0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 49) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1a}, 0x48) [ 573.500864][ T4949] CPU: 0 PID: 4949 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 02:42:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1c}, 0x48) [ 573.505210][ T4949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 573.509093][ T4949] Call Trace: [ 573.510335][ T4949] [ 573.511436][ T4949] dump_stack_lvl+0x125/0x1b0 [ 573.513195][ T4949] should_fail_ex+0x496/0x5b0 [ 573.514953][ T4949] should_failslab+0x9/0x20 [ 573.516655][ T4949] kmem_cache_alloc+0x33a/0x3b0 [ 573.518454][ T4949] __kernfs_new_node+0xd3/0x8a0 [ 573.520273][ T4949] ? kernfs_path_from_node+0x60/0x60 [ 573.522216][ T4949] ? find_held_lock+0x2d/0x110 [ 573.524042][ T4949] ? kernfs_add_one+0x3ca/0x510 [ 573.525834][ T4949] ? reacquire_held_locks+0x4b0/0x4b0 [ 573.527812][ T4949] kernfs_create_dir_ns+0x9a/0x210 [ 573.529685][ T4949] internal_create_group+0x780/0xb40 [ 573.531644][ T4949] ? kernfs_add_one+0x17f/0x510 [ 573.533472][ T4949] ? sysfs_remove_group+0x170/0x170 [ 573.535392][ T4949] ? panel_show+0xf0/0xf0 [ 573.536989][ T4949] ? bus_to_subsys+0x129/0x160 [ 573.538757][ T4949] dpm_sysfs_add+0x7c/0x280 [ 573.540440][ T4949] device_add+0x9e5/0x1b40 [ 573.542082][ T4949] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 573.544607][ T4949] ? nci_free_device+0x50/0x50 [ 573.546366][ T4949] ? mark_held_locks+0x9f/0xe0 [ 573.548144][ T4949] ? lockdep_init_map_type+0x16d/0x7c0 [ 573.550138][ T4949] nfc_register_device+0x41/0x3c0 [ 573.551997][ T4949] nci_register_device+0x7f4/0xb80 [ 573.553918][ T4949] ? nci_init_complete_req+0x410/0x410 [ 573.555928][ T4949] virtual_ncidev_open+0x147/0x220 [ 573.557879][ T4949] ? virtual_ncidev_read+0x4e0/0x4e0 [ 573.559925][ T4949] misc_open+0x3da/0x4c0 [ 573.561488][ T4949] ? misc_devnode+0x120/0x120 [ 573.563284][ T4949] chrdev_open+0x277/0x700 [ 573.564944][ T4949] ? __unregister_chrdev+0x100/0x100 [ 573.566867][ T4949] ? fsnotify_perm.part.0+0x25d/0x630 [ 573.568835][ T4949] ? fsnotify_perm.part.0+0x268/0x630 [ 573.570813][ T4949] do_dentry_open+0x88b/0x1780 [ 573.572622][ T4949] ? __unregister_chrdev+0x100/0x100 [ 573.574577][ T4949] ? may_open+0x1f2/0x400 [ 573.576174][ T4949] path_openat+0x19af/0x29c0 [ 573.577883][ T4949] ? path_lookupat+0x770/0x770 [ 573.579650][ T4949] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 573.581874][ T4949] do_filp_open+0x1de/0x430 [ 573.583788][ T4949] ? may_open_dev+0xf0/0xf0 [ 573.585891][ T4949] ? _raw_spin_unlock+0x28/0x40 [ 573.587695][ T4949] ? alloc_fd+0x2da/0x6c0 [ 573.589300][ T4949] do_sys_openat2+0x176/0x1e0 [ 573.591040][ T4949] ? build_open_flags+0x690/0x690 [ 573.592990][ T4949] __ia32_compat_sys_openat+0x16e/0x200 [ 573.595027][ T4949] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 573.597038][ T4949] ? ksys_write+0x1a7/0x250 [ 573.598714][ T4949] __do_fast_syscall_32+0x61/0xe0 [ 573.600583][ T4949] do_fast_syscall_32+0x33/0x70 [ 573.602381][ T4949] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 573.605276][ T4949] RIP: 0023:0xf7f8d579 [ 573.606893][ T4949] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 573.614245][ T4949] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 573.617319][ T4949] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 573.620249][ T4949] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 573.623276][ T4949] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 573.626687][ T4949] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 573.629603][ T4949] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 573.632543][ T4949] [ 573.643703][ T4962] FAULT_INJECTION: forcing a failure. [ 573.643703][ T4962] name failslab, interval 1, probability 0, space 0, times 0 02:42:21 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 50) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1a}, 0x48) 02:42:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1d}, 0x48) [ 573.656302][ T4962] CPU: 0 PID: 4962 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 573.660207][ T4962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 573.664283][ T4962] Call Trace: [ 573.665817][ T4962] [ 573.666918][ T4962] dump_stack_lvl+0x125/0x1b0 02:42:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1e}, 0x48) [ 573.668688][ T4962] should_fail_ex+0x496/0x5b0 [ 573.670647][ T4962] should_failslab+0x9/0x20 [ 573.672514][ T4962] kmem_cache_alloc+0x33a/0x3b0 [ 573.674374][ T4962] __kernfs_new_node+0xd3/0x8a0 [ 573.676198][ T4962] ? kernfs_path_from_node+0x60/0x60 02:42:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x21}, 0x48) [ 573.678158][ T4962] ? find_held_lock+0x2d/0x110 [ 573.680100][ T4962] ? kernfs_add_one+0x3ca/0x510 [ 573.681987][ T4962] ? reacquire_held_locks+0x4b0/0x4b0 [ 573.684397][ T4962] kernfs_create_dir_ns+0x9a/0x210 [ 573.686566][ T4962] internal_create_group+0x780/0xb40 [ 573.688533][ T4962] ? kernfs_add_one+0x17f/0x510 [ 573.690340][ T4962] ? sysfs_remove_group+0x170/0x170 [ 573.692327][ T4962] ? panel_show+0xf0/0xf0 [ 573.693935][ T4962] ? bus_to_subsys+0x129/0x160 [ 573.695726][ T4962] dpm_sysfs_add+0x7c/0x280 [ 573.697416][ T4962] device_add+0x9e5/0x1b40 [ 573.699079][ T4962] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 573.701611][ T4962] ? nci_free_device+0x50/0x50 [ 573.703727][ T4962] ? mark_held_locks+0x9f/0xe0 [ 573.705947][ T4962] ? lockdep_init_map_type+0x16d/0x7c0 [ 573.707982][ T4962] nfc_register_device+0x41/0x3c0 [ 573.709844][ T4962] nci_register_device+0x7f4/0xb80 [ 573.711758][ T4962] ? nci_init_complete_req+0x410/0x410 [ 573.714090][ T4962] virtual_ncidev_open+0x147/0x220 [ 573.715986][ T4962] ? virtual_ncidev_read+0x4e0/0x4e0 [ 573.717928][ T4962] misc_open+0x3da/0x4c0 [ 573.719518][ T4962] ? misc_devnode+0x120/0x120 [ 573.721262][ T4962] chrdev_open+0x277/0x700 [ 573.722958][ T4962] ? __unregister_chrdev+0x100/0x100 [ 573.725197][ T4962] ? fsnotify_perm.part.0+0x25d/0x630 [ 573.727172][ T4962] ? fsnotify_perm.part.0+0x268/0x630 [ 573.729294][ T4962] do_dentry_open+0x88b/0x1780 [ 573.731097][ T4962] ? __unregister_chrdev+0x100/0x100 [ 573.733228][ T4962] ? may_open+0x1f2/0x400 [ 573.734902][ T4962] path_openat+0x19af/0x29c0 [ 573.736677][ T4962] ? path_lookupat+0x770/0x770 [ 573.738500][ T4962] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 573.740775][ T4962] do_filp_open+0x1de/0x430 [ 573.742637][ T4962] ? may_open_dev+0xf0/0xf0 [ 573.744727][ T4962] ? _raw_spin_unlock+0x28/0x40 [ 573.746950][ T4962] ? alloc_fd+0x2da/0x6c0 [ 573.748816][ T4962] do_sys_openat2+0x176/0x1e0 [ 573.750570][ T4962] ? build_open_flags+0x690/0x690 [ 573.752649][ T4962] __ia32_compat_sys_openat+0x16e/0x200 [ 573.755227][ T4962] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 573.757277][ T4962] ? ksys_write+0x1a7/0x250 [ 573.758971][ T4962] __do_fast_syscall_32+0x61/0xe0 [ 573.760863][ T4962] do_fast_syscall_32+0x33/0x70 [ 573.762726][ T4962] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 573.765231][ T4962] RIP: 0023:0xf7f9e579 [ 573.766762][ T4962] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 573.774000][ T4962] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 573.777085][ T4962] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 573.780011][ T4962] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 573.782977][ T4962] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 573.785902][ T4962] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 573.788826][ T4962] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 573.791760][ T4962] [ 573.805917][ T4974] FAULT_INJECTION: forcing a failure. [ 573.805917][ T4974] name failslab, interval 