xe, 0x8, 0x7, 0x0}) sendfile(r2, r2, 0x0, 0x800000009) 1.613747036s ago: executing program 1 (id=5184): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000020000000700000000006e1a", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000092fc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x1000000, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x00100000000']) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@remote, 0x5, r2}) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000006, 0x2, @perf_config_ext={0x1, 0x6}, 0x0, 0x10000, 0x1, 0x1, 0x9, 0x20005, 0x2b, 0x0, 0x21, 0x0, 0xffffffffffffff7f}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0x1, 0x0, &(0x7f0000000600)=""/180}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x34) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "e9255bb992464e73a02159d3720df19f7a1dfec3"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x88}}, 0x8010) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adf985}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xfff}]}, 0x3c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)) 1.486520248s ago: executing program 0 (id=5185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7030000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.452724108s ago: executing program 0 (id=5186): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffffff, 0x0, 0x1001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x88c, 0x30, 0xffff, 0x3, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8001, 0x5, 0x0, 0x0, 0x7f, 0x0, 0x22, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x437, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1a6d, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x7, 0x20, 0x0, 0xfffffffe, {0x4, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x2, 0x4, 0x0, 0x0, 0x1, 0x1, 0x25d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x2, 0x8]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r0, @ANYBLOB], 0xc4}}, 0x4008800) sendto$inet6(r3, &(0x7f00000001c0)="12339d48aee4c99e3be56d957109a766a5034a15a12a", 0x16, 0x800, &(0x7f0000000200)={0xa, 0x4e23, 0x100000, @private0, 0x7}, 0x1c) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f80965b1734afd701fa4a80b7db1058a610bd104ea6f32d5300b2302c8ec8788b7069a6590f0ced16c80fb1a2712986fec9662119537f9f43df037eada616f0fdffdb0526c142f0fe9b53fac87604a6a10915d7ada099e971af83c02516d2bfb170a199201b997d98a62eeffaf5b74115637de5fd6e9d503e216caa5c144cb4eed48a7ab2d4e88998f1bc4df16a3766f2a48b1a079f99a1ac50c36b2e83b9675620a3246"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x2, 0x12) dup(r3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) acct(0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setpriority(0x1, 0x0, 0x5) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) 1.152760553s ago: executing program 0 (id=5187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_raw(r0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x481, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 928.226216ms ago: executing program 0 (id=5188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f00000003c0), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) unshare(0x68040200) 927.781056ms ago: executing program 5 (id=5189): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) 869.857847ms ago: executing program 1 (id=5190): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r1 = socket$kcm(0x11, 0x200000000000003, 0x300) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001000)=""/253, 0xfd}], 0x1}, 0x2) 869.474867ms ago: executing program 5 (id=5191): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf25040000"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x100202, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000f}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0401, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x20000000000, r0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000500)={0x0, 0x1, 0x8, 0x0, 0x4401}, 0xc) 815.891018ms ago: executing program 4 (id=5192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0xa, 0x3) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x330, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = epoll_create1(0x80000) sendfile(r2, r2, &(0x7f0000000080)=0x800, 0x400) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 795.727048ms ago: executing program 0 (id=5193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a30000000000900010073797a4200000000427ba1551ce90b04100011800c000100636f756e7465720014000000100001000000", @ANYRES8=r0, @ANYRES32=r0], 0x98}, 0x1, 0x0, 0x0, 0x8001}, 0x800) r1 = semget(0x2, 0x3, 0x4) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(r1, &(0x7f0000000380)=[{0x1, 0xb3, 0x1000}, {0x0, 0x105, 0x800}, {0x4, 0x41d, 0x1000}], 0x3, &(0x7f0000000180)={0x0, 0x989680}) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000d4}, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000ec0)={0x0, 0x0}) stat(&(0x7f0000007040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000008040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2000, 0x100, &(0x7f0000009040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000f80), 0x1, 0x0) r9 = syz_io_uring_setup(0x7b66, &(0x7f0000000fc0)={0x0, 0xedb7, 0x8, 0x0, 0x241}, &(0x7f0000009140), &(0x7f0000009180)) r10 = accept$packet(r2, 0x0, &(0x7f00000091c0)) r11 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) io_uring_register$IORING_REGISTER_BUFFERS(r11, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r14 = openat$uhid(0xffffffffffffff9c, &(0x7f0000009200), 0x802, 0x0) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='sys_enter\x00', r15}, 0x18) r16 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r16, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009380)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000440)="e324edacd3338636ff6f0bba06c07ddbe962ef36aedd794ad14e830d42e4d310e898bbbc18e7f9ce61bbaaefa7402556e02bd04f93b677de5bf0082b14306dcc08114353aa300aaff727464f11abd304bd2264908bb78d035037be10e81ef30a51c0420b00b8f76f29100617696e6507c848d9043f00c564", 0x78}, {&(0x7f00000004c0)="cb74d69c4f99b95ee3b29a57af88aa8adea8dc6bfb9b458b57fc9e02d9102d8aa1d24ed4fe775b3dd08d029a5c95ddd40fb49173578e5a298b77e9d26acb91fc6beeab08749c4edf5f774a192163155236368e54dd3f02be81c16cb2215b13305fc95c1983e36da2e5fa11be280d9e7cf5f20b18b2b2699fe16be511c51255f6e611450d2cba10017585a0f5af89423c6c82550ef04db0d1be7ca4c3a88f6efe98c017f4ea477e84cda59cbc9426892572a7e47278d99db7fff1fd18f2c98dc50aa73506eae568585334ae0aa50556505d499848331d41a24def865567c2508d", 0xe0}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000003040)="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", 0x1000}, {&(0x7f00000005c0)="4e10a30897cec48e5243dc4c96130b322a82c77f9eb3294476273c3c28c51328949d10dcc06255260046b5304916edc26412db2ab26febd15a27f585db3a57eea0efc9b28a5f2de8888152396ea4cd08", 0x50}, {&(0x7f0000004040)="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", 0x1000}, {&(0x7f0000000340)="a7f08dd3f851dd403f7d80d5a72df5a7c9f3bc8e6e5efe14895f879e49c505632fc7d6802243f572c74b7991c66548e12018a22a64b053bd", 0x38}, {&(0x7f00000007c0)="aa6c3f04f711631231d89346182bc74388118f5aec443a0705271620e6cbd0cd38d95dfcc7bb3d575938884cf4fdf4afeebc47e60e3aeb14ea5c289d458f4f803d22680b9e431014177dbc4d854ac338af2b18cbfc30255638ebd4e023d794e35c604845deee568ad12b69d2ffc742809bf74f160114e48fee61b038504d426a5504c84016afc4aad18c38981f15cb7855a7a6458db70d506bdec5de61fc3c872bbb5c81cc854ee6cec4cce75e1cf37fd975f30b3acbb8cca96f5c344f17dc1ce051256244823452", 0xc8}], 0x8, 0x0, 0x0, 0x98ad0aed1dd9c72b}}, {{&(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d80)=[{&(0x7f00000009c0)="c5b5a9e9cb8ec56a87e6fce74aa4b1bf5b00eb3e696db267c7f5365eca23268d3d998e52b81f335f5d9add62d41ded83664fa38618200ef683bcd0be1a70aca5f24d796024434124e437559f2888df10aff0645d674b97851bcbbfd45a680d02afdfb8e7ae3e1870431d8f6f2939cc987f5021eae967df8166c9781e93ef94311b88f214097de082633bd354dc1ccfaaf79ffa990523ca743e71e939fad271a5da8a7550e90a4a61a3de10c2fc9ac7d2f1e4", 0xb2}, {&(0x7f0000000a80)="9d4ca0f87c99a3c84606ff50d97f78cb9c1437bfa912575187a6b86f714368057169913221d3ca76785268fcf6bfa84b517ed18351dd901bff8451fae889e3970be6", 0x42}, {&(0x7f0000005040)="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", 0x1000}, {&(0x7f0000006040)="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", 0x1000}, {&(0x7f0000000b00)="da430b492bd996150c4c0b2ab3a8f1cc940d097e4b19bb77dd59bde90cc1f2e062d8669c4b905c8db09ccbb1d657226eebc1dde614716afe7df7a5e8ab23e0e66fa4198d806259d8bdb9c39d861551518aa3a95553d4c929d61fe9f0b481eb8ee19b7698e86ea83bab654ff12f0ac1d54ff03ef73153d1b0b11274290b86349c6444a4e3f4a421c074", 0x89}, {&(0x7f0000000bc0)="7a535f27b6fbe560ae53f6d39bd6248968256480dfcf3f2a9e5a343a548355f3a7244a988cba3880ddc6a358f1d2adee9fef163b2452319bbe5fe5cfb94bbe392d00265b5235d9c825841103a8dbc3f4ce7780ce42dcd95565fe7571fbc433fc6f505ada8da24f496c9a153897da75cffba9006d005b4dbd5ae610a1e3d0c5df603a93a1996dc7d3dd260d64f2e273e29c24a7af58d47b20b5094cefa4395b1bfaa463acd90c8929d42ea3d3f8b5dc0d7d28f0d3748ec8dfaf040c690033626d898bd952e33396432c9c682b68aef6d7289bbc304c8e1d940080eb67da95ecdca0582fdc92777609f4ebd9a4288cc0a739", 0xf1}, {&(0x7f0000000cc0)="a4417dfe87653d11d41a3b644e05bf5653424de4e380f3051ba04e8d743640084a74c95871d7d05c5dfe120248a3c042177a198dc75a01de89977e", 0x3b}, {&(0x7f0000000d00)="521f15dc06d7d5e994a1e7816c9fa2638ac17944b18444f1dceee620bcb9ca7ba675d942cb796efae9a01a3ddc36676431f2d9eb4b822342b4dea699", 0x3c}, {&(0x7f0000000d40)}], 0x9, &(0x7f0000009400)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r8, r2]}}, @rights={{0x38, 0x1, 0x1, [r2, r2, r9, r10, r2, r11, r4, r12, r4, r2]}}, @rights={{0x34, 0x1, 0x1, [r0, r3, r3, r4, r13, r0, r3, r4, r2]}}, @rights={{0x50, 0x1, 0x1, [r3, r0, r14, r3, r2, r15, r3, r4, r16, r12, r16, 0xffffffffffffffff, 0xffffffffffffffff, r0, r12, r2]}}], 0x120, 0x4011}}], 0x2, 0x8081) 725.406429ms ago: executing program 5 (id=5194): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf25040000"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000f}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0401, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x20000000000, r0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000500)={0x0, 0x1, 0x8, 0x0, 0x4401}, 0xc) 570.412662ms ago: executing program 0 (id=5195): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001c80), r2) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f00000022c0)=ANY=[@ANYBLOB='( P\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf250900000008000100010000000c0006000100000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x854) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18060000000000000000000000040000000100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000020000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) lseek(r5, 0xe, 0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x74, &(0x7f0000000200)={r8, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) syz_read_part_table(0x1060, &(0x7f0000001140)="$eJzsz8FtwkAQBdAfbby2lUMuKcC3HJIrjYBogipogTa4QBF0QRN0ALINLSAf3tNKX7s7M9KERTjM8XvOaihN0+aetEnK8399SfI33brplG4syddrwGf6MT6SPqchye6WZPNzber4Xup/kn2ffCd1bqnZHt++KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAs0CMAAP//M3sKqQ==") r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 537.850232ms ago: executing program 5 (id=5196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 458.005113ms ago: executing program 5 (id=5197): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) getrandom(0x0, 0x0, 0x0) 450.373474ms ago: executing program 2 (id=5198): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = gettid() r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000006342b6c0c7405e100752bab769c5165fbf94c343bbd403a565b7ec866f7d3bcf9ffd87d02116", @ANYRES16=r2, @ANYBLOB="8b332dbd70000000000015000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042cbd7000fedbdf25facbb70900000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000100000074000000110007006152dbe65dda96ab32f3f9d67c000000050008000100000018005080040006000800030005ac0f000700040078f23f0004000b0004002800"], 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004000) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x5c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x4a}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e264438969"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x1) dup2(r4, r5) fcntl$setown(r4, 0x8, r1) tkill(r1, 0x13) 446.931583ms ago: executing program 5 (id=5199): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0x63e4b27f, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4000, &(0x7f0000000080)=0x207e, 0x9) (fail_nth: 2) 177.539598ms ago: executing program 2 (id=5200): setsockopt(0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000b80)="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", 0x1000) timer_create(0x8a10341f9081dab5, 0x0, &(0x7f00000000c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x281}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=5201): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000020000000700000000006e1a", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000092fc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x1000000, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x00100000000']) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@remote, 0x5, r2}) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000006, 0x2, @perf_config_ext={0x1, 0x6}, 0x0, 0x10000, 0x1, 0x1, 0x9, 0x20005, 0x2b, 0x0, 0x21, 0x0, 0xffffffffffffff7f}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0x1, 0x0, &(0x7f0000000600)=""/180}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x34) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "e9255bb992464e73a02159d3720df19f7a1dfec3"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="880000000008010300000000000000000a00000206000240001c000006000240655800000900810073797a3000000000050003001200000005000300210000000600024000150000140004800800014000000007080001400000000b2c00048008000240024000000800044000000000080001400000000408000740000000080800054000000b814c82be1e30abd26473c312f0daa51a1b46a4beda197968571b564311f88bbf24aa5bb950eecb7168eba0660b0046b07819641a466e38e6314bb998c27e816e93f6d877575cc416bece0adb1b38f4673467acc953bc225cb558185093f95d39a76654a470098bc1da2dc671f598e9697f9e84aad53d0a2799a48604d3df51439b7d14f4526710670a8fe1597330ab0a713e99f0b13ec442c3ce9a4d993d790a598101da1cf64e033a3894cda50dfb5e552b78dcac1fb31f5ef1fd0d2ae2544c2ded00244462fa4057575e88fcb394613322accd604318f75ad999e5f2b25af1e803e5fffdaf438fa3d3ca867fbae384c8054a2c9b655844"], 0x88}}, 0x8010) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adf985}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xfff}]}, 0x3c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)) kernel console output (not intermixed with test programs): =0 arch=c000003e syscall=321 compat=0 ip=0x7f4257c4e929 code=0x7ffc0000 [ 238.539806][ T29] audit: type=1326 audit(1751637182.350:22553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.2.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4257c4e929 code=0x7ffc0000 [ 238.563474][ T29] audit: type=1326 audit(1751637182.350:22554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.2.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4257c4e929 code=0x7ffc0000 [ 238.587177][ T29] audit: type=1326 audit(1751637182.350:22555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.2.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4257c4e929 code=0x7ffc0000 [ 238.630449][ T29] audit: type=1326 audit(1751637182.410:22556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.2.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4257c4d290 code=0x7ffc0000 [ 238.654148][ T29] audit: type=1326 audit(1751637182.410:22557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.2.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4257c50157 code=0x7ffc0000 [ 238.677813][ T29] audit: type=1326 audit(1751637182.410:22558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.2.