1, probability 0, space 0, times 0 [ 573.810787][ T4974] CPU: 0 PID: 4974 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 02:42:21 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 50) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x22}, 0x48) 02:42:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1a}, 0x48) [ 573.814707][ T4974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 573.818928][ T4974] Call Trace: [ 573.820199][ T4974] [ 573.821305][ T4974] dump_stack_lvl+0x125/0x1b0 [ 573.823368][ T4974] should_fail_ex+0x496/0x5b0 [ 573.825213][ T4974] should_failslab+0x9/0x20 [ 573.826923][ T4974] kmem_cache_alloc+0x33a/0x3b0 [ 573.828765][ T4974] __kernfs_new_node+0xd3/0x8a0 [ 573.830673][ T4974] ? kernfs_path_from_node+0x60/0x60 [ 573.832711][ T4974] ? find_held_lock+0x2d/0x110 [ 573.834572][ T4974] ? kernfs_add_one+0x3ca/0x510 [ 573.836459][ T4974] ? reacquire_held_locks+0x4b0/0x4b0 [ 573.838482][ T4974] kernfs_create_dir_ns+0x9a/0x210 [ 573.840477][ T4974] internal_create_group+0x780/0xb40 [ 573.842506][ T4974] ? kernfs_add_one+0x17f/0x510 [ 573.844399][ T4974] ? sysfs_remove_group+0x170/0x170 [ 573.846396][ T4974] ? panel_show+0xf0/0xf0 [ 573.848088][ T4974] ? bus_to_subsys+0x129/0x160 [ 573.849915][ T4974] dpm_sysfs_add+0x7c/0x280 [ 573.851699][ T4974] device_add+0x9e5/0x1b40 [ 573.853421][ T4974] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 573.856055][ T4974] ? nci_free_device+0x50/0x50 [ 573.857865][ T4974] ? mark_held_locks+0x9f/0xe0 [ 573.859708][ T4974] ? lockdep_init_map_type+0x16d/0x7c0 [ 573.861783][ T4974] nfc_register_device+0x41/0x3c0 [ 573.863700][ T4974] nci_register_device+0x7f4/0xb80 [ 573.865646][ T4974] ? nci_init_complete_req+0x410/0x410 [ 573.867757][ T4974] virtual_ncidev_open+0x147/0x220 [ 573.869719][ T4974] ? virtual_ncidev_read+0x4e0/0x4e0 [ 573.871727][ T4974] misc_open+0x3da/0x4c0 [ 573.873367][ T4974] ? misc_devnode+0x120/0x120 [ 573.875135][ T4974] chrdev_open+0x277/0x700 [ 573.876861][ T4974] ? __unregister_chrdev+0x100/0x100 [ 573.878858][ T4974] ? fsnotify_perm.part.0+0x25d/0x630 [ 573.881000][ T4974] ? fsnotify_perm.part.0+0x268/0x630 [ 573.882980][ T4974] do_dentry_open+0x88b/0x1780 [ 573.884807][ T4974] ? __unregister_chrdev+0x100/0x100 [ 573.886763][ T4974] ? may_open+0x1f2/0x400 [ 573.888369][ T4974] path_openat+0x19af/0x29c0 [ 573.890103][ T4974] ? path_lookupat+0x770/0x770 [ 573.891890][ T4974] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 573.894096][ T4974] do_filp_open+0x1de/0x430 [ 573.895784][ T4974] ? may_open_dev+0xf0/0xf0 [ 573.897474][ T4974] ? _raw_spin_unlock+0x28/0x40 [ 573.899279][ T4974] ? alloc_fd+0x2da/0x6c0 [ 573.900883][ T4974] do_sys_openat2+0x176/0x1e0 [ 573.902623][ T4974] ? build_open_flags+0x690/0x690 [ 573.904490][ T4974] __ia32_compat_sys_openat+0x16e/0x200 [ 573.906520][ T4974] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 573.908527][ T4974] ? ksys_write+0x1a7/0x250 [ 573.910212][ T4974] __do_fast_syscall_32+0x61/0xe0 [ 573.912109][ T4974] do_fast_syscall_32+0x33/0x70 [ 573.913910][ T4974] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 573.916231][ T4974] RIP: 0023:0xf7f8d579 [ 573.917739][ T4974] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 573.924793][ T4974] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 573.927843][ T4974] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 573.930731][ T4974] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 573.933679][ T4974] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 573.936568][ T4974] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 573.939462][ T4974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 573.942373][ T4974] [ 573.953378][ T4990] FAULT_INJECTION: forcing a failure. 02:42:21 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 51) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x23}, 0x48) 02:42:21 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 573.953378][ T4990] name failslab, interval 1, probability 0, space 0, times 0 [ 573.960846][ T4990] CPU: 0 PID: 4990 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 573.965111][ T4990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 573.969388][ T4990] Call Trace: 02:42:21 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x300}, 0x48) [ 573.971053][ T4990] [ 573.972687][ T4990] dump_stack_lvl+0x125/0x1b0 [ 573.974815][ T4990] should_fail_ex+0x496/0x5b0 [ 573.976646][ T4990] should_failslab+0x9/0x20 [ 573.978371][ T4990] kmem_cache_alloc+0x33a/0x3b0 [ 573.980250][ T4990] __kernfs_new_node+0xd3/0x8a0 [ 573.982165][ T4990] ? kernfs_path_from_node+0x60/0x60 [ 573.984188][ T4990] ? find_held_lock+0x2d/0x110 [ 573.985999][ T4990] ? kernfs_add_one+0x3ca/0x510 [ 573.987883][ T4990] ? reacquire_held_locks+0x4b0/0x4b0 [ 573.990036][ T4990] kernfs_create_dir_ns+0x9a/0x210 [ 573.992012][ T4990] internal_create_group+0x780/0xb40 [ 573.994012][ T4990] ? kernfs_add_one+0x17f/0x510 [ 573.995862][ T4990] ? sysfs_remove_group+0x170/0x170 [ 573.997825][ T4990] ? panel_show+0xf0/0xf0 [ 573.999456][ T4990] ? bus_to_subsys+0x129/0x160 [ 574.001296][ T4990] dpm_sysfs_add+0x7c/0x280 [ 574.003070][ T4990] device_add+0x9e5/0x1b40 [ 574.004800][ T4990] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 574.007353][ T4990] ? nci_free_device+0x50/0x50 [ 574.009192][ T4990] ? mark_held_locks+0x9f/0xe0 [ 574.010987][ T4990] ? lockdep_init_map_type+0x16d/0x7c0 [ 574.013215][ T4990] nfc_register_device+0x41/0x3c0 [ 574.015124][ T4990] nci_register_device+0x7f4/0xb80 [ 574.017102][ T4990] ? nci_init_complete_req+0x410/0x410 [ 574.019167][ T4990] virtual_ncidev_open+0x147/0x220 [ 574.021089][ T4990] ? virtual_ncidev_read+0x4e0/0x4e0 [ 574.023112][ T4990] misc_open+0x3da/0x4c0 [ 574.024745][ T4990] ? misc_devnode+0x120/0x120 [ 574.026502][ T4990] chrdev_open+0x277/0x700 [ 574.028215][ T4990] ? __unregister_chrdev+0x100/0x100 [ 574.030180][ T4990] ? fsnotify_perm.part.0+0x25d/0x630 [ 574.032240][ T4990] ? fsnotify_perm.part.0+0x268/0x630 [ 574.034263][ T4990] do_dentry_open+0x88b/0x1780 [ 574.036106][ T4990] ? __unregister_chrdev+0x100/0x100 [ 574.038094][ T4990] ? may_open+0x1f2/0x400 [ 574.039753][ T4990] path_openat+0x19af/0x29c0 [ 574.041505][ T4990] ? path_lookupat+0x770/0x770 [ 574.043373][ T4990] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 574.045648][ T4990] do_filp_open+0x1de/0x430 [ 574.047374][ T4990] ? may_open_dev+0xf0/0xf0 [ 574.049111][ T4990] ? _raw_spin_unlock+0x28/0x40 [ 574.050962][ T4990] ? alloc_fd+0x2da/0x6c0 [ 574.052629][ T4990] do_sys_openat2+0x176/0x1e0 [ 574.054437][ T4990] ? build_open_flags+0x690/0x690 [ 574.056385][ T4990] __ia32_compat_sys_openat+0x16e/0x200 [ 574.058466][ T4990] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 574.060546][ T4990] ? ksys_write+0x1a7/0x250 [ 574.062350][ T4990] __do_fast_syscall_32+0x61/0xe0 [ 574.064270][ T4990] do_fast_syscall_32+0x33/0x70 [ 574.066110][ T4990] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 574.068498][ T4990] RIP: 0023:0xf7f9e579 [ 574.070054][ T4990] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 574.077373][ T4990] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 574.080519][ T4990] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 574.083527][ T4990] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 574.086471][ T4990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 574.089454][ T4990] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 574.092602][ T4990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 574.095563][ T4990] [ 574.107840][ T5000] FAULT_INJECTION: forcing a failure. [ 574.107840][ T5000] name failslab, interval 1, probability 0, space 0, times 0 02:42:21 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 51) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:21 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x500}, 0x48) [ 574.112846][ T5000] CPU: 0 PID: 5000 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 574.117423][ T5000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 574.121426][ T5000] Call Trace: [ 574.122695][ T5000] [ 574.123806][ T5000] dump_stack_lvl+0x125/0x1b0 [ 574.125578][ T5000] should_fail_ex+0x496/0x5b0 [ 574.127335][ T5000] should_failslab+0x9/0x20 [ 574.129031][ T5000] kmem_cache_alloc+0x33a/0x3b0 [ 574.130823][ T5000] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 574.133068][ T5000] __kernfs_new_node+0xd3/0x8a0 [ 574.134860][ T5000] ? kernfs_path_from_node+0x60/0x60 [ 574.136806][ T5000] ? lock_sync+0x190/0x190 [ 574.138465][ T5000] ? find_held_lock+0x2d/0x110 [ 574.140229][ T5000] kernfs_new_node+0x94/0x110 [ 574.141963][ T5000] __kernfs_create_file+0x53/0x340 [ 574.143833][ T5000] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 574.145784][ T5000] sysfs_merge_group+0x1b1/0x330 [ 574.147624][ T5000] ? sysfs_update_groups+0x30/0x30 [ 574.149511][ T5000] ? panel_show+0xf0/0xf0 [ 574.151099][ T5000] ? bus_to_subsys+0x129/0x160 [ 574.152896][ T5000] dpm_sysfs_add+0x22f/0x280 [ 574.154596][ T5000] device_add+0x9e5/0x1b40 [ 574.156246][ T5000] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 574.158746][ T5000] ? nci_free_device+0x50/0x50 [ 574.160529][ T5000] ? mark_held_locks+0x9f/0xe0 [ 574.162296][ T5000] ? lockdep_init_map_type+0x16d/0x7c0 [ 574.164309][ T5000] nfc_register_device+0x41/0x3c0 [ 574.166166][ T5000] nci_register_device+0x7f4/0xb80 [ 574.168058][ T5000] ? nci_init_complete_req+0x410/0x410 [ 574.170055][ T5000] virtual_ncidev_open+0x147/0x220 [ 574.171977][ T5000] ? virtual_ncidev_read+0x4e0/0x4e0 [ 574.173913][ T5000] misc_open+0x3da/0x4c0 [ 574.175471][ T5000] ? misc_devnode+0x120/0x120 [ 574.177193][ T5000] chrdev_open+0x277/0x700 [ 574.178836][ T5000] ? __unregister_chrdev+0x100/0x100 [ 574.180781][ T5000] ? fsnotify_perm.part.0+0x25d/0x630 [ 574.182748][ T5000] ? fsnotify_perm.part.0+0x268/0x630 [ 574.184714][ T5000] do_dentry_open+0x88b/0x1780 [ 574.186487][ T5000] ? __unregister_chrdev+0x100/0x100 [ 574.188431][ T5000] ? may_open+0x1f2/0x400 [ 574.190027][ T5000] path_openat+0x19af/0x29c0 [ 574.191756][ T5000] ? path_lookupat+0x770/0x770 [ 574.193524][ T5000] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 574.195718][ T5000] do_filp_open+0x1de/0x430 [ 574.197369][ T5000] ? may_open_dev+0xf0/0xf0 [ 574.199046][ T5000] ? _raw_spin_unlock+0x28/0x40 [ 574.200831][ T5000] ? alloc_fd+0x2da/0x6c0 [ 574.202419][ T5000] do_sys_openat2+0x176/0x1e0 [ 574.204158][ T5000] ? build_open_flags+0x690/0x690 [ 574.206002][ T5000] __ia32_compat_sys_openat+0x16e/0x200 [ 574.208037][ T5000] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 574.210033][ T5000] ? ksys_write+0x1a7/0x250 [ 574.211737][ T5000] __do_fast_syscall_32+0x61/0xe0 [ 574.213598][ T5000] do_fast_syscall_32+0x33/0x70 [ 574.215391][ T5000] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 574.217694][ T5000] RIP: 0023:0xf7f8d579 [ 574.219210][ T5000] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 574.226213][ T5000] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 574.229268][ T5000] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 574.232155][ T5000] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 574.235050][ T5000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 574.237944][ T5000] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 574.240827][ T5000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 574.243732][ T5000] [ 574.255148][ T5014] FAULT_INJECTION: forcing a failure. [ 574.255148][ T5014] name failslab, interval 1, probability 0, space 0, times 0 02:42:22 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 52) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x600}, 0x48) 02:42:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) [ 574.260570][ T5014] CPU: 1 PID: 5014 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 574.264662][ T5014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 574.268333][ T5014] Call Trace: [ 574.269561][ T5014] [ 574.270654][ T5014] dump_stack_lvl+0x125/0x1b0 [ 574.272461][ T5014] should_fail_ex+0x496/0x5b0 [ 574.274200][ T5014] should_failslab+0x9/0x20 [ 574.275890][ T5014] kmem_cache_alloc+0x33a/0x3b0 [ 574.277670][ T5014] __kernfs_new_node+0xd3/0x8a0 02:42:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x700}, 0x48) [ 574.279460][ T5014] ? kernfs_add_one+0x3ca/0x510 02:42:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) [ 574.281418][ T5014] ? kernfs_path_from_node+0x60/0x60 [ 574.283440][ T5014] ? up_write+0x1b3/0x510 [ 574.285075][ T5014] kernfs_new_node+0x94/0x110 [ 574.286838][ T5014] __kernfs_create_file+0x53/0x340 [ 574.288730][ T5014] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 574.290698][ T5014] sysfs_merge_group+0x1b1/0x330 [ 574.292678][ T5014] ? sysfs_update_groups+0x30/0x30 [ 574.294556][ T5014] ? panel_show+0xf0/0xf0 [ 574.296188][ T5014] ? bus_to_subsys+0x129/0x160 [ 574.298071][ T5014] dpm_sysfs_add+0x22f/0x280 [ 574.299835][ T5014] device_add+0x9e5/0x1b40 [ 574.301543][ T5014] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 574.304221][ T5014] ? nci_free_device+0x50/0x50 [ 574.306044][ T5014] ? mark_held_locks+0x9f/0xe0 [ 574.307854][ T5014] ? lockdep_init_map_type+0x16d/0x7c0 [ 574.309912][ T5014] nfc_register_device+0x41/0x3c0 [ 574.311926][ T5014] nci_register_device+0x7f4/0xb80 [ 574.313856][ T5014] ? nci_init_complete_req+0x410/0x410 [ 574.315865][ T5014] virtual_ncidev_open+0x147/0x220 [ 574.317743][ T5014] ? virtual_ncidev_read+0x4e0/0x4e0 [ 574.319686][ T5014] misc_open+0x3da/0x4c0 [ 574.321241][ T5014] ? misc_devnode+0x120/0x120 [ 574.323004][ T5014] chrdev_open+0x277/0x700 [ 574.324700][ T5014] ? __unregister_chrdev+0x100/0x100 [ 574.326634][ T5014] ? fsnotify_perm.part.0+0x25d/0x630 [ 574.328601][ T5014] ? fsnotify_perm.part.0+0x268/0x630 [ 574.330562][ T5014] do_dentry_open+0x88b/0x1780 [ 574.332373][ T5014] ? __unregister_chrdev+0x100/0x100 [ 574.334304][ T5014] ? may_open+0x1f2/0x400 [ 574.335930][ T5014] path_openat+0x19af/0x29c0 [ 574.337641][ T5014] ? path_lookupat+0x770/0x770 [ 574.339408][ T5014] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 574.341647][ T5014] do_filp_open+0x1de/0x430 [ 574.343335][ T5014] ? may_open_dev+0xf0/0xf0 [ 574.345069][ T5014] ? _raw_spin_unlock+0x28/0x40 [ 574.346873][ T5014] ? alloc_fd+0x2da/0x6c0 [ 574.348468][ T5014] do_sys_openat2+0x176/0x1e0 [ 574.350199][ T5014] ? build_open_flags+0x690/0x690 [ 574.352097][ T5014] __ia32_compat_sys_openat+0x16e/0x200 [ 574.354121][ T5014] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 574.356111][ T5014] ? ksys_write+0x1a7/0x250 [ 574.357782][ T5014] __do_fast_syscall_32+0x61/0xe0 [ 574.359627][ T5014] do_fast_syscall_32+0x33/0x70 [ 574.361405][ T5014] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 574.364192][ T5014] RIP: 0023:0xf7f9e579 [ 574.365693][ T5014] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 574.372687][ T5014] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 574.375751][ T5014] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 574.378610][ T5014] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 574.381508][ T5014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 574.384416][ T5014] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 574.387308][ T5014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 574.390213][ T5014] [ 574.403756][ T5024] FAULT_INJECTION: forcing a failure. 