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4257c4e929 code=0x7ffc0000 [ 238.759735][T15546] loop4: detected capacity change from 0 to 128 [ 238.897818][T15558] lo speed is unknown, defaulting to 1000 [ 238.912239][T15558] dummy0 speed is unknown, defaulting to 1000 [ 239.117090][T15575] __nla_validate_parse: 3 callbacks suppressed [ 239.117109][T15575] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4208'. [ 239.193946][T15579] loop2: detected capacity change from 0 to 128 [ 239.212954][T15579] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 239.306700][T15590] loop4: detected capacity change from 0 to 512 [ 239.335790][T15590] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4214: bg 0: block 248: padding at end of block bitmap is not set [ 239.361678][T15590] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4214: Failed to acquire dquot type 1 [ 239.423676][T15590] EXT4-fs (loop4): 1 truncate cleaned up [ 239.435389][T15590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.462943][T15590] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.499217][T15590] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4214: Failed to acquire dquot type 1 [ 239.538104][T15607] FAULT_INJECTION: forcing a failure. [ 239.538104][T15607] name failslab, interval 1, probability 0, space 0, times 0 [ 239.552848][T15607] CPU: 1 UID: 0 PID: 15607 Comm: syz.1.4218 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 239.552955][T15607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.552971][T15607] Call Trace: [ 239.552978][T15607] [ 239.552987][T15607] __dump_stack+0x1d/0x30 [ 239.553016][T15607] dump_stack_lvl+0xe8/0x140 [ 239.553041][T15607] dump_stack+0x15/0x1b [ 239.553062][T15607] should_fail_ex+0x265/0x280 [ 239.553158][T15607] ? __pfx_proc_self_get_link+0x10/0x10 [ 239.553203][T15607] ? proc_self_get_link+0x97/0x110 [ 239.553245][T15607] should_failslab+0x8c/0xb0 [ 239.553336][T15607] __kmalloc_cache_noprof+0x4c/0x320 [ 239.553431][T15607] ? __pfx_proc_self_get_link+0x10/0x10 [ 239.553464][T15607] proc_self_get_link+0x97/0x110 [ 239.553544][T15607] pick_link+0x47a/0x830 [ 239.553576][T15607] step_into+0x7b6/0x820 [ 239.553605][T15607] ? inode_permission+0x106/0x310 [ 239.553635][T15607] link_path_walk+0x571/0x900 [ 239.553668][T15607] path_openat+0x1de/0x2170 [ 239.553778][T15607] ? _parse_integer_limit+0x170/0x190 [ 239.553826][T15607] do_filp_open+0x109/0x230 [ 239.553947][T15607] do_sys_openat2+0xa6/0x110 [ 239.554021][T15607] __x64_sys_openat+0xf2/0x120 [ 239.554050][T15607] x64_sys_call+0x1af/0x2fb0 [ 239.554071][T15607] do_syscall_64+0xd2/0x200 [ 239.554090][T15607] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 239.554124][T15607] ? clear_bhb_loop+0x40/0x90 [ 239.554186][T15607] ? clear_bhb_loop+0x40/0x90 [ 239.554214][T15607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.554285][T15607] RIP: 0033:0x7fa1f6e8d290 [ 239.554301][T15607] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 239.554321][T15607] RSP: 002b:00007fa1f54f6f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 239.554345][T15607] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa1f6e8d290 [ 239.554360][T15607] RDX: 0000000000000000 RSI: 00007fa1f6f10c51 RDI: 00000000ffffff9c [ 239.554452][T15607] RBP: 00007fa1f6f10c51 R08: 0000000000000000 R09: 0000000000000000 [ 239.554464][T15607] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 239.554475][T15607] R13: 0000000000000000 R14: 00007fa1f70b5fa0 R15: 00007ffc175686f8 [ 239.554496][T15607] [ 239.827075][T11656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.843793][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 239.901157][T15620] FAULT_INJECTION: forcing a failure. [ 239.901157][T15620] name failslab, interval 1, probability 0, space 0, times 0 [ 239.916183][T15620] CPU: 1 UID: 0 PID: 15620 Comm: syz.4.4220 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 239.916220][T15620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.916237][T15620] Call Trace: [ 239.916247][T15620] [ 239.916257][T15620] __dump_stack+0x1d/0x30 [ 239.916340][T15620] dump_stack_lvl+0xe8/0x140 [ 239.916368][T15620] dump_stack+0x15/0x1b [ 239.916392][T15620] should_fail_ex+0x265/0x280 [ 239.916434][T15620] should_failslab+0x8c/0xb0 [ 239.916467][T15620] __kmalloc_noprof+0xa5/0x3e0 [ 239.916501][T15620] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 239.916542][T15620] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 239.916664][T15620] genl_family_rcv_msg_doit+0x48/0x1b0 [ 239.916699][T15620] ? security_capable+0x83/0x90 [ 239.916730][T15620] ? ns_capable+0x7d/0xb0 [ 239.916836][T15620] genl_rcv_msg+0x422/0x460 [ 239.916913][T15620] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 239.916962][T15620] netlink_rcv_skb+0x120/0x220 [ 239.917012][T15620] ? __pfx_genl_rcv_msg+0x10/0x10 [ 239.917049][T15620] genl_rcv+0x28/0x40 [ 239.917075][T15620] netlink_unicast+0x5a1/0x670 [ 239.917141][T15620] netlink_sendmsg+0x58b/0x6b0 [ 239.917240][T15620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.917265][T15620] __sock_sendmsg+0x145/0x180 [ 239.917319][T15620] ____sys_sendmsg+0x31e/0x4e0 [ 239.917367][T15620] ___sys_sendmsg+0x17b/0x1d0 [ 239.917424][T15620] __x64_sys_sendmsg+0xd4/0x160 [ 239.917506][T15620] x64_sys_call+0x2999/0x2fb0 [ 239.917534][T15620] do_syscall_64+0xd2/0x200 [ 239.917558][T15620] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 239.917624][T15620] ? clear_bhb_loop+0x40/0x90 [ 239.917653][T15620] ? clear_bhb_loop+0x40/0x90 [ 239.917683][T15620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.917712][T15620] RIP: 0033:0x7f12ee92e929 [ 239.917732][T15620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.917819][T15620] RSP: 002b:00007f12ecf97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.917844][T15620] RAX: ffffffffffffffda RBX: 00007f12eeb55fa0 RCX: 00007f12ee92e929 [ 239.917861][T15620] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000007 [ 239.917877][T15620] RBP: 00007f12ecf97090 R08: 0000000000000000 R09: 0000000000000000 [ 239.917893][T15620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.917909][T15620] R13: 0000000000000000 R14: 00007f12eeb55fa0 R15: 00007ffd15633278 [ 239.917997][T15620] [ 240.244884][T15626] cgroup: No subsys list or none specified [ 240.311009][T15635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4227'. [ 240.345963][T15641] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4228'. [ 240.416102][T15651] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4233'. [ 240.677878][T15669] loop2: detected capacity change from 0 to 512 [ 240.717325][T15669] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4237: bg 0: block 248: padding at end of block bitmap is not set [ 240.791234][T15669] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4237: Failed to acquire dquot type 1 [ 240.818166][T15669] EXT4-fs (loop2): 1 truncate cleaned up [ 240.860957][T15669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.894630][T15669] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.929275][T15693] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4244'. [ 240.954793][T15669] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4237: Failed to acquire dquot type 1 [ 241.101389][T15698] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4245'. [ 241.197976][T15698] vhci_hcd: invalid port number 96 [ 241.203167][T15698] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 241.241033][T12016] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.259174][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 241.274965][T15705] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4248'. [ 241.347941][T15705] vhci_hcd: invalid port number 96 [ 241.353152][T15705] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 241.507211][T15720] loop5: detected capacity change from 0 to 128 [ 241.514735][T15720] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 241.540059][T15722] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4253'. [ 241.569093][T15724] loop5: detected capacity change from 0 to 512 [ 241.620605][T15732] loop4: detected capacity change from 0 to 512 [ 241.639787][T15732] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4258: bg 0: block 248: padding at end of block bitmap is not set [ 241.654520][T15732] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4258: Failed to acquire dquot type 1 [ 241.668773][T15732] EXT4-fs (loop4): 1 truncate cleaned up [ 241.675021][T15732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.687704][T15732] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.687795][T15735] lo speed is unknown, defaulting to 1000 [ 241.704949][T15735] dummy0 speed is unknown, defaulting to 1000 [ 241.716924][T15732] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4258: Failed to acquire dquot type 1 [ 241.736503][T15738] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4259'. [ 241.756582][T15741] netlink: 'syz.5.4260': attribute type 21 has an invalid length. [ 241.764904][T15741] netlink: 'syz.5.4260': attribute type 1 has an invalid length. [ 241.773373][T15741] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4260'. [ 241.809702][T11656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.819282][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 241.856894][T15749] loop5: detected capacity change from 0 to 128 [ 241.866209][T15749] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 242.271907][T15792] loop2: detected capacity change from 0 to 2048 [ 242.281267][T15792] EXT4-fs (loop2): #clusters per group too big: 151011328 [ 242.327498][T15795] lo speed is unknown, defaulting to 1000 [ 242.334051][T15795] dummy0 speed is unknown, defaulting to 1000 [ 242.420245][T15811] loop2: detected capacity change from 0 to 512 [ 242.428478][T15811] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.4286: bad orphan inode 13 [ 242.439078][T15811] ext4_test_bit(bit=12, block=4) = 1 [ 242.444466][T15811] is_bad_inode(inode)=0 [ 242.448980][T15811] NEXT_ORPHAN(inode)=0 [ 242.453067][T15811] max_ino=32 [ 242.456281][T15811] i_nlink=1 [ 242.461600][T15811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.474874][T15811] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.4286: Unrecognised inode hash code 20 [ 242.486348][T15811] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.4286: Corrupt directory, running e2fsck is recommended [ 242.500790][T15811] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.4286: corrupted in-inode xattr: e_value out of bounds [ 242.548836][T15811] cgroup: No subsys list or none specified [ 242.557669][T15811] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.4286: Unrecognised inode hash code 20 [ 242.569327][T15811] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.4286: Corrupt directory, running e2fsck is recommended [ 242.610019][T12016] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.653402][T15831] loop2: detected capacity change from 0 to 512 [ 242.674535][T15831] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4290: bg 0: block 248: padding at end of block bitmap is not set [ 242.728379][T15831] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4290: Failed to acquire dquot type 1 [ 242.743645][T15838] loop5: detected capacity change from 0 to 512 [ 242.753454][T15831] EXT4-fs (loop2): 1 truncate cleaned up [ 242.804792][T15831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.863083][T15831] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.914853][T15831] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4290: Failed to acquire dquot type 1 [ 242.944028][T15845] loop4: detected capacity change from 0 to 512 [ 242.976497][T12016] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.990956][ T173] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 243.160407][T15860] FAULT_INJECTION: forcing a failure. [ 243.160407][T15860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.173625][T15860] CPU: 0 UID: 0 PID: 15860 Comm: syz.2.4302 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 243.173663][T15860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.173737][T15860] Call Trace: [ 243.173744][T15860] [ 243.173754][T15860] __dump_stack+0x1d/0x30 [ 243.173827][T15860] dump_stack_lvl+0xe8/0x140 [ 243.173851][T15860] dump_stack+0x15/0x1b [ 243.173910][T15860] should_fail_ex+0x265/0x280 [ 243.173951][T15860] should_fail+0xb/0x20 [ 243.173996][T15860] should_fail_usercopy+0x1a/0x20 [ 243.174039][T15860] _copy_from_user+0x1c/0xb0 [ 243.174066][T15860] __sys_connect+0xd0/0x2b0 [ 243.174164][T15860] __x64_sys_connect+0x3f/0x50 [ 243.174201][T15860] x64_sys_call+0x1daa/0x2fb0 [ 243.174230][T15860] do_syscall_64+0xd2/0x200 [ 243.174282][T15860] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 243.174316][T15860] ? clear_bhb_loop+0x40/0x90 [ 243.174396][T15860] ? clear_bhb_loop+0x40/0x90 [ 243.174418][T15860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.174440][T15860] RIP: 0033:0x7f4257c4e929 [ 243.174458][T15860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.174523][T15860] RSP: 002b:00007f42562b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 243.174546][T15860] RAX: ffffffffffffffda RBX: 00007f4257e75fa0 RCX: 00007f4257c4e929 [ 243.174558][T15860] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000004 [ 243.174570][T15860] RBP: 00007f42562b7090 R08: 0000000000000000 R09: 0000000000000000 [ 243.174582][T15860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.174605][T15860] R13: 0000000000000000 R14: 00007f4257e75fa0 R15: 00007fffe4fa7828 [ 243.174731][T15860] [ 243.431921][T15868] loop2: detected capacity change from 0 to 512 [ 243.478842][T15868] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4307: bg 0: block 248: padding at end of block bitmap is not set [ 243.500198][T15868] __quota_error: 402 callbacks suppressed [ 243.500281][T15868] Quota error (device loop2): write_blk: dquota write failed [ 243.513581][T15868] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 243.543348][T15868] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4307: Failed to acquire dquot type 1 [ 243.569521][T15868] EXT4-fs (loop2): 1 truncate cleaned up [ 243.587116][T15868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.617841][T15868] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.658368][T15868] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 243.668944][T15868] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 131074 [ 243.678831][T15868] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4307: Failed to acquire dquot type 1 [ 243.757099][T12016] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.834009][T15881] loop2: detected capacity change from 0 to 512 [ 243.843898][ T29] audit: type=1326 audit(1751637187.731:22941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.2.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4257c4e929 code=0x7ffc0000 [ 243.899043][ T29] audit: type=1326 audit(1751637187.731:22942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.2.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4257c4e929 code=0x7ffc0000 [ 243.924363][ T29] audit: type=1326 audit(1751637187.731:22943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.2.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4257c4e929 code=0x7ffc0000 [ 243.948061][ T29] audit: type=1326 audit(1751637187.731:22944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.2.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4257c4e929 code=0x7ffc0000 [ 243.973268][ T29] audit: type=1326 audit(1751637187.731:22945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.2.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4257c4e929 code=0x7ffc0000 [ 243.996870][ T29] audit: type=1326 audit(1751637187.731:22946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.2.