02:42:22 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 52) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x900}, 0x48) 02:42:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) [ 574.403756][ T5024] name failslab, interval 1, probability 0, space 0, times 0 [ 574.409271][ T5024] CPU: 3 PID: 5024 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 574.413068][ T5024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 574.416785][ T5024] Call Trace: [ 574.418040][ T5024] [ 574.419143][ T5024] dump_stack_lvl+0x125/0x1b0 [ 574.420877][ T5024] should_fail_ex+0x496/0x5b0 [ 574.422719][ T5024] should_failslab+0x9/0x20 [ 574.424433][ T5024] kmem_cache_alloc+0x33a/0x3b0 [ 574.426286][ T5024] __kernfs_new_node+0xd3/0x8a0 [ 574.428265][ T5024] ? kernfs_add_one+0x3ca/0x510 [ 574.430099][ T5024] ? kernfs_path_from_node+0x60/0x60 [ 574.432126][ T5024] ? up_write+0x1b3/0x510 [ 574.433737][ T5024] kernfs_new_node+0x94/0x110 [ 574.435525][ T5024] __kernfs_create_file+0x53/0x340 [ 574.437445][ T5024] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 574.439425][ T5024] sysfs_merge_group+0x1b1/0x330 [ 574.441281][ T5024] ? sysfs_update_groups+0x30/0x30 [ 574.443223][ T5024] ? panel_show+0xf0/0xf0 [ 574.445098][ T5024] ? bus_to_subsys+0x129/0x160 [ 574.446915][ T5024] dpm_sysfs_add+0x22f/0x280 [ 574.448604][ T5024] device_add+0x9e5/0x1b40 [ 574.450231][ T5024] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 574.452724][ T5024] ? nci_free_device+0x50/0x50 [ 574.454483][ T5024] ? mark_held_locks+0x9f/0xe0 [ 574.456244][ T5024] ? lockdep_init_map_type+0x16d/0x7c0 [ 574.458341][ T5024] nfc_register_device+0x41/0x3c0 [ 574.460210][ T5024] nci_register_device+0x7f4/0xb80 [ 574.462087][ T5024] ? nci_init_complete_req+0x410/0x410 [ 574.464089][ T5024] virtual_ncidev_open+0x147/0x220 [ 574.465953][ T5024] ? virtual_ncidev_read+0x4e0/0x4e0 [ 574.467880][ T5024] misc_open+0x3da/0x4c0 [ 574.469424][ T5024] ? misc_devnode+0x120/0x120 [ 574.471156][ T5024] chrdev_open+0x277/0x700 [ 574.472775][ T5024] ? __unregister_chrdev+0x100/0x100 [ 574.474709][ T5024] ? fsnotify_perm.part.0+0x25d/0x630 [ 574.476686][ T5024] ? fsnotify_perm.part.0+0x268/0x630 [ 574.478645][ T5024] do_dentry_open+0x88b/0x1780 [ 574.480402][ T5024] ? __unregister_chrdev+0x100/0x100 [ 574.482330][ T5024] ? may_open+0x1f2/0x400 [ 574.483936][ T5024] path_openat+0x19af/0x29c0 [ 574.485634][ T5024] ? path_lookupat+0x770/0x770 [ 574.487381][ T5024] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 574.489571][ T5024] do_filp_open+0x1de/0x430 [ 574.491244][ T5024] ? may_open_dev+0xf0/0xf0 [ 574.492933][ T5024] ? _raw_spin_unlock+0x28/0x40 [ 574.494725][ T5024] ? alloc_fd+0x2da/0x6c0 [ 574.496324][ T5024] do_sys_openat2+0x176/0x1e0 [ 574.498051][ T5024] ? build_open_flags+0x690/0x690 [ 574.499894][ T5024] __ia32_compat_sys_openat+0x16e/0x200 [ 574.501913][ T5024] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 574.503900][ T5024] ? ksys_write+0x1a7/0x250 [ 574.505567][ T5024] __do_fast_syscall_32+0x61/0xe0 [ 574.507408][ T5024] do_fast_syscall_32+0x33/0x70 [ 574.509198][ T5024] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 574.511513][ T5024] RIP: 0023:0xf7f8d579 [ 574.513017][ T5024] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 574.519938][ T5024] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 574.522957][ T5024] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 574.525870][ T5024] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 574.528748][ T5024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 574.531657][ T5024] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 574.534551][ T5024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 574.537458][ T5024] [ 574.549315][ T5042] FAULT_INJECTION: forcing a failure. [ 574.549315][ T5042] name failslab, interval 1, probability 0, space 0, times 0 02:42:22 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 53) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xa00}, 0x48) 02:42:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x19}, 0x48) [ 574.554893][ T5042] CPU: 2 PID: 5042 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 574.559021][ T5042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 574.562717][ T5042] Call Trace: 02:42:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x19}, 0x48) [ 574.563969][ T5042] [ 574.565270][ T5042] dump_stack_lvl+0x125/0x1b0 [ 574.567018][ T5042] should_fail_ex+0x496/0x5b0 [ 574.568783][ T5042] should_failslab+0x9/0x20 02:42:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xb00}, 0x48) [ 574.570463][ T5042] kmem_cache_alloc+0x33a/0x3b0 [ 574.572568][ T5042] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 574.575245][ T5042] __kernfs_new_node+0xd3/0x8a0 [ 574.577041][ T5042] ? kernfs_path_from_node+0x60/0x60 [ 574.578982][ T5042] ? lock_sync+0x190/0x190 [ 574.580623][ T5042] ? find_held_lock+0x2d/0x110 [ 574.582401][ T5042] kernfs_new_node+0x94/0x110 [ 574.584138][ T5042] __kernfs_create_file+0x53/0x340 [ 574.586010][ T5042] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 574.587982][ T5042] sysfs_merge_group+0x1b1/0x330 [ 574.589786][ T5042] ? sysfs_update_groups+0x30/0x30 [ 574.591673][ T5042] ? panel_show+0xf0/0xf0 [ 574.593681][ T5042] ? bus_to_subsys+0x129/0x160 [ 574.595742][ T5042] dpm_sysfs_add+0x22f/0x280 [ 574.597546][ T5042] device_add+0x9e5/0x1b40 [ 574.599194][ T5042] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 574.601681][ T5042] ? nci_free_device+0x50/0x50 [ 574.603567][ T5042] ? mark_held_locks+0x9f/0xe0 [ 574.605334][ T5042] ? lockdep_init_map_type+0x16d/0x7c0 [ 574.607314][ T5042] nfc_register_device+0x41/0x3c0 [ 574.609157][ T5042] nci_register_device+0x7f4/0xb80 [ 574.611024][ T5042] ? nci_init_complete_req+0x410/0x410 [ 574.613389][ T5042] virtual_ncidev_open+0x147/0x220 [ 574.615845][ T5042] ? virtual_ncidev_read+0x4e0/0x4e0 [ 574.618115][ T5042] misc_open+0x3da/0x4c0 [ 574.619690][ T5042] ? misc_devnode+0x120/0x120 [ 574.621411][ T5042] chrdev_open+0x277/0x700 [ 574.623202][ T5042] ? __unregister_chrdev+0x100/0x100 [ 574.625121][ T5042] ? fsnotify_perm.part.0+0x25d/0x630 [ 574.627072][ T5042] ? fsnotify_perm.part.0+0x268/0x630 [ 574.629032][ T5042] do_dentry_open+0x88b/0x1780 [ 574.630775][ T5042] ? __unregister_chrdev+0x100/0x100 [ 574.632903][ T5042] ? may_open+0x1f2/0x400 [ 574.634806][ T5042] path_openat+0x19af/0x29c0 [ 574.636863][ T5042] ? path_lookupat+0x770/0x770 [ 574.638966][ T5042] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 574.641593][ T5042] do_filp_open+0x1de/0x430 [ 574.643652][ T5042] ? may_open_dev+0xf0/0xf0 [ 574.645689][ T5042] ? _raw_spin_unlock+0x28/0x40 [ 574.647697][ T5042] ? alloc_fd+0x2da/0x6c0 [ 574.649278][ T5042] do_sys_openat2+0x176/0x1e0 [ 574.651118][ T5042] ? build_open_flags+0x690/0x690 [ 574.653335][ T5042] __ia32_compat_sys_openat+0x16e/0x200 [ 574.655678][ T5042] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 574.657649][ T5042] ? ksys_write+0x1a7/0x250 [ 574.659313][ T5042] __do_fast_syscall_32+0x61/0xe0 [ 574.661152][ T5042] do_fast_syscall_32+0x33/0x70 [ 574.663079][ T5042] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 574.665367][ T5042] RIP: 0023:0xf7f9e579 [ 574.666852][ T5042] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 574.674397][ T5042] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 574.677490][ T5042] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 574.680360][ T5042] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 574.683714][ T5042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 574.686549][ T5042] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 574.689404][ T5042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 574.692305][ T5042] [ 574.704868][ T5053] FAULT_INJECTION: forcing a failure. [ 574.704868][ T5053] name failslab, interval 1, probability 0, space 0, times 0 02:42:22 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 53) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x19}, 0x48) 02:42:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xc00}, 0x48) [ 574.716291][ T5053] CPU: 3 PID: 5053 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 574.720021][ T5053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 574.723650][ T5053] Call Trace: [ 574.724872][ T5053] [ 574.725954][ T5053] dump_stack_lvl+0x125/0x1b0 [ 574.727692][ T5053] should_fail_ex+0x496/0x5b0 [ 574.729408][ T5053] should_failslab+0x9/0x20 [ 574.731065][ T5053] kmem_cache_alloc+0x33a/0x3b0 [ 574.732875][ T5053] __kernfs_new_node+0xd3/0x8a0 [ 574.734650][ T5053] ? kernfs_add_one+0x3ca/0x510 [ 574.736443][ T5053] ? kernfs_path_from_node+0x60/0x60 [ 574.738360][ T5053] ? up_write+0x1b3/0x510 [ 574.739953][ T5053] kernfs_new_node+0x94/0x110 [ 574.741673][ T5053] __kernfs_create_file+0x53/0x340 [ 574.743560][ T5053] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 574.745517][ T5053] sysfs_merge_group+0x1b1/0x330 [ 574.747321][ T5053] ? sysfs_update_groups+0x30/0x30 [ 574.749188][ T5053] ? panel_show+0xf0/0xf0 [ 574.750761][ T5053] ? bus_to_subsys+0x129/0x160 [ 574.752548][ T5053] dpm_sysfs_add+0x22f/0x280 [ 574.754253][ T5053] device_add+0x9e5/0x1b40 [ 574.755908][ T5053] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 574.758383][ T5053] ? nci_free_device+0x50/0x50 [ 574.760147][ T5053] ? mark_held_locks+0x9f/0xe0 [ 574.761891][ T5053] ? lockdep_init_map_type+0x16d/0x7c0 [ 574.763881][ T5053] nfc_register_device+0x41/0x3c0 [ 574.765709][ T5053] nci_register_device+0x7f4/0xb80 [ 574.767573][ T5053] ? nci_init_complete_req+0x410/0x410 [ 574.769567][ T5053] virtual_ncidev_open+0x147/0x220 [ 574.771446][ T5053] ? virtual_ncidev_read+0x4e0/0x4e0 [ 574.773372][ T5053] misc_open+0x3da/0x4c0 [ 574.774908][ T5053] ? misc_devnode+0x120/0x120 [ 574.776631][ T5053] chrdev_open+0x277/0x700 [ 574.778274][ T5053] ? __unregister_chrdev+0x100/0x100 [ 574.780197][ T5053] ? fsnotify_perm.part.0+0x25d/0x630 [ 574.782139][ T5053] ? fsnotify_perm.part.0+0x268/0x630 [ 574.784100][ T5053] do_dentry_open+0x88b/0x1780 [ 574.785844][ T5053] ? __unregister_chrdev+0x100/0x100 [ 574.787781][ T5053] ? may_open+0x1f2/0x400 [ 574.789367][ T5053] path_openat+0x19af/0x29c0 [ 574.791046][ T5053] ? path_lookupat+0x770/0x770 [ 574.792805][ T5053] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 574.794985][ T5053] do_filp_open+0x1de/0x430 [ 574.796646][ T5053] ? may_open_dev+0xf0/0xf0 [ 574.798310][ T5053] ? _raw_spin_unlock+0x28/0x40 [ 574.800110][ T5053] ? alloc_fd+0x2da/0x6c0 [ 574.801681][ T5053] do_sys_openat2+0x176/0x1e0 [ 574.803406][ T5053] ? build_open_flags+0x690/0x690 [ 574.805254][ T5053] __ia32_compat_sys_openat+0x16e/0x200 [ 574.807270][ T5053] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 574.809293][ T5053] ? ksys_write+0x1a7/0x250 [ 574.810960][ T5053] __do_fast_syscall_32+0x61/0xe0 [ 574.812847][ T5053] do_fast_syscall_32+0x33/0x70 [ 574.814628][ T5053] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 574.817261][ T5053] RIP: 0023:0xf7f8d579 [ 574.818774][ T5053] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 574.825791][ T5053] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 574.828856][ T5053] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 574.831809][ T5053] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 574.834702][ T5053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 574.837591][ T5053] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 574.840455][ T5053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 574.843331][ T5053] [ 574.862194][ T5069] FAULT_INJECTION: forcing a failure. [ 574.862194][ T5069] name failslab, interval 1, probability 0, space 0, times 0 [ 574.866826][ T5069] CPU: 3 PID: 5069 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 574.870549][ T5069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 574.874215][ T5069] Call Trace: [ 574.875435][ T5069] [ 574.876546][ T5069] dump_stack_lvl+0x125/0x1b0 [ 574.878260][ T5069] should_fail_ex+0x496/0x5b0 [ 574.879985][ T5069] should_failslab+0x9/0x20 [ 574.881718][ T5069] kmem_cache_alloc+0x33a/0x3b0 [ 574.883506][ T5069] __kernfs_new_node+0xd3/0x8a0 02:42:22 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 54) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:22 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xd00}, 0x48) [ 574.885276][ T5069] ? kernfs_add_one+0x3ca/0x510 [ 574.887198][ T5069] ? kernfs_path_from_node+0x60/0x60 [ 574.889171][ T5069] ? up_write+0x1b3/0x510 [ 574.890765][ T5069] kernfs_new_node+0x94/0x110 [ 574.892510][ T5069] __kernfs_create_file+0x53/0x340 [ 574.894372][ T5069] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 574.896329][ T5069] sysfs_merge_group+0x1b1/0x330 [ 574.898252][ T5069] ? sysfs_update_groups+0x30/0x30 [ 574.900126][ T5069] ? panel_show+0xf0/0xf0 [ 574.901705][ T5069] ? bus_to_subsys+0x129/0x160 [ 574.903451][ T5069] dpm_sysfs_add+0x22f/0x280 [ 574.905151][ T5069] device_add+0x9e5/0x1b40 [ 574.906778][ T5069] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 574.909284][ T5069] ? nci_free_device+0x50/0x50 [ 574.911034][ T5069] ? mark_held_locks+0x9f/0xe0 [ 574.912803][ T5069] ? lockdep_init_map_type+0x16d/0x7c0 [ 574.914778][ T5069] nfc_register_device+0x41/0x3c0 [ 574.916627][ T5069] nci_register_device+0x7f4/0xb80 [ 574.918484][ T5069] ? nci_init_complete_req+0x410/0x410 [ 574.920473][ T5069] virtual_ncidev_open+0x147/0x220 [ 574.922332][ T5069] ? virtual_ncidev_read+0x4e0/0x4e0 [ 574.924263][ T5069] misc_open+0x3da/0x4c0 [ 574.925807][ T5069] ? misc_devnode+0x120/0x120 [ 574.927532][ T5069] chrdev_open+0x277/0x700 [ 574.929162][ T5069] ? __unregister_chrdev+0x100/0x100 [ 574.931072][ T5069] ? fsnotify_perm.part.0+0x25d/0x630 [ 574.933046][ T5069] ? fsnotify_perm.part.0+0x268/0x630 [ 574.934999][ T5069] do_dentry_open+0x88b/0x1780 [ 574.936740][ T5069] ? __unregister_chrdev+0x100/0x100 [ 574.938657][ T5069] ? may_open+0x1f2/0x400 [ 574.940244][ T5069] path_openat+0x19af/0x29c0 [ 574.941926][ T5069] ? path_lookupat+0x770/0x770 [ 574.943676][ T5069] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 574.945853][ T5069] do_filp_open+0x1de/0x430 [ 574.947516][ T5069] ? may_open_dev+0xf0/0xf0 [ 574.949175][ T5069] ? _raw_spin_unlock+0x28/0x40 [ 574.950946][ T5069] ? alloc_fd+0x2da/0x6c0 [ 574.952544][ T5069] do_sys_openat2+0x176/0x1e0 [ 574.954251][ T5069] ? build_open_flags+0x690/0x690 [ 574.956085][ T5069] __ia32_compat_sys_openat+0x16e/0x200 [ 574.958094][ T5069] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 574.960074][ T5069] ? ksys_write+0x1a7/0x250 [ 574.961738][ T5069] __do_fast_syscall_32+0x61/0xe0 [ 574.963588][ T5069] do_fast_syscall_32+0x33/0x70 [ 574.965355][ T5069] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 574.967654][ T5069] RIP: 0023:0xf7f9e579 [ 574.969137][ T5069] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 574.976144][ T5069] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 574.979177][ T5069] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 574.982063][ T5069] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 574.984929][ T5069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 574.987838][ T5069] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 574.990705][ T5069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 574.993610][ T5069] 02:42:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xe00}, 0x48) 02:42:22 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 575.007745][ T5079] FAULT_INJECTION: forcing a failure. [ 575.007745][ T5079] name failslab, interval 1, probability 0, space 0, times 0 02:42:22 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 54) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xf00}, 0x48) 02:42:22 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 575.016284][ T5079] CPU: 1 PID: 5079 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 575.020924][ T5079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 575.025642][ T5079] Call Trace: [ 575.027296][ T5079] [ 575.028737][ T5079] dump_stack_lvl+0x125/0x1b0 [ 575.030993][ T5079] should_fail_ex+0x496/0x5b0 [ 575.033289][ T5079] should_failslab+0x9/0x20 [ 575.035461][ T5079] kmem_cache_alloc+0x33a/0x3b0 [ 575.037807][ T5079] __kernfs_new_node+0xd3/0x8a0 [ 575.040098][ T5079] ? kernfs_add_one+0x3ca/0x510 [ 575.042395][ T5079] ? kernfs_path_from_node+0x60/0x60 [ 575.044864][ T5079] ? up_write+0x1b3/0x510 [ 575.046912][ T5079] kernfs_new_node+0x94/0x110 [ 575.049032][ T5079] __kernfs_create_file+0x53/0x340 [ 575.051437][ T5079] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 575.054010][ T5079] sysfs_merge_group+0x1b1/0x330 [ 575.056178][ T5079] ? sysfs_update_groups+0x30/0x30 [ 575.058358][ T5079] ? panel_show+0xf0/0xf0 [ 575.060263][ T5079] ? bus_to_subsys+0x129/0x160 [ 575.062581][ T5079] dpm_sysfs_add+0x22f/0x280 [ 575.064807][ T5079] device_add+0x9e5/0x1b40 [ 575.066937][ T5079] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 575.069603][ T5079] ? nci_free_device+0x50/0x50 [ 575.071339][ T5079] ? mark_held_locks+0x9f/0xe0 [ 575.073111][ T5079] ? lockdep_init_map_type+0x16d/0x7c0 [ 575.075116][ T5079] nfc_register_device+0x41/0x3c0 [ 575.076970][ T5079] nci_register_device+0x7f4/0xb80 [ 575.078862][ T5079] ? nci_init_complete_req+0x410/0x410 [ 575.080867][ T5079] virtual_ncidev_open+0x147/0x220 [ 575.082754][ T5079] ? virtual_ncidev_read+0x4e0/0x4e0 [ 575.084718][ T5079] misc_open+0x3da/0x4c0 [ 575.086285][ T5079] ? misc_devnode+0x120/0x120 [ 575.088040][ T5079] chrdev_open+0x277/0x700 [ 575.089696][ T5079] ? __unregister_chrdev+0x100/0x100 [ 575.091656][ T5079] ? fsnotify_perm.part.0+0x25d/0x630 [ 575.093630][ T5079] ? fsnotify_perm.part.0+0x268/0x630 [ 575.095609][ T5079] do_dentry_open+0x88b/0x1780 [ 575.097370][ T5079] ? __unregister_chrdev+0x100/0x100 [ 575.099307][ T5079] ? may_open+0x1f2/0x400 [ 575.100896][ T5079] path_openat+0x19af/0x29c0 [ 575.102616][ T5079] ? path_lookupat+0x770/0x770 [ 575.104384][ T5079] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 575.106585][ T5079] do_filp_open+0x1de/0x430 [ 575.108283][ T5079] ? may_open_dev+0xf0/0xf0 [ 575.109985][ T5079] ? _raw_spin_unlock+0x28/0x40 [ 575.111810][ T5079] ? alloc_fd+0x2da/0x6c0 [ 575.113413][ T5079] do_sys_openat2+0x176/0x1e0 [ 575.115151][ T5079] ? build_open_flags+0x690/0x690 [ 575.117038][ T5079] __ia32_compat_sys_openat+0x16e/0x200 [ 575.119177][ T5079] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 575.121180][ T5079] ? ksys_write+0x1a7/0x250 [ 575.122865][ T5079] __do_fast_syscall_32+0x61/0xe0 [ 575.124722][ T5079] do_fast_syscall_32+0x33/0x70 [ 575.126522][ T5079] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 575.128845][ T5079] RIP: 0023:0xf7f8d579 [ 575.130351][ T5079] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 575.137361][ T5079] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 575.140415][ T5079] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 575.143314][ T5079] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 575.146197][ T5079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 575.149079][ T5079] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 575.151984][ T5079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 575.154888][ T5079] [ 575.168273][ T5093] FAULT_INJECTION: forcing a failure. [ 575.168273][ T5093] name failslab, interval 1, probability 0, space 0, times 0 02:42:22 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 55) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1100}, 0x48) [ 575.176301][ T5093] CPU: 2 PID: 5093 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 575.180137][ T5093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 575.183823][ T5093] Call Trace: [ 575.185058][ T5093] [ 575.186151][ T5093] dump_stack_lvl+0x125/0x1b0 [ 575.187900][ T5093] should_fail_ex+0x496/0x5b0 [ 575.189855][ T5093] should_failslab+0x9/0x20 02:42:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) [ 575.192065][ T5093] kmem_cache_alloc+0x33a/0x3b0 02:42:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1200}, 0x48) [ 575.194592][ T5093] __kernfs_new_node+0xd3/0x8a0 [ 575.196674][ T5093] ? kernfs_add_one+0x3ca/0x510 [ 575.198492][ T5093] ? kernfs_path_from_node+0x60/0x60 [ 575.200438][ T5093] ? up_write+0x1b3/0x510 [ 575.202025][ T5093] kernfs_new_node+0x94/0x110 [ 575.203771][ T5093] __kernfs_create_file+0x53/0x340 [ 575.205661][ T5093] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 575.207652][ T5093] sysfs_merge_group+0x1b1/0x330 [ 575.209464][ T5093] ? sysfs_update_groups+0x30/0x30 [ 575.211361][ T5093] ? panel_show+0xf0/0xf0 [ 575.212993][ T5093] ? bus_to_subsys+0x129/0x160 [ 575.214752][ T5093] dpm_sysfs_add+0x22f/0x280 [ 575.216461][ T5093] device_add+0x9e5/0x1b40 [ 575.218110][ T5093] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 575.220615][ T5093] ? nci_free_device+0x50/0x50 [ 575.222357][ T5093] ? mark_held_locks+0x9f/0xe0 [ 575.224133][ T5093] ? lockdep_init_map_type+0x16d/0x7c0 [ 575.226122][ T5093] nfc_register_device+0x41/0x3c0 [ 575.227950][ T5093] nci_register_device+0x7f4/0xb80 [ 575.229818][ T5093] ? nci_init_complete_req+0x410/0x410 [ 575.231830][ T5093] virtual_ncidev_open+0x147/0x220 [ 575.233723][ T5093] ? virtual_ncidev_read+0x4e0/0x4e0 [ 575.235671][ T5093] misc_open+0x3da/0x4c0 [ 575.237229][ T5093] ? misc_devnode+0x120/0x120 [ 575.238961][ T5093] chrdev_open+0x277/0x700 [ 575.240605][ T5093] ? __unregister_chrdev+0x100/0x100 [ 575.242531][ T5093] ? fsnotify_perm.part.0+0x25d/0x630 [ 575.244512][ T5093] ? fsnotify_perm.part.0+0x268/0x630 [ 575.246474][ T5093] do_dentry_open+0x88b/0x1780 [ 575.248232][ T5093] ? __unregister_chrdev+0x100/0x100 [ 575.250162][ T5093] ? may_open+0x1f2/0x400 [ 575.251766][ T5093] path_openat+0x19af/0x29c0 [ 575.253467][ T5093] ? path_lookupat+0x770/0x770 [ 575.255219][ T5093] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 575.257418][ T5093] do_filp_open+0x1de/0x430 [ 575.259084][ T5093] ? may_open_dev+0xf0/0xf0 [ 575.260762][ T5093] ? _raw_spin_unlock+0x28/0x40 [ 575.262546][ T5093] ? alloc_fd+0x2da/0x6c0 [ 575.264144][ T5093] do_sys_openat2+0x176/0x1e0 [ 575.265901][ T5093] ? build_open_flags+0x690/0x690 [ 575.267754][ T5093] ? xfd_validate_state+0x5d/0x180 [ 575.269642][ T5093] __ia32_compat_sys_openat+0x16e/0x200 [ 575.271686][ T5093] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 575.273686][ T5093] ? ksys_write+0x1a7/0x250 [ 575.275356][ T5093] __do_fast_syscall_32+0x61/0xe0 [ 575.277208][ T5093] do_fast_syscall_32+0x33/0x70 [ 575.278995][ T5093] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 575.281318][ T5093] RIP: 0023:0xf7f9e579 [ 575.282824][ T5093] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 575.289847][ T5093] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 575.292910][ T5093] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 575.295721][ T5093] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 575.298593][ T5093] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 