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4257c4e929 code=0x7ffc0000 [ 244.312111][T15900] __nla_validate_parse: 4 callbacks suppressed [ 244.312127][T15900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4319'. [ 244.364887][T15906] loop4: detected capacity change from 0 to 512 [ 244.373118][T15904] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4320'. [ 244.603510][T15900] vhci_hcd: invalid port number 96 [ 244.608784][T15900] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 244.673236][T15925] netlink: 'syz.2.4328': attribute type 21 has an invalid length. [ 244.681229][T15925] netlink: 'syz.2.4328': attribute type 1 has an invalid length. [ 244.689126][T15925] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4328'. [ 244.746376][T15929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4329'. [ 244.978173][T15947] loop4: detected capacity change from 0 to 128 [ 244.991747][T15947] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 244.999703][T15947] FAT-fs (loop4): Filesystem has been set read-only [ 245.012422][T15947] syz.4.4334: attempt to access beyond end of device [ 245.012422][T15947] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 245.026382][T15947] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 245.034400][T15947] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 245.051552][T15952] syz.4.4334: attempt to access beyond end of device [ 245.051552][T15952] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 245.066288][T15952] Buffer I/O error on dev loop4, logical block 2065, async page read [ 245.078851][T15952] syz.4.4334: attempt to access beyond end of device [ 245.078851][T15952] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 245.093713][T15952] Buffer I/O error on dev loop4, logical block 2066, async page read [ 245.104402][T15952] syz.4.4334: attempt to access beyond end of device [ 245.104402][T15952] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 245.117759][T15952] Buffer I/O error on dev loop4, logical block 2067, async page read [ 245.134550][T15952] syz.4.4334: attempt to access beyond end of device [ 245.134550][T15952] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 245.147886][T15952] Buffer I/O error on dev loop4, logical block 2068, async page read [ 245.157901][T15952] syz.4.4334: attempt to access beyond end of device [ 245.157901][T15952] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 245.171243][T15952] Buffer I/O error on dev loop4, logical block 2069, async page read [ 245.180618][T15952] syz.4.4334: attempt to access beyond end of device [ 245.180618][T15952] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 245.195412][T15952] Buffer I/O error on dev loop4, logical block 2070, async page read [ 245.225746][T15952] syz.4.4334: attempt to access beyond end of device [ 245.225746][T15952] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 245.239202][T15952] Buffer I/O error on dev loop4, logical block 2071, async page read [ 245.252519][T15952] syz.4.4334: attempt to access beyond end of device [ 245.252519][T15952] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 245.265911][T15952] Buffer I/O error on dev loop4, logical block 2072, async page read [ 245.295943][T15947] syz.4.4334: attempt to access beyond end of device [ 245.295943][T15947] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 245.309306][T15947] Buffer I/O error on dev loop4, logical block 2065, async page read [ 245.325461][T15967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4341'. [ 245.334748][T15965] netlink: 'syz.5.4340': attribute type 21 has an invalid length. [ 245.342858][T15947] Buffer I/O error on dev loop4, logical block 2066, async page read [ 245.355933][T15965] netlink: 'syz.5.4340': attribute type 1 has an invalid length. [ 245.365155][T15965] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4340'. [ 245.500487][T15981] random: crng reseeded on system resumption [ 245.730348][T15974] loop2: detected capacity change from 0 to 512 [ 245.814805][T15998] netlink: 'syz.0.4354': attribute type 21 has an invalid length. [ 245.814892][T15998] netlink: 'syz.0.4354': attribute type 1 has an invalid length. [ 245.814904][T15998] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4354'. [ 245.832219][T16002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4353'. [ 245.905580][T16002] vhci_hcd: invalid port number 96 [ 245.905595][T16002] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 245.960466][T16003] loop5: detected capacity change from 0 to 512 [ 245.960718][T16003] journal_path: Non-blockdev passed as './bus' [ 245.960771][T16003] EXT4-fs: error: could not find journal device path [ 246.223238][T16025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4361'. [ 246.337582][T16031] xt_TPROXY: Can be used only with -p tcp or -p udp [ 246.384696][T16031] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 246.384765][T16031] syzkaller1: Linktype set failed because interface is up [ 246.391889][T16036] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4366'. [ 246.416679][ T3358] syzkaller1: tun_net_xmit 90 [ 246.417978][T16031] wireguard0: entered promiscuous mode [ 246.553537][T16052] netlink: 'syz.0.4372': attribute type 21 has an invalid length. [ 246.553572][T16052] netlink: 'syz.0.4372': attribute type 1 has an invalid length. [ 246.627616][T16054] cgroup: No subsys list or none specified [ 246.889070][T16081] loop5: detected capacity change from 0 to 512 [ 247.147518][T16112] random: crng reseeded on system resumption [ 247.268402][T16118] tap0: tun_chr_ioctl cmd 1074025677 [ 247.273848][T16118] tap0: linktype set to 1 [ 247.411962][T16129] netlink: 'syz.5.4402': attribute type 21 has an invalid length. [ 247.420314][T16129] netlink: 'syz.5.4402': attribute type 1 has an invalid length. [ 247.687381][T16158] loop4: detected capacity change from 0 to 1024 [ 247.694322][T16158] EXT4-fs: Ignoring removed nobh option [ 247.717970][T16158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.734578][T16165] netlink: 'syz.0.4413': attribute type 21 has an invalid length. [ 247.734660][T16158] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.4411: Allocating blocks 385-513 which overlap fs metadata [ 247.742508][T16165] netlink: 'syz.0.4413': attribute type 1 has an invalid length. [ 247.786138][T16158] EXT4-fs (loop4): pa ffff888106a64f50: logic 16, phys. 129, len 24 [ 247.794412][T16158] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 247.903129][T11656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.939026][T16185] FAULT_INJECTION: forcing a failure. [ 247.939026][T16185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.952199][T16185] CPU: 1 UID: 0 PID: 16185 Comm: syz.0.4418 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 247.952286][T16185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.952304][T16185] Call Trace: [ 247.952313][T16185] [ 247.952323][T16185] __dump_stack+0x1d/0x30 [ 247.952402][T16185] dump_stack_lvl+0xe8/0x140 [ 247.952427][T16185] dump_stack+0x15/0x1b [ 247.952510][T16185] should_fail_ex+0x265/0x280 [ 247.952552][T16185] should_fail+0xb/0x20 [ 247.952590][T16185] should_fail_usercopy+0x1a/0x20 [ 247.952683][T16185] _copy_to_user+0x20/0xa0 [ 247.952712][T16185] simple_read_from_buffer+0xb5/0x130 [ 247.952752][T16185] proc_fail_nth_read+0x100/0x140 [ 247.952838][T16185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.952883][T16185] vfs_read+0x1a0/0x6f0 [ 247.952922][T16185] ? __rcu_read_unlock+0x4f/0x70 [ 247.952951][T16185] ? __fget_files+0x184/0x1c0 [ 247.953013][T16185] ? __sys_getsockname+0xb1/0x180 [ 247.953050][T16185] ksys_read+0xda/0x1a0 [ 247.953145][T16185] __x64_sys_read+0x40/0x50 [ 247.953235][T16185] x64_sys_call+0x2d77/0x2fb0 [ 247.953284][T16185] do_syscall_64+0xd2/0x200 [ 247.953308][T16185] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 247.953342][T16185] ? clear_bhb_loop+0x40/0x90 [ 247.953370][T16185] ? clear_bhb_loop+0x40/0x90 [ 247.953457][T16185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.953478][T16185] RIP: 0033:0x7f49cabfd33c [ 247.953541][T16185] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 247.953574][T16185] RSP: 002b:00007f49c9246030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 247.953599][T16185] RAX: ffffffffffffffda RBX: 00007f49cae26080 RCX: 00007f49cabfd33c [ 247.953631][T16185] RDX: 000000000000000f RSI: 00007f49c92460a0 RDI: 0000000000000004 [ 247.953646][T16185] RBP: 00007f49c9246090 R08: 0000000000000000 R09: 0000000000000000 [ 247.953661][T16185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.953753][T16185] R13: 0000000000000001 R14: 00007f49cae26080 R15: 00007ffc9cc968e8 [ 247.953777][T16185] [ 248.206402][T16193] netlink: 'syz.0.4424': attribute type 21 has an invalid length. [ 248.215697][T16193] netlink: 'syz.0.4424': attribute type 1 has an invalid length. [ 248.249231][T16197] loop4: detected capacity change from 0 to 512 [ 248.268812][T16197] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.4426: bad orphan inode 13 [ 248.282060][T16197] ext4_test_bit(bit=12, block=4) = 1 [ 248.287701][T16197] is_bad_inode(inode)=0 [ 248.292116][T16197] NEXT_ORPHAN(inode)=0 [ 248.296348][T16197] max_ino=32 [ 248.299630][T16197] i_nlink=1 [ 248.303322][T16197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.329038][T16197] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.4426: Unrecognised inode hash code 20 [ 248.340775][T16197] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4426: Corrupt directory, running e2fsck is recommended [ 248.369701][T16197] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.4426: corrupted in-inode xattr: e_value out of bounds [ 248.418277][T16197] cgroup: No subsys list or none specified [ 248.434993][T16197] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.4426: Unrecognised inode hash code 20 [ 248.446522][T16197] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4426: Corrupt directory, running e2fsck is recommended [ 248.544845][T11656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.559083][T16226] netlink: 'syz.0.4438': attribute type 21 has an invalid length. [ 248.566972][T16226] netlink: 'syz.0.4438': attribute type 1 has an invalid length. [ 248.595766][ T29] kauditd_printk_skb: 646 callbacks suppressed [ 248.595840][ T29] audit: type=1326 audit(1751637192.464:23593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16228 comm="syz.4.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ee92e929 code=0x7ffc0000 [ 248.625767][ T29] audit: type=1326 audit(1751637192.464:23594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16228 comm="syz.4.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12ee92e929 code=0x7ffc0000 [ 248.649585][ T29] audit: type=1326 audit(1751637192.464:23595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16228 comm="syz.4.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ee92e929 code=0x7ffc0000 [ 248.673587][ T29] audit: type=1326 audit(1751637192.464:23596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16228 comm="syz.4.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12ee92e929 code=0x7ffc0000 [ 248.697288][ T29] audit: type=1326 audit(1751637192.464:23597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16228 comm="syz.4.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ee92e929 code=0x7ffc0000 [ 248.721051][ T29] audit: type=1326 audit(1751637192.464:23598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16228 comm="syz.4.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12ee92e929 code=0x7ffc0000 [ 248.744713][ T29] audit: type=1326 audit(1751637192.464:23599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16228 comm="syz.4.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ee92e929 code=0x7ffc0000 [ 248.768399][ T29] audit: type=1326 audit(1751637192.464:23600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16228 comm="syz.4.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12ee92d290 code=0x7ffc0000 [ 248.793903][ T29] audit: type=1326 audit(1751637192.464:23601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16228 comm="syz.4.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f12ee930157 code=0x7ffc0000 [ 248.817569][ T29] audit: type=1326 audit(1751637192.464:23602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16228 comm="syz.4.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f12ee92e929 code=0x7ffc0000 [ 248.861759][T16244] random: crng reseeded on system resumption [ 249.039786][T16253] vhci_hcd: invalid port number 96 [ 249.044985][T16253] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 249.046886][T16266] unsupported nla_type 65024 [ 249.082503][T16268] loop5: detected capacity change from 0 to 128 [ 249.178126][T16275] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (133) [ 249.221153][T16275] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 249.227724][T16275] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 249.235377][T16275] vhci_hcd vhci_hcd.0: Device attached [ 249.244163][T16276] vhci_hcd: connection closed [ 249.252867][ T173] vhci_hcd: stop threads [ 249.262026][ T173] vhci_hcd: release socket [ 249.266485][ T173] vhci_hcd: disconnect device [ 249.277137][T16279] FAULT_INJECTION: forcing a failure. [ 249.277137][T16279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.290278][T16279] CPU: 1 UID: 0 PID: 16279 Comm: syz.2.4457 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 249.290309][T16279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 249.290322][T16279] Call Trace: [ 249.290345][T16279] [ 249.290356][T16279] __dump_stack+0x1d/0x30 [ 249.290385][T16279] dump_stack_lvl+0xe8/0x140 [ 249.290409][T16279] dump_stack+0x15/0x1b [ 249.290427][T16279] should_fail_ex+0x265/0x280 [ 249.290463][T16279] should_fail+0xb/0x20 [ 249.290560][T16279] should_fail_usercopy+0x1a/0x20 [ 249.290593][T16279] _copy_from_user+0x1c/0xb0 [ 249.290621][T16279] wants_mount_setattr+0x128/0x640 [ 249.290727][T16279] ? __rcu_read_unlock+0x4f/0x70 [ 249.290762][T16279] __se_sys_mount_setattr+0x10f/0x240 [ 249.290796][T16279] __x64_sys_mount_setattr+0x67/0x80 [ 249.290875][T16279] x64_sys_call+0xda0/0x2fb0 [ 249.290904][T16279] do_syscall_64+0xd2/0x200 [ 249.290928][T16279] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 249.290956][T16279] ? clear_bhb_loop+0x40/0x90 [ 249.291007][T16279] ? clear_bhb_loop+0x40/0x90 [ 249.291032][T16279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.291053][T16279] RIP: 0033:0x7f4257c4e929 [ 249.291134][T16279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.291153][T16279] RSP: 002b:00007f42562b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 249.291172][T16279] RAX: ffffffffffffffda RBX: 00007f4257e75fa0 RCX: 00007f4257c4e929 [ 249.291185][T16279] RDX: 0000000000000000 RSI: 0000200000001d80 RDI: ffffffffffffffff [ 249.291268][T16279] RBP: 00007f42562b7090 R08: 0000000000000020 R09: 0000000000000000 [ 249.291284][T16279] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 249.291300][T16279] R13: 0000000000000000 R14: 00007f4257e75fa0 R15: 00007fffe4fa7828 [ 249.291322][T16279] [ 249.777111][T16294] lo speed is unknown, defaulting to 1000 [ 249.794244][T16294] dummy0 speed is unknown, defaulting to 1000 [ 249.920742][T16305] __nla_validate_parse: 15 callbacks suppressed [ 249.920763][T16305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4464'. [ 249.967943][T16307] netlink: 'syz.5.4462': attribute type 21 has an invalid length. [ 249.989813][T16307] netlink: 'syz.5.4462': attribute type 1 has an invalid length. [ 249.997886][T16307] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4462'. [ 250.043636][T16314] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4467'. [ 250.059598][T16319] random: crng reseeded on system resumption [ 250.183785][T16330] loop4: detected capacity change from 0 to 128 [ 250.300767][T16340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4475'. [ 250.434738][T16356] FAULT_INJECTION: forcing a failure. [ 250.434738][T16356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.447945][T16356] CPU: 0 UID: 0 PID: 16356 Comm: syz.2.4483 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 250.448002][T16356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.448020][T16356] Call Trace: [ 250.448030][T16356] [ 250.448041][T16356] __dump_stack+0x1d/0x30 [ 250.448207][T16356] dump_stack_lvl+0xe8/0x140 [ 250.448288][T16356] dump_stack+0x15/0x1b [ 250.448307][T16356] should_fail_ex+0x265/0x280 [ 250.448419][T16356] should_fail+0xb/0x20 [ 250.448456][T16356] should_fail_usercopy+0x1a/0x20 [ 250.448489][T16356] _copy_from_user+0x1c/0xb0 [ 250.448531][T16356] bpf_test_init+0xdf/0x160 [ 250.448565][T16356] bpf_prog_test_run_xdp+0x274/0x910 [ 250.448641][T16356] ? kstrtouint+0x76/0xc0 [ 250.448690][T16356] ? __rcu_read_unlock+0x4f/0x70 [ 250.448717][T16356] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 250.448764][T16356] bpf_prog_test_run+0x22a/0x390 [ 250.448790][T16356] __sys_bpf+0x3dc/0x790 [ 250.448885][T16356] __x64_sys_bpf+0x41/0x50 [ 250.448919][T16356] x64_sys_call+0x2478/0x2fb0 [ 250.448948][T16356] do_syscall_64+0xd2/0x200 [ 250.448970][T16356] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 250.449044][T16356] ? clear_bhb_loop+0x40/0x90 [ 250.449066][T16356] ? clear_bhb_loop+0x40/0x90 [ 250.449094][T16356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.449124][T16356] RIP: 0033:0x7f4257c4e929 [ 250.449224][T16356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.449245][T16356] RSP: 002b:00007f42562b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.449324][T16356] RAX: ffffffffffffffda RBX: 00007f4257e75fa0 RCX: 00007f4257c4e929 [ 250.449340][T16356] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 250.449413][T16356] RBP: 00007f42562b7090 R08: 0000000000000000 R09: 0000000000000000 [ 250.449426][T16356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.449442][T16356] R13: 0000000000000000 R14: 00007f4257e75fa0 R15: 00007fffe4fa7828 [ 250.449468][T16356] [ 250.975455][T16368] loop4: detected capacity change from 0 to 512 [ 251.122519][T16376] random: crng reseeded on system resumption [ 251.404544][T16392] loop4: detected capacity change from 0 to 512 [ 251.444920][T16392] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4495: bg 0: block 248: padding at end of block bitmap is not set [ 251.461493][T16392] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4495: Failed to acquire dquot type 1 [ 251.493108][T16392] EXT4-fs (loop4): 1 truncate cleaned up [ 251.506706][T16392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.541958][T16392] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.608081][T16407] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4499'. [ 251.734089][T16407] vhci_hcd: invalid port number 96 [ 251.739271][T16407] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 251.848193][T16416] random: crng reseeded on system resumption [ 252.024865][T16432] loop5: detected capacity change from 0 to 512 [ 252.264746][T11656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.286098][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 252.375076][T16447] lo speed is unknown, defaulting to 1000 [ 252.381488][T16447] dummy0 speed is unknown, defaulting to 1000 [ 252.894833][T16452] cgroup: No subsys list or none specified [ 252.974731][T16470] cgroup: No subsys list or none specified [ 253.051008][T16479] loop5: detected capacity change from 0 to 512 [ 253.135664][T16488] random: crng reseeded on system resumption [ 253.283952][T16502] FAULT_INJECTION: forcing a failure. [ 253.283952][T16502] name failslab, interval 1, probability 0, space 0, times 0 [ 253.296694][T16502] CPU: 0 UID: 0 PID: 16502 Comm: syz.0.4528 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 253.296756][T16502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.296772][T16502] Call Trace: [ 253.296781][T16502] [ 253.296792][T16502] __dump_stack+0x1d/0x30 [ 253.296859][T16502] dump_stack_lvl+0xe8/0x140 [ 253.296885][T16502] dump_stack+0x15/0x1b [ 253.296908][T16502] should_fail_ex+0x265/0x280 [ 253.296945][T16502] should_failslab+0x8c/0xb0 [ 253.296976][T16502] kmem_cache_alloc_noprof+0x50/0x310 [ 253.297082][T16502] ? prepare_creds+0x37/0x4c0 [ 253.297113][T16502] prepare_creds+0x37/0x4c0 [ 253.297178][T16502] copy_creds+0x8f/0x3f0 [ 253.297205][T16502] copy_process+0x658/0x1fe0 [ 253.297306][T16502] ? kstrtouint+0x76/0xc0 [ 253.297346][T16502] ? __rcu_read_unlock+0x4f/0x70 [ 253.297420][T16502] kernel_clone+0x16c/0x5b0 [ 253.297494][T16502] __x64_sys_clone+0xe6/0x120 [ 253.297610][T16502] x64_sys_call+0x2c59/0x2fb0 [ 253.297702][T16502] do_syscall_64+0xd2/0x200 [ 253.297722][T16502] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 253.297775][T16502] ? clear_bhb_loop+0x40/0x90 [ 253.297796][T16502] ? clear_bhb_loop+0x40/0x90 [ 253.297821][T16502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.297850][T16502] RIP: 0033:0x7f49cabfe929 [ 253.297870][T16502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.297923][T16502] RSP: 002b:00007f49c9224fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 253.298002][T16502] RAX: ffffffffffffffda RBX: 00007f49cae26160 RCX: 00007f49cabfe929 [ 253.298020][T16502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a020000 [ 253.298037][T16502] RBP: 00007f49c9225090 R08: 0000000000000000 R09: 0000000000000000 [ 253.298054][T16502] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 253.298100][T16502] R13: 0000000000000000 R14: 00007f49cae26160 R15: 00007ffc9cc968e8 [ 253.298120][T16502] [ 253.630569][ T29] kauditd_printk_skb: 505 callbacks suppressed [ 253.630587][ T29] audit: type=1326 audit(1751637197.497:24105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz.4.4501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ee92e929 code=0x7ffc0000 [ 253.660652][ T29] audit: type=1326 audit(1751637197.497:24106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz.4.4501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ee92e929 code=0x7ffc0000 [ 253.687871][T16512] loop5: detected capacity change from 0 to 128 [ 253.697936][T16512] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 253.705844][T16512] FAT-fs (loop5): Filesystem has been set read-only [ 253.712620][T16512] bio_check_eod: 17327 callbacks suppressed [ 253.712633][T16512] syz.5.4537: attempt to access beyond end of device [ 253.712633][T16512] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 253.734156][T16512] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 253.742153][T16512] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 253.751801][T16512] syz.5.4537: attempt to access beyond end of device [ 253.751801][T16512] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 253.766122][T16512] syz.5.4537: attempt to access beyond end of device [ 253.766122][T16512] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 253.779941][T16512] syz.5.4537: attempt to access beyond end of device [ 253.779941][T16512] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 253.793528][T16512] syz.5.4537: attempt to access beyond end of device [ 253.793528][T16512] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 253.818368][T16519] loop4: detected capacity change from 0 to 128 [ 253.826274][T16512] syz.5.4537: attempt to access beyond end of device [ 253.826274][T16512] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 253.841710][T16519] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 253.843152][T16512] syz.5.4537: attempt to access beyond end of device [ 253.843152][T16512] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 253.849591][T16519] FAT-fs (loop4): Filesystem has been set read-only [ 253.855182][T16519] syz.4.4540: attempt to access beyond end of device [ 253.855182][T16519] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 253.865912][T16512] syz.5.4537: attempt to access beyond end of device [ 253.865912][T16512] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 253.877329][T16519] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 253.885608][T16512] syz.5.4537: attempt to access beyond end of device [ 253.885608][T16512] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 253.896419][T16519] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 254.006858][T16532] buffer_io_error: 17326 callbacks suppressed [ 254.006879][T16532] Buffer I/O error on dev loop4, logical block 2065, async page read [ 254.023398][ T29] audit: type=1326 audit(1751637197.886:24107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16525 comm="syz.0.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 254.038127][T16533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4544'. [ 254.047154][ T29] audit: type=1326 audit(1751637197.886:24108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16525 comm="syz.0.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 254.079975][ T29] audit: type=1326 audit(1751637197.886:24109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16525 comm="syz.0.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 254.102435][T16532] Buffer I/O error on dev loop4, logical block 2066, async page read [ 254.103722][ T29] audit: type=1326 audit(1751637197.886:24110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16525 comm="syz.0.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 254.135436][ T29] audit: type=1326 audit(1751637197.886:24111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16525 comm="syz.0.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 254.152213][T16532] Buffer I/O error on dev loop4, logical block 2067, async page read [ 254.159113][ T29] audit: type=1326 audit(1751637197.886:24112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16525 comm="syz.0.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 254.189903][T16532] Buffer I/O error on dev loop4, logical block 2068, async page read [ 254.190672][ T29] audit: type=1326 audit(1751637197.886:24113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16525 comm="syz.0.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 254.209929][T16532] Buffer I/O error on dev loop4, logical block 2069, async page read [ 254.222500][ T29] audit: type=1326 audit(1751637197.886:24114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16525 comm="syz.0.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 254.281209][T16532] Buffer I/O error on dev loop4, logical block 2070, async page read [ 254.290823][T16532] Buffer I/O error on dev loop4, logical block 2071, async page read [ 254.299171][T16532] Buffer I/O error on dev loop4, logical block 2072, async page read [ 254.312206][T16519] Buffer I/O error on dev loop4, logical block 2065, async page read [ 254.320479][T16519] Buffer I/O error on dev loop4, logical block 2066, async page read [ 254.397302][T16533] vhci_hcd: invalid port number 96 [ 254.402507][T16533] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 254.675136][T16559] random: crng reseeded on system resumption [ 255.163907][T16584] FAULT_INJECTION: forcing a failure. [ 255.163907][T16584] name failslab, interval 1, probability 0, space 0, times 0 [ 255.176691][T16584] CPU: 1 UID: 0 PID: 16584 Comm: syz.4.4559 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 255.176734][T16584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.176869][T16584] Call Trace: [ 255.176877][T16584] [ 255.176885][T16584] __dump_stack+0x1d/0x30 [ 255.176910][T16584] dump_stack_lvl+0xe8/0x140 [ 255.176970][T16584] dump_stack+0x15/0x1b [ 255.176986][T16584] should_fail_ex+0x265/0x280 [ 255.177043][T16584] should_failslab+0x8c/0xb0 [ 255.177075][T16584] kmem_cache_alloc_noprof+0x50/0x310 [ 255.177106][T16584] ? getname_flags+0x80/0x3b0 [ 255.177180][T16584] getname_flags+0x80/0x3b0 [ 255.177211][T16584] __se_sys_move_mount+0x16d/0x440 [ 255.177242][T16584] __x64_sys_move_mount+0x67/0x80 [ 255.177330][T16584] x64_sys_call+0x1f00/0x2fb0 [ 255.177402][T16584] do_syscall_64+0xd2/0x200 [ 255.177421][T16584] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 255.177462][T16584] ? clear_bhb_loop+0x40/0x90 [ 255.177496][T16584] ? clear_bhb_loop+0x40/0x90 [ 255.177526][T16584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.177607][T16584] RIP: 0033:0x7f12ee92e929 [ 255.177627][T16584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.177650][T16584] RSP: 002b:00007f12ecf97038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 255.177669][T16584] RAX: ffffffffffffffda RBX: 00007f12eeb55fa0 RCX: 00007f12ee92e929 [ 255.177684][T16584] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: ffffffffffffffff [ 255.177700][T16584] RBP: 00007f12ecf97090 R08: 0000000000000000 R09: 0000000000000000 [ 255.177734][T16584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.177748][T16584] R13: 0000000000000000 R14: 00007f12eeb55fa0 R15: 00007ffd15633278 [ 255.177773][T16584] [ 255.384264][T16588] loop4: detected capacity change from 0 to 512 [ 255.497091][T16595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4563'. [ 255.569143][T16595] vhci_hcd: invalid port number 96 [ 255.574423][T16595] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 255.632210][T16608] FAULT_INJECTION: forcing a failure. [ 255.632210][T16608] name failslab, interval 1, probability 0, space 0, times 0 [ 255.644941][T16608] CPU: 0 UID: 0 PID: 16608 Comm: syz.2.4567 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 255.644977][T16608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.645034][T16608] Call Trace: [ 255.645042][T16608] [ 255.645050][T16608] __dump_stack+0x1d/0x30 [ 255.645107][T16608] dump_stack_lvl+0xe8/0x140 [ 255.645128][T16608] dump_stack+0x15/0x1b [ 255.645144][T16608] should_fail_ex+0x265/0x280 [ 255.645255][T16608] should_failslab+0x8c/0xb0 [ 255.645285][T16608] kmem_cache_alloc_noprof+0x50/0x310 [ 255.645324][T16608] ? audit_log_start+0x365/0x6c0 [ 255.645358][T16608] audit_log_start+0x365/0x6c0 [ 255.645405][T16608] audit_seccomp+0x48/0x100 [ 255.645471][T16608] ? __seccomp_filter+0x68c/0x10d0 [ 255.645498][T16608] __seccomp_filter+0x69d/0x10d0 [ 255.645529][T16608] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 255.645714][T16608] ? vfs_write+0x75e/0x8e0 [ 255.645752][T16608] ? __rcu_read_unlock+0x4f/0x70 [ 255.645775][T16608] ? __fget_files+0x184/0x1c0 [ 255.645805][T16608] __secure_computing+0x82/0x150 [ 255.645836][T16608] syscall_trace_enter+0xcf/0x1e0 [ 255.645878][T16608] do_syscall_64+0xac/0x200 [ 255.645902][T16608] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 255.645936][T16608] ? clear_bhb_loop+0x40/0x90 [ 255.646044][T16608] ? clear_bhb_loop+0x40/0x90 [ 255.646074][T16608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.646102][T16608] RIP: 0033:0x7f4257c4e929 [ 255.646176][T16608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.646206][T16608] RSP: 002b:00007f42562b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.646231][T16608] RAX: ffffffffffffffda RBX: 00007f4257e75fa0 RCX: 00007f4257c4e929 [ 255.646248][T16608] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 255.646264][T16608] RBP: 00007f42562b7090 R08: 0000000000000000 R09: 0000000000000000 [ 255.646307][T16608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.646322][T16608] R13: 0000000000000000 R14: 00007f4257e75fa0 R15: 00007fffe4fa7828 [ 255.646345][T16608] [ 255.892614][T16614] loop5: detected capacity change from 0 to 2048 [ 255.938173][T16614] loop5: p4 < > [ 255.953552][T16614] bridge0: entered promiscuous mode [ 255.959228][T16614] macsec1: entered promiscuous mode [ 255.969996][T16614] bridge0: port 1(macsec1) entered blocking state [ 255.976521][T16614] bridge0: port 1(macsec1) entered disabled state [ 256.014536][T16614] macsec1: entered allmulticast mode [ 256.019954][T16614] bridge0: entered allmulticast mode [ 256.039140][T16614] macsec1: left allmulticast mode [ 256.044273][T16614] bridge0: left allmulticast mode [ 256.058822][T16614] bridge0: left promiscuous mode [ 256.151188][T16657] lo speed is unknown, defaulting to 1000 [ 256.157557][T16657] dummy0 speed is unknown, defaulting to 1000 [ 256.192678][T16664] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4579'. [ 256.227142][T16663] lo speed is unknown, defaulting to 1000 [ 256.234152][T16663] dummy0 speed is unknown, defaulting to 1000 [ 256.245902][T16666] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4581'. [ 256.441054][T16670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.477471][T16670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.519504][T16688] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4589'. [ 256.572102][T16693] 9pnet_fd: Insufficient options for proto=fd [ 256.639130][T16701] loop9: detected capacity change from 0 to 7 [ 256.645446][T16701] loop9: unable to read partition table [ 256.651481][T16701] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 256.651481][T16701] ) failed (rc=-5) [ 256.659181][T16705] loop5: detected capacity change from 0 to 512 [ 256.695935][T16709] random: crng reseeded on system resumption [ 256.814930][T16718] loop5: detected capacity change from 0 to 128 [ 256.820761][T16724] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4598'. [ 256.825742][T16718] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 256.838112][T16718] FAT-fs (loop5): Filesystem has been set read-only [ 256.845889][T16718] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 