575.301468][ T5093] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 575.304362][ T5093] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 575.307245][ T5093] [ 575.319283][ T5102] FAULT_INJECTION: forcing a failure. [ 575.319283][ T5102] name failslab, interval 1, probability 0, space 0, times 0 [ 575.323900][ T5102] CPU: 2 PID: 5102 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 02:42:23 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 55) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1300}, 0x48) 02:42:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) [ 575.327627][ T5102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 575.331562][ T5102] Call Trace: [ 575.332799][ T5102] [ 575.333896][ T5102] dump_stack_lvl+0x125/0x1b0 [ 575.335638][ T5102] should_fail_ex+0x496/0x5b0 [ 575.337376][ T5102] should_failslab+0x9/0x20 [ 575.339201][ T5102] kmem_cache_alloc+0x33a/0x3b0 [ 575.340993][ T5102] __kernfs_new_node+0xd3/0x8a0 [ 575.342775][ T5102] ? kernfs_add_one+0x3ca/0x510 [ 575.344560][ T5102] ? kernfs_path_from_node+0x60/0x60 [ 575.346487][ T5102] ? up_write+0x1b3/0x510 [ 575.348073][ T5102] kernfs_new_node+0x94/0x110 [ 575.349815][ T5102] __kernfs_create_file+0x53/0x340 [ 575.351713][ T5102] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 575.353689][ T5102] sysfs_merge_group+0x1b1/0x330 [ 575.355771][ T5102] ? sysfs_update_groups+0x30/0x30 [ 575.357682][ T5102] ? panel_show+0xf0/0xf0 [ 575.359280][ T5102] ? bus_to_subsys+0x129/0x160 [ 575.361050][ T5102] dpm_sysfs_add+0x22f/0x280 [ 575.362757][ T5102] device_add+0x9e5/0x1b40 [ 575.364417][ T5102] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 575.366919][ T5102] ? nci_free_device+0x50/0x50 [ 575.368715][ T5102] ? mark_held_locks+0x9f/0xe0 [ 575.370478][ T5102] ? lockdep_init_map_type+0x16d/0x7c0 [ 575.372505][ T5102] nfc_register_device+0x41/0x3c0 [ 575.374369][ T5102] nci_register_device+0x7f4/0xb80 [ 575.376249][ T5102] ? nci_init_complete_req+0x410/0x410 [ 575.378236][ T5102] virtual_ncidev_open+0x147/0x220 [ 575.380120][ T5102] ? virtual_ncidev_read+0x4e0/0x4e0 [ 575.382043][ T5102] misc_open+0x3da/0x4c0 [ 575.383618][ T5102] ? misc_devnode+0x120/0x120 [ 575.385348][ T5102] chrdev_open+0x277/0x700 [ 575.386994][ T5102] ? __unregister_chrdev+0x100/0x100 [ 575.388939][ T5102] ? fsnotify_perm.part.0+0x25d/0x630 [ 575.390895][ T5102] ? fsnotify_perm.part.0+0x268/0x630 [ 575.392883][ T5102] do_dentry_open+0x88b/0x1780 [ 575.394637][ T5102] ? __unregister_chrdev+0x100/0x100 [ 575.396645][ T5102] ? may_open+0x1f2/0x400 [ 575.398264][ T5102] path_openat+0x19af/0x29c0 [ 575.399977][ T5102] ? path_lookupat+0x770/0x770 [ 575.401732][ T5102] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 575.403943][ T5102] do_filp_open+0x1de/0x430 [ 575.405622][ T5102] ? may_open_dev+0xf0/0xf0 [ 575.407297][ T5102] ? _raw_spin_unlock+0x28/0x40 [ 575.409099][ T5102] ? alloc_fd+0x2da/0x6c0 [ 575.410686][ T5102] do_sys_openat2+0x176/0x1e0 [ 575.412431][ T5102] ? build_open_flags+0x690/0x690 [ 575.414278][ T5102] __ia32_compat_sys_openat+0x16e/0x200 [ 575.416306][ T5102] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 575.418307][ T5102] ? ksys_write+0x1a7/0x250 [ 575.419989][ T5102] __do_fast_syscall_32+0x61/0xe0 [ 575.421828][ T5102] do_fast_syscall_32+0x33/0x70 [ 575.423643][ T5102] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 575.425945][ T5102] RIP: 0023:0xf7f8d579 [ 575.427438][ T5102] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 575.434417][ T5102] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 575.437442][ T5102] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 575.440312][ T5102] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 575.443179][ T5102] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 575.446059][ T5102] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 575.448932][ T5102] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 575.451819][ T5102] [ 575.478277][ T5116] FAULT_INJECTION: forcing a failure. [ 575.478277][ T5116] name failslab, interval 1, probability 0, space 0, times 0 02:42:23 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 56) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1400}, 0x48) 02:42:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x18}, 0x48) 02:42:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x18}, 0x48) [ 575.483852][ T5116] CPU: 1 PID: 5116 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 575.488825][ T5116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 575.493430][ T5116] Call Trace: [ 575.494972][ T5116] 02:42:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1500}, 0x48) [ 575.496345][ T5116] dump_stack_lvl+0x125/0x1b0 [ 575.498658][ T5116] should_fail_ex+0x496/0x5b0 [ 575.500838][ T5116] should_failslab+0x9/0x20 [ 575.502862][ T5116] kmem_cache_alloc+0x33a/0x3b0 [ 575.505080][ T5116] __kernfs_new_node+0xd3/0x8a0 [ 575.507312][ T5116] ? kernfs_add_one+0x3ca/0x510 [ 575.509555][ T5116] ? kernfs_path_from_node+0x60/0x60 [ 575.511995][ T5116] ? up_write+0x1b3/0x510 [ 575.513989][ T5116] kernfs_new_node+0x94/0x110 [ 575.516204][ T5116] __kernfs_create_file+0x53/0x340 [ 575.518565][ T5116] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 575.521057][ T5116] sysfs_merge_group+0x1b1/0x330 [ 575.523211][ T5116] ? sysfs_update_groups+0x30/0x30 [ 575.525535][ T5116] ? panel_show+0xf0/0xf0 [ 575.527522][ T5116] ? bus_to_subsys+0x129/0x160 [ 575.529316][ T5116] dpm_sysfs_add+0x22f/0x280 [ 575.531017][ T5116] device_add+0x9e5/0x1b40 [ 575.532701][ T5116] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 575.535251][ T5116] ? nci_free_device+0x50/0x50 [ 575.537033][ T5116] ? mark_held_locks+0x9f/0xe0 [ 575.538809][ T5116] ? lockdep_init_map_type+0x16d/0x7c0 [ 575.540829][ T5116] nfc_register_device+0x41/0x3c0 [ 575.542772][ T5116] nci_register_device+0x7f4/0xb80 [ 575.544707][ T5116] ? nci_init_complete_req+0x410/0x410 [ 575.546768][ T5116] virtual_ncidev_open+0x147/0x220 [ 575.548701][ T5116] ? virtual_ncidev_read+0x4e0/0x4e0 [ 575.550681][ T5116] misc_open+0x3da/0x4c0 [ 575.552293][ T5116] ? misc_devnode+0x120/0x120 [ 575.554046][ T5116] chrdev_open+0x277/0x700 [ 575.555755][ T5116] ? __unregister_chrdev+0x100/0x100 [ 575.557741][ T5116] ? fsnotify_perm.part.0+0x25d/0x630 [ 575.559780][ T5116] ? fsnotify_perm.part.0+0x268/0x630 [ 575.561911][ T5116] do_dentry_open+0x88b/0x1780 [ 575.563707][ T5116] ? __unregister_chrdev+0x100/0x100 [ 575.565656][ T5116] ? may_open+0x1f2/0x400 [ 575.567259][ T5116] path_openat+0x19af/0x29c0 [ 575.568997][ T5116] ? path_lookupat+0x770/0x770 [ 575.570776][ T5116] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 575.573050][ T5116] do_filp_open+0x1de/0x430 [ 575.574744][ T5116] ? may_open_dev+0xf0/0xf0 [ 575.576462][ T5116] ? _raw_spin_unlock+0x28/0x40 [ 575.578283][ T5116] ? alloc_fd+0x2da/0x6c0 [ 575.579912][ T5116] do_sys_openat2+0x176/0x1e0 [ 575.581671][ T5116] ? build_open_flags+0x690/0x690 [ 575.583547][ T5116] __ia32_compat_sys_openat+0x16e/0x200 [ 575.585594][ T5116] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 575.587615][ T5116] ? ksys_write+0x1a7/0x250 [ 575.589296][ T5116] __do_fast_syscall_32+0x61/0xe0 [ 575.591175][ T5116] do_fast_syscall_32+0x33/0x70 [ 575.592991][ T5116] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 575.595312][ T5116] RIP: 0023:0xf7f9e579 [ 575.597038][ T5116] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 575.604103][ T5116] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 575.607194][ T5116] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 575.610110][ T5116] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 