256.854168][T16718] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 256.921061][T16724] vhci_hcd: invalid port number 96 [ 256.926236][T16724] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 257.022537][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4604'. [ 257.048991][T16739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4604'. [ 257.059845][T16739] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4604'. [ 257.253872][T16750] random: crng reseeded on system resumption [ 257.465350][T16769] loop4: detected capacity change from 0 to 512 [ 257.484611][T16769] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.4612: bad orphan inode 13 [ 257.563535][T16769] ext4_test_bit(bit=12, block=4) = 1 [ 257.568907][T16769] is_bad_inode(inode)=0 [ 257.573109][T16769] NEXT_ORPHAN(inode)=0 [ 257.577255][T16769] max_ino=32 [ 257.580532][T16769] i_nlink=1 [ 257.607711][T16778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4614'. [ 257.670665][T16769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.770898][T16778] vhci_hcd: invalid port number 96 [ 257.776084][T16778] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 257.791253][T16769] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.4612: Unrecognised inode hash code 20 [ 257.802786][T16769] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4612: Corrupt directory, running e2fsck is recommended [ 257.839452][T16769] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.4612: corrupted in-inode xattr: e_value out of bounds [ 257.995266][T16769] cgroup: No subsys list or none specified [ 258.005699][T16769] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.4612: Unrecognised inode hash code 20 [ 258.017221][T16769] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4612: Corrupt directory, running e2fsck is recommended [ 258.135775][T16787] lo speed is unknown, defaulting to 1000 [ 258.142620][T16787] dummy0 speed is unknown, defaulting to 1000 [ 258.346427][T11656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.952610][T16798] FAULT_INJECTION: forcing a failure. [ 258.952610][T16798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.965810][T16798] CPU: 0 UID: 0 PID: 16798 Comm: syz.5.4623 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 258.965899][T16798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.965913][T16798] Call Trace: [ 258.965920][T16798] [ 258.965930][T16798] __dump_stack+0x1d/0x30 [ 258.965958][T16798] dump_stack_lvl+0xe8/0x140 [ 258.966090][T16798] dump_stack+0x15/0x1b [ 258.966112][T16798] should_fail_ex+0x265/0x280 [ 258.966210][T16798] should_fail+0xb/0x20 [ 258.966247][T16798] should_fail_usercopy+0x1a/0x20 [ 258.966289][T16798] _copy_from_user+0x1c/0xb0 [ 258.966313][T16798] mon_bin_ioctl+0x99/0x930 [ 258.966365][T16798] ? __fget_files+0x184/0x1c0 [ 258.966394][T16798] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 258.966433][T16798] __se_sys_ioctl+0xce/0x140 [ 258.966468][T16798] __x64_sys_ioctl+0x43/0x50 [ 258.966518][T16798] x64_sys_call+0x19a8/0x2fb0 [ 258.966541][T16798] do_syscall_64+0xd2/0x200 [ 258.966565][T16798] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 258.966600][T16798] ? clear_bhb_loop+0x40/0x90 [ 258.966686][T16798] ? clear_bhb_loop+0x40/0x90 [ 258.966760][T16798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.966808][T16798] RIP: 0033:0x7f28aa79e929 [ 258.966828][T16798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.966851][T16798] RSP: 002b:00007f28a8e07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.966907][T16798] RAX: ffffffffffffffda RBX: 00007f28aa9c5fa0 RCX: 00007f28aa79e929 [ 258.966923][T16798] RDX: 0000200000000c40 RSI: 00000000c0109207 RDI: 0000000000000008 [ 258.966939][T16798] RBP: 00007f28a8e07090 R08: 0000000000000000 R09: 0000000000000000 [ 258.967018][T16798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.967031][T16798] R13: 0000000000000000 R14: 00007f28aa9c5fa0 R15: 00007ffd94dee098 [ 258.967057][T16798] [ 259.234691][T16806] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4626'. [ 259.242374][ T29] kauditd_printk_skb: 594 callbacks suppressed [ 259.242395][ T29] audit: type=1326 audit(1751637203.079:24707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.5.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28aa79e929 code=0x7ffc0000 [ 259.273567][ T29] audit: type=1326 audit(1751637203.079:24708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.5.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28aa79e929 code=0x7ffc0000 [ 259.297218][ T29] audit: type=1326 audit(1751637203.079:24709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.5.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f28aa79e929 code=0x7ffc0000 [ 259.320761][ T29] audit: type=1326 audit(1751637203.079:24710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.5.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28aa79e929 code=0x7ffc0000 [ 259.344443][ T29] audit: type=1326 audit(1751637203.079:24711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.5.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f28aa79e929 code=0x7ffc0000 [ 259.368251][ T29] audit: type=1326 audit(1751637203.079:24712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.5.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28aa79e929 code=0x7ffc0000 [ 259.392039][ T29] audit: type=1326 audit(1751637203.079:24713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.5.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28aa79e929 code=0x7ffc0000 [ 259.415661][ T29] audit: type=1326 audit(1751637203.079:24714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.5.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28aa79e929 code=0x7ffc0000 [ 259.439297][ T29] audit: type=1326 audit(1751637203.079:24715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.5.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28aa79e929 code=0x7ffc0000 [ 259.463138][ T29] audit: type=1326 audit(1751637203.079:24716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.5.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28aa79e929 code=0x7ffc0000 [ 259.724712][T16834] loop5: detected capacity change from 0 to 128 [ 260.105305][T16869] lo speed is unknown, defaulting to 1000 [ 260.118525][T16869] dummy0 speed is unknown, defaulting to 1000 [ 260.147299][T16876] validate_nla: 1 callbacks suppressed [ 260.147315][T16876] netlink: 'syz.1.4642': attribute type 1 has an invalid length. [ 260.149299][T16878] FAULT_INJECTION: forcing a failure. [ 260.149299][T16878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.173758][T16878] CPU: 1 UID: 0 PID: 16878 Comm: syz.2.4646 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 260.173831][T16878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.173911][T16878] Call Trace: [ 260.173919][T16878] [ 260.173929][T16878] __dump_stack+0x1d/0x30 [ 260.173953][T16878] dump_stack_lvl+0xe8/0x140 [ 260.174018][T16878] dump_stack+0x15/0x1b [ 260.174035][T16878] should_fail_ex+0x265/0x280 [ 260.174101][T16878] should_fail+0xb/0x20 [ 260.174133][T16878] should_fail_usercopy+0x1a/0x20 [ 260.174255][T16878] _copy_from_user+0x1c/0xb0 [ 260.174278][T16878] __sys_bpf+0x178/0x790 [ 260.174351][T16878] __x64_sys_bpf+0x41/0x50 [ 260.174384][T16878] x64_sys_call+0x2478/0x2fb0 [ 260.174409][T16878] do_syscall_64+0xd2/0x200 [ 260.174427][T16878] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 260.174480][T16878] ? clear_bhb_loop+0x40/0x90 [ 260.174509][T16878] ? clear_bhb_loop+0x40/0x90 [ 260.174538][T16878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.174572][T16878] RIP: 0033:0x7f4257c4e929 [ 260.174587][T16878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.174605][T16878] RSP: 002b:00007f42562b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 260.174641][T16878] RAX: ffffffffffffffda RBX: 00007f4257e75fa0 RCX: 00007f4257c4e929 [ 260.174658][T16878] RDX: 0000000000000038 RSI: 0000200000000080 RDI: 0000000000000018 [ 260.174674][T16878] RBP: 00007f42562b7090 R08: 0000000000000000 R09: 0000000000000000 [ 260.174691][T16878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.174707][T16878] R13: 0000000000000000 R14: 00007f4257e75fa0 R15: 00007fffe4fa7828 [ 260.174767][T16878] [ 260.455050][T16884] loop4: detected capacity change from 0 to 512 [ 260.486084][T16884] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.4649: bad orphan inode 13 [ 260.500203][T16884] ext4_test_bit(bit=12, block=4) = 1 [ 260.505566][T16884] is_bad_inode(inode)=0 [ 260.509873][T16884] NEXT_ORPHAN(inode)=0 [ 260.513999][T16884] max_ino=32 [ 260.517217][T16884] i_nlink=1 [ 260.531900][T16884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.535922][T16886] lo speed is unknown, defaulting to 1000 [ 260.550222][T16886] dummy0 speed is unknown, defaulting to 1000 [ 260.657747][T16884] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.4649: Unrecognised inode hash code 20 [ 260.669345][T16884] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4649: Corrupt directory, running e2fsck is recommended [ 260.719736][T16884] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.4649: corrupted in-inode xattr: e_value out of bounds [ 260.797722][T16915] random: crng reseeded on system resumption [ 260.839782][T16884] cgroup: No subsys list or none specified [ 260.857126][T16884] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.4649: Unrecognised inode hash code 20 [ 260.868718][T16884] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4649: Corrupt directory, running e2fsck is recommended [ 260.920975][T11656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.991175][T16933] random: crng reseeded on system resumption [ 261.045145][T16932] lo speed is unknown, defaulting to 1000 [ 261.056795][T16932] dummy0 speed is unknown, defaulting to 1000 [ 261.063578][T16937] lo speed is unknown, defaulting to 1000 [ 261.073771][T16937] dummy0 speed is unknown, defaulting to 1000 [ 261.183932][T16952] random: crng reseeded on system resumption [ 261.207260][T16959] __nla_validate_parse: 2 callbacks suppressed [ 261.207276][T16959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4669'. [ 261.317662][T16963] loop4: detected capacity change from 0 to 512 [ 261.343234][T16963] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.4670: bad orphan inode 13 [ 261.354045][T16963] ext4_test_bit(bit=12, block=4) = 1 [ 261.359443][T16963] is_bad_inode(inode)=0 [ 261.363630][T16963] NEXT_ORPHAN(inode)=0 [ 261.367786][T16963] max_ino=32 [ 261.371072][T16963] i_nlink=1 [ 261.378579][T16963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.391998][T16963] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.4670: Unrecognised inode hash code 20 [ 261.403557][T16963] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4670: Corrupt directory, running e2fsck is recommended [ 261.477361][T16963] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.4670: corrupted in-inode xattr: e_value out of bounds [ 261.557338][T16963] cgroup: No subsys list or none specified [ 261.565763][T16963] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.4670: Unrecognised inode hash code 20 [ 261.577341][T16963] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4670: Corrupt directory, running e2fsck is recommended [ 261.607727][T11656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.716061][T16976] loop4: detected capacity change from 0 to 4096 [ 261.738873][T16976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.837218][T16993] loop5: detected capacity change from 0 to 4096 [ 261.847493][T16993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.861600][T11656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.889615][T17001] loop4: detected capacity change from 0 to 512 [ 261.912019][T17003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4684'. [ 261.954338][T11854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.122756][T17014] lo speed is unknown, defaulting to 1000 [ 262.133630][T17014] dummy0 speed is unknown, defaulting to 1000 [ 262.267997][T17026] loop4: detected capacity change from 0 to 4096 [ 262.291870][T17026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.395385][T17032] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4696'. [ 262.419728][T11656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.625026][T17055] random: crng reseeded on system resumption [ 262.693801][T17068] random: crng reseeded on system resumption [ 262.709658][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4706'. [ 262.729920][T17070] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4706'. [ 262.899567][T17078] lo speed is unknown, defaulting to 1000 [ 262.905750][T17078] dummy0 speed is unknown, defaulting to 1000 [ 262.930790][T17080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4708'. [ 262.947190][T17087] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4707'. [ 263.068165][T17105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4716'. [ 263.093250][T17109] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 263.104348][T17103] IPVS: stopping master sync thread 17109 ... [ 263.111420][T17107] cgroup: No subsys list or none specified [ 263.148540][T17105] vhci_hcd: invalid port number 96 [ 263.153787][T17105] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 263.172028][T17111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4717'. [ 263.183069][T17111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4717'. [ 263.196744][T17115] loop5: detected capacity change from 0 to 512 [ 263.252993][T17115] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.4719: bad orphan inode 13 [ 263.263379][T17115] ext4_test_bit(bit=12, block=4) = 1 [ 263.268824][T17115] is_bad_inode(inode)=0 [ 263.273018][T17115] NEXT_ORPHAN(inode)=0 [ 263.277180][T17115] max_ino=32 [ 263.280382][T17115] i_nlink=1 [ 263.285335][T17115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.301659][T17115] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.4719: Unrecognised inode hash code 20 [ 263.313284][T17115] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4719: Corrupt directory, running e2fsck is recommended [ 263.326958][T17115] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.4719: corrupted in-inode xattr: e_value out of bounds [ 263.394400][T17115] cgroup: No subsys list or none specified [ 263.400797][T17115] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.4719: Unrecognised inode hash code 20 [ 263.412304][T17115] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4719: Corrupt directory, running e2fsck is recommended [ 263.446405][T11854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.640624][T17146] lo speed is unknown, defaulting to 1000 [ 263.646847][T17146] dummy0 speed is unknown, defaulting to 1000 [ 263.748613][T17154] loop4: detected capacity change from 0 to 2048 [ 263.820433][T17154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.840477][T17149] vhci_hcd: invalid port number 96 [ 263.845744][T17149] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 263.874048][T17154] lo speed is unknown, defaulting to 1000 [ 263.880570][T17154] dummy0 speed is unknown, defaulting to 1000 [ 264.117808][T17162] random: crng reseeded on system resumption [ 264.410072][ T29] kauditd_printk_skb: 869 callbacks suppressed [ 264.410091][ T29] audit: type=1400 audit(1751637208.273:25586): avc: denied { create } for pid=17171 comm="syz.1.4737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 264.504584][T17170] loop5: detected capacity change from 0 to 4096 [ 264.551965][T17170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.625897][ T29] audit: type=1326 audit(1751637208.483:25587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17184 comm="syz.0.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 264.702631][ T29] audit: type=1326 audit(1751637208.513:25588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17184 comm="syz.0.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 264.726315][ T29] audit: type=1326 audit(1751637208.513:25589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17184 comm="syz.0.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 264.750181][ T29] audit: type=1326 audit(1751637208.513:25590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17184 comm="syz.0.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 264.812101][T17172] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.821242][T17172] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.830345][T17172] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.839512][T17172] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.974684][T11854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.002790][ T29] audit: type=1326 audit(1751637208.753:25591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17184 comm="syz.0.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 265.026470][ T29] audit: type=1326 audit(1751637208.753:25592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17184 comm="syz.0.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 265.050118][ T29] audit: type=1326 audit(1751637208.812:25593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17188 comm="syz.0.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 265.073848][ T29] audit: type=1326 audit(1751637208.812:25594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17188 comm="syz.0.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 265.097508][ T29] audit: type=1326 audit(1751637208.812:25595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17188 comm="syz.0.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 265.345527][T11656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.412685][T17201] lo speed is unknown, defaulting to 1000 [ 265.431580][T17201] dummy0 speed is unknown, defaulting to 1000 [ 266.053892][T17273] random: crng reseeded on system resumption [ 266.096163][T17280] lo speed is unknown, defaulting to 1000 [ 266.102594][T17280] dummy0 speed is unknown, defaulting to 1000 [ 266.314223][T17292] random: crng reseeded on system resumption [ 266.414146][T17304] loop4: detected capacity change from 0 to 128 [ 266.652348][T17326] cgroup: No subsys list or none specified [ 266.790057][T17342] __nla_validate_parse: 8 callbacks suppressed [ 266.790078][T17342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4790'. [ 266.862623][T17347] cgroup: No subsys list or none specified [ 266.921037][T17360] FAULT_INJECTION: forcing a failure. [ 266.921037][T17360] name failslab, interval 1, probability 0, space 0, times 0 [ 266.933840][T17360] CPU: 0 UID: 0 PID: 17360 Comm: syz.0.4796 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 266.933931][T17360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.933947][T17360] Call Trace: [ 266.933955][T17360] [ 266.933964][T17360] __dump_stack+0x1d/0x30 [ 266.934023][T17360] dump_stack_lvl+0xe8/0x140 [ 266.934050][T17360] dump_stack+0x15/0x1b [ 266.934148][T17360] should_fail_ex+0x265/0x280 [ 266.934190][T17360] should_failslab+0x8c/0xb0 [ 266.934266][T17360] kmem_cache_alloc_node_noprof+0x57/0x320 [ 266.934304][T17360] ? __alloc_skb+0x101/0x320 [ 266.934345][T17360] __alloc_skb+0x101/0x320 [ 266.934394][T17360] netlink_alloc_large_skb+0xba/0xf0 [ 266.934427][T17360] netlink_sendmsg+0x3cf/0x6b0 [ 266.934500][T17360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.934528][T17360] __sock_sendmsg+0x145/0x180 [ 266.934562][T17360] ____sys_sendmsg+0x31e/0x4e0 [ 266.934606][T17360] ___sys_sendmsg+0x17b/0x1d0 [ 266.934669][T17360] __x64_sys_sendmsg+0xd4/0x160 [ 266.934745][T17360] x64_sys_call+0x2999/0x2fb0 [ 266.934855][T17360] do_syscall_64+0xd2/0x200 [ 266.934950][T17360] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 266.934985][T17360] ? clear_bhb_loop+0x40/0x90 [ 266.935011][T17360] ? clear_bhb_loop+0x40/0x90 [ 266.935086][T17360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.935115][T17360] RIP: 0033:0x7f49cabfe929 [ 266.935136][T17360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.935161][T17360] RSP: 002b:00007f49c9267038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.935185][T17360] RAX: ffffffffffffffda RBX: 00007f49cae25fa0 RCX: 00007f49cabfe929 [ 266.935218][T17360] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 266.935231][T17360] RBP: 00007f49c9267090 R08: 0000000000000000 R09: 0000000000000000 [ 266.935243][T17360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.935255][T17360] R13: 0000000000000000 R14: 00007f49cae25fa0 R15: 00007ffc9cc968e8 [ 266.935277][T17360] [ 267.167622][T17365] loop4: detected capacity change from 0 to 128 [ 267.238794][T17369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4800'. [ 267.332976][T17369] vhci_hcd: invalid port number 96 [ 267.338165][T17369] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 267.470518][T17384] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4806'. [ 267.689860][T17398] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 268.120462][T17425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4822'. [ 268.208776][T17428] random: crng reseeded on system resumption [ 268.362487][T17432] lo speed is unknown, defaulting to 1000 [ 268.387192][T17432] dummy0 speed is unknown, defaulting to 1000 [ 268.476695][T17439] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4827'. [ 268.773204][T17456] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4832'. [ 268.794797][T17457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4833'. [ 268.857592][T17460] netlink: 'syz.5.4830': attribute type 1 has an invalid length. [ 268.865443][T17460] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4830'. [ 268.884080][T17452] lo speed is unknown, defaulting to 1000 [ 268.890300][T17452] dummy0 speed is unknown, defaulting to 1000 [ 268.995144][T17459] lo speed is unknown, defaulting to 1000 [ 269.001333][T17459] dummy0 speed is unknown, defaulting to 1000 [ 269.245792][T17475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4839'. [ 269.268876][T17470] lo speed is unknown, defaulting to 1000 [ 269.284336][T17470] dummy0 speed is unknown, defaulting to 1000 [ 269.325838][T17475] vhci_hcd: invalid port number 96 [ 269.331082][T17475] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 269.487676][T17491] loop4: detected capacity change from 0 to 512 [ 269.648413][T17496] lo speed is unknown, defaulting to 1000 [ 269.655201][T17496] dummy0 speed is unknown, defaulting to 1000 [ 269.732633][ T29] kauditd_printk_skb: 810 callbacks suppressed [ 269.732655][ T29] audit: type=1326 audit(1751637213.427:26406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.4.4844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ee92e929 code=0x7ffc0000 [ 269.762610][ T29] audit: type=1326 audit(1751637213.427:26407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.4.4844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ee92e929 code=0x7ffc0000 [ 269.786331][ T29] audit: type=1326 audit(1751637213.427:26408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.4.4844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12ee92e929 code=0x7ffc0000 [ 269.809991][ T29] audit: type=1326 audit(1751637213.427:26409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.4.4844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ee92e929 code=0x7ffc0000 [ 269.833731][ T29] audit: type=1326 audit(1751637213.427:26410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.4.4844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ee92e929 code=0x7ffc0000 [ 269.857471][ T29] audit: type=1326 audit(1751637213.427:26411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.4.4844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f12ee92e929 code=0x7ffc0000 [ 269.881154][ T29] audit: type=1326 audit(1751637213.427:26412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.4.4844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ee92e929 code=0x7ffc0000 [ 269.904795][ T29] audit: type=1326 audit(1751637213.427:26413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.4.4844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ee92e929 code=0x7ffc0000 [ 269.928419][ T29] audit: type=1326 audit(1751637213.447:26414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.4.4844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f12ee92e929 code=0x7ffc0000 [ 269.952080][ T29] audit: type=1326 audit(1751637213.447:26415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.4.4844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ee92e929 code=0x7ffc0000 [ 270.165735][T17507] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 270.166800][T17500] IPVS: stopping master sync thread 17507 ... [ 270.270274][T17509] IPVS: Error connecting to the multicast addr [ 270.298502][T17511] lo speed is unknown, defaulting to 1000 [ 270.304558][T17511] dummy0 speed is unknown, defaulting to 1000 [ 270.379036][T17517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4851'. [ 270.968731][T17555] netlink: 'syz.5.4863': attribute type 3 has an invalid length. [ 270.992605][T17553] IPVS: stopping master sync thread 17561 ... [ 271.084700][T17555] loop5: detected capacity change from 0 to 512 [ 271.147849][T17555] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 271.181058][T17567] lo speed is unknown, defaulting to 1000 [ 271.210619][T17567] dummy0 speed is unknown, defaulting to 1000 [ 271.264019][T17555] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 271.394608][T17555] EXT4-fs (loop5): 1 truncate cleaned up [ 271.416428][T17591] netlink: 'syz.0.4872': attribute type 4 has an invalid length. [ 271.468203][T17555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.541694][T17555] EXT4-fs (loop5): shut down requested (0) [ 271.707780][T17613] openvswitch: netlink: Message has 6 unknown bytes. [ 271.733541][T11854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.815730][T17625] loop5: detected capacity change from 0 to 512 [ 271.835627][T17625] EXT4-fs: Ignoring removed orlov option [ 271.859937][T17625] ext4: Unknown parameter 'euid' [ 272.213635][T17655] netlink: 'syz.5.4891': attribute type 1 has an invalid length. [ 272.262152][T17655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.290971][T17658] FAULT_INJECTION: forcing a failure. [ 272.290971][T17658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.304262][T17658] CPU: 0 UID: 0 PID: 17658 Comm: syz.5.4891 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 272.304299][T17658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.304383][T17658] Call Trace: [ 272.304392][T17658] [ 272.304404][T17658] __dump_stack+0x1d/0x30 [ 272.304432][T17658] dump_stack_lvl+0xe8/0x140 [ 272.304458][T17658] dump_stack+0x15/0x1b [ 272.304545][T17658] should_fail_ex+0x265/0x280 [ 272.304629][T17658] should_fail+0xb/0x20 [ 272.304662][T17658] should_fail_usercopy+0x1a/0x20 [ 272.304704][T17658] _copy_from_user+0x1c/0xb0 [ 272.304731][T17658] ___sys_sendmsg+0xc1/0x1d0 [ 272.304814][T17658] __x64_sys_sendmsg+0xd4/0x160 [ 272.304862][T17658] x64_sys_call+0x2999/0x2fb0 [ 272.304962][T17658] do_syscall_64+0xd2/0x200 [ 272.305039][T17658] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 272.305066][T17658] ? clear_bhb_loop+0x40/0x90 [ 272.305091][T17658] ? clear_bhb_loop+0x40/0x90 [ 272.305121][T17658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.305170][T17658] RIP: 0033:0x7f28aa79e929 [ 272.305185][T17658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.305208][T17658] RSP: 002b:00007f28a8de6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.305232][T17658] RAX: ffffffffffffffda RBX: 00007f28aa9c6080 RCX: 00007f28aa79e929 [ 272.305245][T17658] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 272.305257][T17658] RBP: 00007f28a8de6090 R08: 0000000000000000 R09: 0000000000000000 [ 272.305317][T17658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.305333][T17658] R13: 0000000000000001 R14: 00007f28aa9c6080 R15: 00007ffd94dee098 [ 272.305489][T17658] [ 272.484782][T17660] netlink: 'syz.0.4892': attribute type 1 has an invalid length. [ 272.503818][T17660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.612297][T17668] lo speed is unknown, defaulting to 1000 [ 272.618778][T17668] dummy0 speed is unknown, defaulting to 1000 [ 272.645302][T17671] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 272.645413][T17670] IPVS: stopping master sync thread 17671 ... [ 272.702721][T17674] loop4: detected capacity change from 0 to 512 [ 272.793849][T17677] loop5: detected capacity change from 0 to 128 [ 272.803806][T17677] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 272.811774][T17677] FAT-fs (loop5): Filesystem has been set read-only [ 272.819104][T17677] bio_check_eod: 41416 callbacks suppressed [ 272.819117][T17677] syz.5.4899: attempt to access beyond end of device [ 272.819117][T17677] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 272.831220][T17686] netlink: 'syz.1.4901': attribute type 1 has an invalid length. [ 272.839065][T17677] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 272.846527][T17686] __nla_validate_parse: 2 callbacks suppressed [ 272.846546][T17686] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4901'. [ 272.854409][T17677] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 272.887869][T17677] syz.5.4899: attempt to access beyond end of device [ 272.887869][T17677] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 272.899123][T17682] lo speed is unknown, defaulting to 1000 [ 272.905125][T17677] syz.5.4899: attempt to access beyond end of device [ 272.905125][T17677] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 272.933122][T17682] dummy0 speed is unknown, defaulting to 1000 [ 272.969900][T17677] syz.5.4899: attempt to access beyond end of device [ 272.969900][T17677] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 272.975154][T17688] lo speed is unknown, defaulting to 1000 [ 272.987373][T17677] syz.5.4899: attempt to access beyond end of device [ 272.987373][T17677] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.004229][T17688] dummy0 speed is unknown, defaulting to 1000 [ 273.004882][T17677] syz.5.4899: attempt to access beyond end of device [ 273.004882][T17677] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.025984][T17677] syz.5.4899: attempt to access beyond end of device [ 273.025984][T17677] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.041356][T17696] netlink: 'syz.2.4902': attribute type 1 has an invalid length. [ 273.049252][T17696] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4902'. [ 273.080181][T17677] syz.5.4899: attempt to access beyond end of device [ 273.080181][T17677] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.080313][T17677] syz.5.4899: attempt to access beyond end of device [ 273.080313][T17677] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.080416][T17677] syz.5.4899: attempt to access beyond end of device [ 273.080416][T17677] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.085623][T17699] random: crng reseeded on system resumption [ 273.246042][T17700] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.254104][T17704] loop4: detected capacity change from 0 to 128 [ 273.273307][T17704] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 273.281439][T17704] FAT-fs (loop4): Filesystem has been set read-only [ 273.308198][T17704] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 273.322799][T17707] lo speed is unknown, defaulting to 1000 [ 273.339264][T17707] dummy0 speed is unknown, defaulting to 1000 [ 273.481467][T17716] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 273.495231][T17715] IPVS: stopping master sync thread 17716 ... [ 273.506561][T17713] netlink: 'syz.4.4909': attribute type 4 has an invalid length. [ 273.939013][T17751] IPVS: stopping master sync thread 17752 ... [ 273.945185][T17752] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 274.072156][T17741] netlink: 'syz.1.4918': attribute type 21 has an invalid length. [ 274.080178][T17741] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4918'. [ 274.129871][T17762] cgroup: No subsys list or none specified [ 274.180312][T17773] lo speed is unknown, defaulting to 1000 [ 274.201126][T17773] dummy0 speed is unknown, defaulting to 1000 [ 275.107832][T17816] random: crng reseeded on system resumption [ 275.239748][ T29] kauditd_printk_skb: 745 callbacks suppressed [ 275.239766][ T29] audit: type=1326 audit(1751637219.081:27161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17826 comm="syz.0.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 275.284470][ T29] audit: type=1326 audit(1751637219.121:27162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17826 comm="syz.0.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 275.308252][ T29] audit: type=1326 audit(1751637219.121:27163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17826 comm="syz.0.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 275.331948][ T29] audit: type=1326 audit(1751637219.121:27164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17826 comm="syz.0.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 275.355547][ T29] audit: type=1326 audit(1751637219.121:27165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17826 comm="syz.0.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 275.379400][ T29] audit: type=1326 audit(1751637219.121:27166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17826 comm="syz.0.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 275.403163][ T29] audit: type=1326 audit(1751637219.121:27167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17826 comm="syz.0.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 275.426789][ T29] audit: type=1326 audit(1751637219.121:27168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17826 comm="syz.0.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 275.450427][ T29] audit: type=1326 audit(1751637219.121:27169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17826 comm="syz.0.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 275.474401][ T29] audit: type=1326 audit(1751637219.121:27170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17826 comm="syz.0.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 275.666162][T17847] IPVS: stopping master sync thread 17852 ... [ 275.666384][T17852] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 275.788672][T17863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4956'. [ 275.800443][T17863] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4956'. [ 275.992169][T17890] random: crng reseeded on system resumption [ 276.034258][T17893] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 276.034417][T17888] IPVS: stopping master sync thread 17893 ... [ 276.114693][T17899] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4965'. [ 276.221669][T17899] vhci_hcd: invalid port number 96 [ 276.226962][T17899] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 276.262321][T17905] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4967'. [ 276.330966][T17911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4971'. [ 276.389173][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4972'. [ 276.405304][T17915] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4972'. [ 276.558959][T17931] random: crng reseeded on system resumption [ 276.616119][T17943] random: crng reseeded on system resumption [ 276.688228][T17948] loop5: detected capacity change from 0 to 2048 [ 276.716542][T17950] lo speed is unknown, defaulting to 1000 [ 276.724607][T17950] dummy0 speed is unknown, defaulting to 1000 [ 276.735496][T17948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.868974][T11854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.010104][T17967] lo speed is unknown, defaulting to 1000 [ 277.016698][T17967] dummy0 speed is unknown, defaulting to 1000 [ 277.088291][T17967] netlink: 'syz.5.4984': attribute type 1 has an invalid length. [ 277.184985][T17977] loop5: detected capacity change from 0 to 512 [ 277.191819][T17977] EXT4-fs: Ignoring removed orlov option [ 277.197916][T17977] ext4: Unknown parameter 'euid' [ 277.526933][T18002] cgroup: No subsys list or none specified [ 277.653833][T18015] lo speed is unknown, defaulting to 1000 [ 277.659874][T18015] dummy0 speed is unknown, defaulting to 1000 [ 277.908348][T18028] lo speed is unknown, defaulting to 1000 [ 277.919362][T18028] dummy0 speed is unknown, defaulting to 1000 [ 277.944512][T18031] random: crng reseeded on system resumption [ 277.964847][T18035] netlink: 'syz.5.5006': attribute type 1 has an invalid length. [ 277.972725][T18035] __nla_validate_parse: 2 callbacks suppressed [ 277.972742][T18035] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5006'. [ 277.996991][T18037] random: crng reseeded on system resumption [ 278.276289][T18055] lo speed is unknown, defaulting to 1000 [ 278.282512][T18055] dummy0 speed is unknown, defaulting to 1000 [ 278.346397][T18059] loop5: detected capacity change from 0 to 512 [ 278.411584][T18062] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5016'. [ 278.528675][T18065] loop4: detected capacity change from 0 to 128 [ 278.541215][T18065] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 278.549203][T18065] FAT-fs (loop4): Filesystem has been set read-only [ 278.557065][T18065] bio_check_eod: 5885 callbacks suppressed [ 278.557088][T18065] syz.4.5017: attempt to access beyond end of device [ 278.557088][T18065] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 278.577521][T18065] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 278.585429][T18065] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 278.594052][T18065] syz.4.5017: attempt to access beyond end of device [ 278.594052][T18065] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 278.613496][T18065] syz.4.5017: attempt to access beyond end of device [ 278.613496][T18065] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 278.628587][T18065] syz.4.5017: attempt to access beyond end of device [ 278.628587][T18065] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 278.649309][T18065] syz.4.5017: attempt to access beyond end of device [ 278.649309][T18065] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 278.664314][T18077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5020'. [ 278.676489][T18072] syz.4.5017: attempt to access beyond end of device [ 278.676489][T18072] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 278.689814][T18072] buffer_io_error: 35096 callbacks suppressed [ 278.689831][T18072] Buffer I/O error on dev loop4, logical block 2065, async page read [ 278.706060][T18072] syz.4.5017: attempt to access beyond end of device [ 278.706060][T18072] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 278.719383][T18072] Buffer I/O error on dev loop4, logical block 2066, async page read [ 278.729357][T18072] syz.4.5017: attempt to access beyond end of device [ 278.729357][T18072] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 278.742706][T18072] Buffer I/O error on dev loop4, logical block 2067, async page read [ 278.765662][T18072] syz.4.5017: attempt to access beyond end of device [ 278.765662][T18072] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 278.779073][T18072] Buffer I/O error on dev loop4, logical block 2068, async page read [ 278.785054][T18079] loop5: detected capacity change from 0 to 128 [ 278.788736][T18072] syz.4.5017: attempt to access beyond end of device [ 278.788736][T18072] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 278.806899][T18072] Buffer I/O error on dev loop4, logical block 2069, async page read [ 278.816929][T18072] Buffer I/O error on dev loop4, logical block 2070, async page read [ 278.825348][T18072] Buffer I/O error on dev loop4, logical block 2071, async page read [ 278.834847][T18072] Buffer I/O error on dev loop4, logical block 2072, async page read [ 278.843048][T18065] Buffer I/O error on dev loop4, logical block 2065, async page read [ 278.851382][T18065] Buffer I/O error on dev loop4, logical block 2066, async page read [ 278.879050][T18077] vhci_hcd: invalid port number 96 [ 278.884469][T18077] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 279.130597][T18092] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5026'. [ 279.437442][T18102] loop4: detected capacity change from 0 to 512 [ 279.714837][T18126] lo speed is unknown, defaulting to 1000 [ 279.721095][T18126] dummy0 speed is unknown, defaulting to 1000 [ 279.721159][T18128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5040'. [ 279.792411][T18131] netlink: 268 bytes leftover after parsing attributes in process `syz.5.5041'. [ 279.810047][T18126] netlink: 'syz.2.5039': attribute type 1 has an invalid length. [ 279.817899][T18126] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5039'. [ 279.838306][T18135] loop5: detected capacity change from 0 to 512 [ 279.899189][T18139] random: crng reseeded on system resumption [ 280.011014][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5051'. [ 280.023651][T18161] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5051'. [ 280.033919][T18165] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5053'. [ 280.245732][T18165] vhci_hcd: invalid port number 96 [ 280.251708][T18165] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 280.327187][ T29] kauditd_printk_skb: 869 callbacks suppressed [ 280.327202][ T29] audit: type=1326 audit(1751637224.167:28040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18174 comm="syz.1.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f6e8e929 code=0x7ffc0000 [ 280.379447][ T29] audit: type=1326 audit(1751637224.167:28041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18174 comm="syz.1.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1f6e8e929 code=0x7ffc0000 [ 280.403270][ T29] audit: type=1326 audit(1751637224.167:28042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18174 comm="syz.1.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f6e8e929 code=0x7ffc0000 [ 280.427175][ T29] audit: type=1326 audit(1751637224.167:28043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18174 comm="syz.1.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1f6e8e929 code=0x7ffc0000 [ 280.451430][ T29] audit: type=1326 audit(1751637224.167:28044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18174 comm="syz.1.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f6e8e929 code=0x7ffc0000 [ 280.451464][ T29] audit: type=1326 audit(1751637224.167:28045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18174 comm="syz.1.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fa1f6e8e929 code=0x7ffc0000 [ 280.451561][ T29] audit: type=1326 audit(1751637224.167:28046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18174 comm="syz.1.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f6e8e929 code=0x7ffc0000 [ 280.451591][ T29] audit: type=1326 audit(1751637224.167:28047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18174 comm="syz.1.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1f6e8e929 code=0x7ffc0000 [ 280.451620][ T29] audit: type=1326 audit(1751637224.167:28048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18174 comm="syz.1.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f6e8e929 code=0x7ffc0000 [ 280.451730][ T29] audit: type=1326 audit(1751637224.167:28049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18174 comm="syz.1.5055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1f6e8e929 code=0x7ffc0000 [ 280.577938][T18179] loop4: detected capacity change from 0 to 512 [ 280.652979][T18193] lo speed is unknown, defaulting to 1000 [ 280.653291][T18193] dummy0 speed is unknown, defaulting to 1000 [ 280.713769][T18179] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.5057: bad orphan inode 13 [ 280.714028][T18179] ext4_test_bit(bit=12, block=4) = 1 [ 280.714046][T18179] is_bad_inode(inode)=0 [ 280.714056][T18179] NEXT_ORPHAN(inode)=0 [ 280.714101][T18179] max_ino=32 [ 280.714111][T18179] i_nlink=1 [ 280.714558][T18179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.827303][T18179] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.5057: Unrecognised inode hash code 20 [ 280.838807][T18179] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5057: Corrupt directory, running e2fsck is recommended [ 280.854394][T18179] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.5057: corrupted in-inode xattr: e_value out of bounds [ 280.912901][T18179] cgroup: No subsys list or none specified [ 280.919271][T18179] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.5057: Unrecognised inode hash code 20 [ 280.931037][T18179] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5057: Corrupt directory, running e2fsck is recommended [ 280.956312][T18201] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 281.143183][T18232] loop5: detected capacity change from 0 to 128 [ 281.152119][T18232] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 281.160108][T18232] FAT-fs (loop5): Filesystem has been set read-only [ 281.174963][T18232] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 281.182920][T18232] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 281.236134][T11656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.293645][T18240] IPVS: stopping master sync thread 18245 ... [ 281.301252][T18245] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 281.373277][T18255] random: crng reseeded on system resumption [ 281.418162][T18261] lo speed is unknown, defaulting to 1000 [ 281.426834][T18261] dummy0 speed is unknown, defaulting to 1000 [ 281.488685][T18267] random: crng reseeded on system resumption [ 281.529375][T18261] netlink: 'syz.1.5083': attribute type 1 has an invalid length. [ 281.698433][T18279] cgroup: No subsys list or none specified [ 282.093188][T18302] random: crng reseeded on system resumption [ 282.155475][T18310] random: crng reseeded on system resumption [ 282.401014][T18325] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.904201][T18356] random: crng reseeded on system resumption [ 282.958063][T18353] vhci_hcd: invalid port number 96 [ 282.963267][T18353] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 282.979149][T18358] 9pnet_fd: Insufficient options for proto=fd [ 283.101298][T18372] lo speed is unknown, defaulting to 1000 [ 283.108960][T18372] dummy0 speed is unknown, defaulting to 1000 [ 283.291007][T18393] lo speed is unknown, defaulting to 1000 [ 283.297213][T18393] dummy0 speed is unknown, defaulting to 1000 [ 283.336905][T18393] netlink: 'syz.2.5122': attribute type 1 has an invalid length. [ 283.344892][T18393] __nla_validate_parse: 4 callbacks suppressed [ 283.344974][T18393] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5122'. [ 283.439059][T18406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.601467][T18412] lo speed is unknown, defaulting to 1000 [ 283.618348][T18412] dummy0 speed is unknown, defaulting to 1000 [ 283.769797][T18420] random: crng reseeded on system resumption [ 284.015606][T18436] FAULT_INJECTION: forcing a failure. [ 284.015606][T18436] name failslab, interval 1, probability 0, space 0, times 0 [ 284.028468][T18436] CPU: 1 UID: 0 PID: 18436 Comm: syz.4.5136 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 284.028540][T18436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.028558][T18436] Call Trace: [ 284.028566][T18436] [ 284.028576][T18436] __dump_stack+0x1d/0x30 [ 284.028601][T18436] dump_stack_lvl+0xe8/0x140 [ 284.028627][T18436] dump_stack+0x15/0x1b [ 284.028655][T18436] should_fail_ex+0x265/0x280 [ 284.028730][T18436] should_failslab+0x8c/0xb0 [ 284.028760][T18436] kmem_cache_alloc_noprof+0x50/0x310 [ 284.028796][T18436] ? skb_clone+0x151/0x1f0 [ 284.028880][T18436] skb_clone+0x151/0x1f0 [ 284.028900][T18436] __netlink_deliver_tap+0x2c9/0x500 [ 284.028949][T18436] netlink_unicast+0x64c/0x670 [ 284.029005][T18436] netlink_sendmsg+0x58b/0x6b0 [ 284.029031][T18436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.029057][T18436] __sock_sendmsg+0x145/0x180 [ 284.029098][T18436] ____sys_sendmsg+0x31e/0x4e0 [ 284.029146][T18436] ___sys_sendmsg+0x17b/0x1d0 [ 284.029221][T18436] __x64_sys_sendmsg+0xd4/0x160 [ 284.029260][T18436] x64_sys_call+0x2999/0x2fb0 [ 284.029283][T18436] do_syscall_64+0xd2/0x200 [ 284.029324][T18436] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 284.029357][T18436] ? clear_bhb_loop+0x40/0x90 [ 284.029417][T18436] ? clear_bhb_loop+0x40/0x90 [ 284.029439][T18436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.029460][T18436] RIP: 0033:0x7f12ee92e929 [ 284.029484][T18436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.029507][T18436] RSP: 002b:00007f12ecf97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.029529][T18436] RAX: ffffffffffffffda RBX: 00007f12eeb55fa0 RCX: 00007f12ee92e929 [ 284.029542][T18436] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 284.029554][T18436] RBP: 00007f12ecf97090 R08: 0000000000000000 R09: 0000000000000000 [ 284.029566][T18436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.029578][T18436] R13: 0000000000000000 R14: 00007f12eeb55fa0 R15: 00007ffd15633278 [ 284.029619][T18436] [ 284.321331][T18437] lo speed is unknown, defaulting to 1000 [ 284.327698][T18437] dummy0 speed is unknown, defaulting to 1000 [ 284.716112][T18449] lo speed is unknown, defaulting to 1000 [ 284.722516][T18449] dummy0 speed is unknown, defaulting to 1000 [ 284.783737][T18457] netlink: 'syz.1.5141': attribute type 1 has an invalid length. [ 284.786412][T18456] random: crng reseeded on system resumption [ 284.791538][T18457] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5141'. [ 284.813753][T18459] loop4: detected capacity change from 0 to 128 [ 284.853198][T18451] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 284.861118][T18451] FAT-fs (loop4): Filesystem has been set read-only [ 284.873682][T18451] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 284.895956][T18451] bio_check_eod: 23626 callbacks suppressed [ 284.895979][T18451] syz.4.5142: attempt to access beyond end of device [ 284.895979][T18451] loop4: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 284.983451][T18474] lo speed is unknown, defaulting to 1000 [ 284.989875][T18474] dummy0 speed is unknown, defaulting to 1000 [ 285.091572][T18489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5155'. [ 285.105310][T18465] loop5: detected capacity change from 0 to 128 [ 285.161280][T18465] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 285.184737][T18465] ext4 filesystem being mounted at /488/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 285.210281][T18489] vhci_hcd: invalid port number 96 [ 285.215485][T18489] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 285.298035][T18507] random: crng reseeded on system resumption [ 285.361402][ T29] kauditd_printk_skb: 709 callbacks suppressed [ 285.361450][ T29] audit: type=1326 audit(1751637229.202:28759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18503 comm="syz.0.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 285.391462][ T29] audit: type=1326 audit(1751637229.202:28760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18503 comm="syz.0.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cabfe929 code=0x7ffc0000 [ 285.517182][ T29] audit: type=1326 audit(1751637229.352:28761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18518 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f6e8e929 code=0x7ffc0000 [ 285.602184][ T29] audit: type=1326 audit(1751637229.352:28762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18518 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1f6e8e929 code=0x7ffc0000 [ 285.626164][ T29] audit: type=1326 audit(1751637229.352:28763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18518 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f6e8e929 code=0x7ffc0000 [ 285.649943][ T29] audit: type=1326 audit(1751637229.382:28764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18518 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa1f6e8e929 code=0x7ffc0000 [ 285.673649][ T29] audit: type=1326 audit(1751637229.382:28765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18518 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f6e8e929 code=0x7ffc0000 [ 285.697417][ T29] audit: type=1326 audit(1751637229.382:28766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18518 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1f6e8e929 code=0x7ffc0000 [ 285.721141][ T29] audit: type=1326 audit(1751637229.382:28767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18518 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f6e8e929 code=0x7ffc0000 [ 285.744764][ T29] audit: type=1326 audit(1751637229.382:28768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18518 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1f6e8e929 code=0x7ffc0000 [ 285.883730][T11854] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 286.221494][T18553] lo speed is unknown, defaulting to 1000 [ 286.227767][T18553] dummy0 speed is unknown, defaulting to 1000 [ 286.259308][T18558] random: crng reseeded on system resumption [ 286.347179][T18572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5177'. [ 286.430747][T18572] vhci_hcd: invalid port number 96 [ 286.435980][T18572] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 286.440946][T18574] loop4: detected capacity change from 0 to 128 [ 286.466349][T18574] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 286.466375][T18574] FAT-fs (loop4): Filesystem has been set read-only [ 286.466392][T18574] syz.4.5179: attempt to access beyond end of device [ 286.466392][T18574] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 286.466444][T18574] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 286.502765][T18574] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 286.525184][T18590] random: crng reseeded on system resumption [ 286.534482][T18574] syz.4.5179: attempt to access beyond end of device [ 286.534482][T18574] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 286.534616][T18574] syz.4.5179: attempt to access beyond end of device [ 286.534616][T18574] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 286.534681][T18574] syz.4.5179: attempt to access beyond end of device [ 286.534681][T18574] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 286.534731][T18574] syz.4.5179: attempt to access beyond end of device [ 286.534731][T18574] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 286.534777][T18574] syz.4.5179: attempt to access beyond end of device [ 286.534777][T18574] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 286.534912][T18574] syz.4.5179: attempt to access beyond end of device [ 286.534912][T18574] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 286.534989][T18574] syz.4.5179: attempt to access beyond end of device [ 286.534989][T18574] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 286.535043][T18574] syz.4.5179: attempt to access beyond end of device [ 286.535043][T18574] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 286.571212][T18582] buffer_io_error: 9990 callbacks suppressed [ 286.571230][T18582] Buffer I/O error on dev loop4, logical block 2065, async page read [ 286.571275][T18582] Buffer I/O error on dev loop4, logical block 2066, async page read [ 286.571346][T18582] Buffer I/O error on dev loop4, logical block 2067, async page read [ 286.571393][T18582] Buffer I/O error on dev loop4, logical block 2068, async page read [ 286.571423][T18582] Buffer I/O error on dev loop4, logical block 2069, async page read [ 286.571515][T18582] Buffer I/O error on dev loop4, logical block 2070, async page read [ 286.571554][T18582] Buffer I/O error on dev loop4, logical block 2071, async page read [ 286.571593][T18582] Buffer I/O error on dev loop4, logical block 2072, async page read [ 286.571642][T18582] Buffer I/O error on dev loop4, logical block 2065, async page read [ 286.571707][T18582] Buffer I/O error on dev loop4, logical block 2066, async page read [ 286.758695][T18601] lo speed is unknown, defaulting to 1000 [ 286.759055][T18601] dummy0 speed is unknown, defaulting to 1000 [ 287.327545][T18620] lo speed is unknown, defaulting to 1000 [ 287.349039][T18620] dummy0 speed is unknown, defaulting to 1000 [ 287.409506][T18634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5193'. [ 287.457811][T18631] loop4: detected capacity change from 0 to 128 [ 287.483585][T18631] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 287.491535][T18631] FAT-fs (loop4): Filesystem has been set read-only [ 287.501296][T18631] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 287.509547][T18631] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 287.572710][T18634] vhci_hcd: invalid port number 96 [ 287.577893][T18634] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 287.770897][T18650] FAULT_INJECTION: forcing a failure. [ 287.770897][T18650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.785387][T18650] CPU: 1 UID: 0 PID: 18650 Comm: syz.5.5199 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 287.785501][T18650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 287.785518][T18650] Call Trace: [ 287.785525][T18650] [ 287.785541][T18650] __dump_stack+0x1d/0x30 [ 287.785563][T18650] dump_stack_lvl+0xe8/0x140 [ 287.785584][T18650] dump_stack+0x15/0x1b [ 287.785649][T18650] should_fail_ex+0x265/0x280 [ 287.785683][T18650] should_fail+0xb/0x20 [ 287.785788][T18650] should_fail_usercopy+0x1a/0x20 [ 287.785836][T18650] _copy_to_user+0x20/0xa0 [ 287.785858][T18650] simple_read_from_buffer+0xb5/0x130 [ 287.785903][T18650] proc_fail_nth_read+0x100/0x140 [ 287.785976][T18650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.786120][T18650] vfs_read+0x1a0/0x6f0 [ 287.786199][T18650] ? fdget_pos+0xed/0x1d0 [ 287.786226][T18650] ? __tsan_read4+0xfc/0x190 [ 287.786281][T18650] ksys_read+0xda/0x1a0 [ 287.786318][T18650] __x64_sys_read+0x40/0x50 [ 287.786358][T18650] x64_sys_call+0x2d77/0x2fb0 [ 287.786394][T18650] do_syscall_64+0xd2/0x200 [ 287.786419][T18650] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 287.786455][T18650] ? clear_bhb_loop+0x40/0x90 [ 287.786477][T18650] ? clear_bhb_loop+0x40/0x90 [ 287.786535][T18650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.786556][T18650] RIP: 0033:0x7f28aa79d33c [ 287.786575][T18650] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 287.786599][T18650] RSP: 002b:00007f28a8e07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 287.786637][T18650] RAX: ffffffffffffffda RBX: 00007f28aa9c5fa0 RCX: 00007f28aa79d33c [ 287.786650][T18650] RDX: 000000000000000f RSI: 00007f28a8e070a0 RDI: 0000000000000004 [ 287.786662][T18650] RBP: 00007f28a8e07090 R08: 0000000000000000 R09: 0000000000000000 [ 287.786674][T18650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.786702][T18650] R13: 0000000000000000 R14: 00007f28aa9c5fa0 R15: 00007ffd94dee098 [ 287.786722][T18650] [ 288.034980][T18650] ------------[ cut here ]------------ [ 288.040529][T18650] WARNING: CPU: 1 PID: 18650 at kernel/events/core.c:7211 perf_pending_task+0x206/0x210 [ 288.050371][T18650] Modules linked in: [ 288.054480][T18650] CPU: 1 UID: 0 PID: 18650 Comm: syz.5.5199 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 288.067182][T18650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.077413][T18650] RIP: 0010:perf_pending_task+0x206/0x210 [ 288.083254][T18650] Code: 10 f0 fc ff 41 88 6c 1d 00 eb 05 e8 44 ec e2 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 2b ec e2 ff 90 <0f> 0b 90 eb 86 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 288.102995][T18650] RSP: 0018:ffffc900015f3da8 EFLAGS: 00010293 [ 288.109099][T18650] RAX: ffffffff8174d6c5 RBX: 0000000000000000 RCX: ffff888103501040 [ 288.117154][T18650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881042aea88 [ 288.125315][T18650] RBP: 000000007a9c66d0 R08: 00018881042aea8f R09: 0000000000000000 [ 288.133386][T18650] R10: ffffc900015f3c70 R11: ffffffff8174d4c0 R12: ffff88811a41d840 [ 288.141522][T18650] R13: ffff888103501040 R14: ffff88811a41d988 R15: ffff8881042aea00 [ 288.149726][T18650] FS: 0000000000000000(0000) GS:ffff8882aef30000(0000) knlGS:0000000000000000 [ 288.158745][T18650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.165440][T18650] CR2: 000000110c2a6d19 CR3: 000000010b356000 CR4: 00000000003506f0 [ 288.173473][T18650] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.181592][T18650] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 288.189594][T18650] Call Trace: [ 288.192934][T18650] [ 288.195896][T18650] task_work_run+0x131/0x1a0 [ 288.200536][T18650] do_exit+0x483/0x1590 [ 288.204846][T18650] ? _raw_spin_unlock_irq+0x14/0x50 [ 288.210195][T18650] ? _raw_spin_unlock_irq+0x2f/0x50 [ 288.215494][T18650] do_group_exit+0x139/0x140 [ 288.220166][T18650] __x64_sys_exit_group+0x1f/0x20 [ 288.225275][T18650] x64_sys_call+0x2fa4/0x2fb0 [ 288.230049][T18650] do_syscall_64+0xd2/0x200 [ 288.234624][T18650] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 288.240515][T18650] ? clear_bhb_loop+0x40/0x90 [ 288.245271][T18650] ? clear_bhb_loop+0x40/0x90 [ 288.249998][T18650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.255963][T18650] RIP: 0033:0x7f28aa79e929 [ 288.260422][T18650] Code: Unable to access opcode bytes at 0x7f28aa79e8ff. [ 288.267506][T18650] RSP: 002b:00007f28a8e06f48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 288.275985][T18650] RAX: ffffffffffffffda RBX: 00007f28aa7fdbf8 RCX: 00007f28aa79e929 [ 288.284078][T18650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 288.292098][T18650] RBP: 000000000000000e R08: 00007f28a8e04ce6 R09: 0000000000000001 [ 288.300129][T18650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.308161][T18650] R13: 0000000000000000 R14: 00007f28aa9c5fa0 R15: 00007ffd94dee098 [ 288.316245][T18650] [ 288.319279][T18650] ---[ end trace 0000000000000000 ]--- [ 288.324935][T18655] ================================================================== [ 288.333054][T18655] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 288.339781][T18655] [ 288.342114][T18655] write to 0xffff88811b2be510 of 8 bytes by task 18654 on cpu 0: [ 288.349844][T18655] call_rcu+0x44/0x3f0 [ 288.353939][T18655] mas_replace_node+0x2e7/0x410 [ 288.358808][T18655] mas_wr_store_entry+0x2406/0x2b50 [ 288.364037][T18655] mas_store_prealloc+0x74d/0x9e0 [ 288.369092][T18655] vma_iter_store_new+0x1c5/0x200 [ 288.374135][T18655] vma_complete+0x125/0x580 [ 288.378653][T18655] __split_vma+0x591/0x650 [ 288.383093][T18655] vma_modify+0x21e/0xc80 [ 288.387439][T18655] vma_modify_flags+0x101/0x130 [ 288.392310][T18655] mprotect_fixup+0x2cc/0x570 [ 288.397009][T18655] do_mprotect_pkey+0x6d6/0x980 [ 288.401881][T18655] __x64_sys_mprotect+0x48/0x60 [ 288.406753][T18655] x64_sys_call+0x2794/0x2fb0 [ 288.411447][T18655] do_syscall_64+0xd2/0x200 [ 288.415969][T18655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.421883][T18655] [ 288.424307][T18655] read to 0xffff88811b2be510 of 8 bytes by task 18655 on cpu 1: [ 288.431953][T18655] mas_state_walk+0x2f5/0x650 [ 288.436662][T18655] mas_walk+0x30/0x120 [ 288.440760][T18655] lock_vma_under_rcu+0xa2/0x2f0 [ 288.445719][T18655] do_user_addr_fault+0x233/0x1090 [ 288.450859][T18655] exc_page_fault+0x62/0xa0 [ 288.455387][T18655] asm_exc_page_fault+0x26/0x30 [ 288.460259][T18655] [ 288.462590][T18655] value changed: 0x00007f4256275fff -> 0xffffffff855ee850 [ 288.469705][T18655] [ 288.472036][T18655] Reported by Kernel Concurrency Sanitizer on: [ 288.478206][T18655] CPU: 1 UID: 0 PID: 18655 Comm: syz.2.5201 Tainted: G W 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 288.492294][T18655] Tainted: [W]=WARN [ 288.496105][T18655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.506175][T18655] ================================================================== [ 295.861231][ T31] bridge_slave_1: left allmulticast mode [ 295.867072][ T31] bridge_slave_1: left promiscuous mode [ 295.873172][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.881779][ T31] bridge_slave_0: left allmulticast mode [ 295.887563][ T31] bridge_slave_0: left promiscuous mode [ 295.893287][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.969600][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.979677][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.989264][ T31] bond0 (unregistering): Released all slaves [ 295.998088][ T31] bond1 (unregistering): Released all slaves [ 296.006757][ T31] bond2 (unregistering): Released all slaves [ 296.015331][ T31] bond3 (unregistering): Released all slaves [ 296.023939][ T31] bond4 (unregistering): Released all slaves [ 296.072952][ T31] hsr_slave_0: left promiscuous mode [ 296.078670][ T31] hsr_slave_1: left promiscuous mode [ 296.084255][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.091716][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.099709][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.107175][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.116407][ T31] veth1_macvtap: left promiscuous mode [ 296.121969][ T31] veth0_macvtap: left promiscuous mode [ 296.127488][ T31] veth1_vlan: left promiscuous mode [ 296.132784][ T31] veth0_vlan: left promiscuous mode [ 296.219277][ T10] lo speed is unknown, defaulting to 1000 [ 296.225182][ T10] infiniband syz0: ib_query_port failed (-19) [ 296.461064][ T31] IPVS: stop unused estimator thread 0...