575.613046][ T5116] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 575.615952][ T5116] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 575.618858][ T5116] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 575.621784][ T5116] [ 575.634533][ T5125] FAULT_INJECTION: forcing a failure. [ 575.634533][ T5125] name failslab, interval 1, probability 0, space 0, times 0 02:42:23 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 56) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1600}, 0x48) 02:42:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x18}, 0x48) [ 575.641573][ T5125] CPU: 2 PID: 5125 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 575.645706][ T5125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 575.649734][ T5125] Call Trace: [ 575.650977][ T5125] [ 575.652109][ T5125] dump_stack_lvl+0x125/0x1b0 [ 575.654016][ T5125] should_fail_ex+0x496/0x5b0 [ 575.655898][ T5125] should_failslab+0x9/0x20 [ 575.657743][ T5125] __kmem_cache_alloc_node+0x2fd/0x350 [ 575.659986][ T5125] ? kobject_get_path+0xce/0x2b0 [ 575.661952][ T5125] ? kobject_get_path+0xce/0x2b0 [ 575.663953][ T5125] __kmalloc+0x4c/0x100 [ 575.665672][ T5125] kobject_get_path+0xce/0x2b0 [ 575.667563][ T5125] kobject_uevent_env+0x26b/0x1800 [ 575.669491][ T5125] ? bus_to_subsys+0x129/0x160 [ 575.671298][ T5125] device_add+0x1186/0x1b40 [ 575.673147][ T5125] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 575.675816][ T5125] ? nci_free_device+0x50/0x50 [ 575.677717][ T5125] ? mark_held_locks+0x9f/0xe0 [ 575.679643][ T5125] ? lockdep_init_map_type+0x16d/0x7c0 [ 575.681694][ T5125] nfc_register_device+0x41/0x3c0 [ 575.683585][ T5125] nci_register_device+0x7f4/0xb80 [ 575.685474][ T5125] ? nci_init_complete_req+0x410/0x410 [ 575.687641][ T5125] virtual_ncidev_open+0x147/0x220 [ 575.689660][ T5125] ? virtual_ncidev_read+0x4e0/0x4e0 [ 575.691645][ T5125] misc_open+0x3da/0x4c0 [ 575.693238][ T5125] ? misc_devnode+0x120/0x120 [ 575.694978][ T5125] chrdev_open+0x277/0x700 [ 575.696642][ T5125] ? __unregister_chrdev+0x100/0x100 [ 575.698547][ T5125] ? fsnotify_perm.part.0+0x25d/0x630 [ 575.700522][ T5125] ? fsnotify_perm.part.0+0x268/0x630 [ 575.702490][ T5125] do_dentry_open+0x88b/0x1780 [ 575.704260][ T5125] ? __unregister_chrdev+0x100/0x100 [ 575.706192][ T5125] ? may_open+0x1f2/0x400 [ 575.707785][ T5125] path_openat+0x19af/0x29c0 [ 575.709499][ T5125] ? path_lookupat+0x770/0x770 [ 575.711286][ T5125] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 575.713490][ T5125] do_filp_open+0x1de/0x430 [ 575.715148][ T5125] ? may_open_dev+0xf0/0xf0 [ 575.716858][ T5125] ? _raw_spin_unlock+0x28/0x40 [ 575.718655][ T5125] ? alloc_fd+0x2da/0x6c0 [ 575.720253][ T5125] do_sys_openat2+0x176/0x1e0 [ 575.721972][ T5125] ? build_open_flags+0x690/0x690 [ 575.723850][ T5125] __ia32_compat_sys_openat+0x16e/0x200 [ 575.725883][ T5125] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 575.727908][ T5125] ? ksys_write+0x1a7/0x250 [ 575.729592][ T5125] __do_fast_syscall_32+0x61/0xe0 [ 575.731495][ T5125] do_fast_syscall_32+0x33/0x70 [ 575.733326][ T5125] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 575.735681][ T5125] RIP: 0023:0xf7f8d579 [ 575.737327][ T5125] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 575.744969][ T5125] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 575.748323][ T5125] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 575.751451][ T5125] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 575.754520][ T5125] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 575.757512][ T5125] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 575.760670][ T5125] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 575.763722][ T5125] [ 575.770065][ T5149] FAULT_INJECTION: forcing a failure. [ 575.770065][ T5149] name failslab, interval 1, probability 0, space 0, times 0 [ 575.775390][ T5149] CPU: 1 PID: 5149 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 575.779754][ T5149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 575.783881][ T5149] Call Trace: [ 575.785373][ T5149] [ 575.786613][ T5149] dump_stack_lvl+0x125/0x1b0 [ 575.788581][ T5149] should_fail_ex+0x496/0x5b0 [ 575.790528][ T5149] should_failslab+0x9/0x20 [ 575.792446][ T5149] __kmem_cache_alloc_node+0x2fd/0x350 [ 575.794687][ T5149] ? kobject_get_path+0xce/0x2b0 [ 575.796757][ T5149] ? kobject_get_path+0xce/0x2b0 [ 575.798795][ T5149] __kmalloc+0x4c/0x100 [ 575.800541][ T5149] kobject_get_path+0xce/0x2b0 [ 575.802536][ T5149] kobject_uevent_env+0x26b/0x1800 [ 575.804696][ T5149] ? bus_to_subsys+0x129/0x160 [ 575.806900][ T5149] device_add+0x1186/0x1b40 [ 575.808811][ T5149] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 575.811653][ T5149] ? nci_free_device+0x50/0x50 [ 575.813658][ T5149] ? mark_held_locks+0x9f/0xe0 [ 575.815830][ T5149] ? lockdep_init_map_type+0x16d/0x7c0 [ 575.818133][ T5149] nfc_register_device+0x41/0x3c0 [ 575.820244][ T5149] nci_register_device+0x7f4/0xb80 [ 575.822362][ T5149] ? nci_init_complete_req+0x410/0x410 [ 575.824663][ T5149] virtual_ncidev_open+0x147/0x220 [ 575.826800][ T5149] ? virtual_ncidev_read+0x4e0/0x4e0 [ 575.829068][ T5149] misc_open+0x3da/0x4c0 [ 575.830842][ T5149] ? misc_devnode+0x120/0x120 [ 575.832852][ T5149] chrdev_open+0x277/0x700 [ 575.834718][ T5149] ? __unregister_chrdev+0x100/0x100 [ 575.836936][ T5149] ? fsnotify_perm.part.0+0x25d/0x630 [ 575.839164][ T5149] ? fsnotify_perm.part.0+0x268/0x630 [ 575.841380][ T5149] do_dentry_open+0x88b/0x1780 [ 575.843365][ T5149] ? __unregister_chrdev+0x100/0x100 [ 575.845549][ T5149] ? may_open+0x1f2/0x400 [ 575.847344][ T5149] path_openat+0x19af/0x29c0 [ 575.849277][ T5149] ? path_lookupat+0x770/0x770 [ 575.851267][ T5149] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 575.853771][ T5149] do_filp_open+0x1de/0x430 [ 575.855550][ T5149] ? may_open_dev+0xf0/0xf0 [ 575.857347][ T5149] ? _raw_spin_unlock+0x28/0x40 [ 575.859242][ T5149] ? alloc_fd+0x2da/0x6c0 [ 575.860940][ T5149] do_sys_openat2+0x176/0x1e0 [ 575.862722][ T5149] ? build_open_flags+0x690/0x690 [ 575.864676][ T5149] __ia32_compat_sys_openat+0x16e/0x200 [ 575.866859][ T5149] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 575.869118][ T5149] ? ksys_write+0x1a7/0x250 [ 575.871013][ T5149] __do_fast_syscall_32+0x61/0xe0 [ 575.873128][ T5149] do_fast_syscall_32+0x33/0x70 [ 575.875144][ T5149] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 575.877778][ T5149] RIP: 0023:0xf7f9e579 [ 575.879535][ T5149] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 575.887421][ T5149] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 575.890852][ T5149] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 575.894118][ T5149] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 575.897371][ T5149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 575.900621][ T5149] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 575.903877][ T5149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 575.907126][ T5149] 02:42:23 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 57) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1700}, 0x48) 02:42:23 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:23 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1800}, 0x48) [ 575.931679][ T5173] FAULT_INJECTION: forcing a failure. [ 575.931679][ T5173] name failslab, interval 1, probability 0, space 0, times 0 02:42:23 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 57) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:23 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 575.943409][ T5173] CPU: 3 PID: 5173 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 575.947196][ T5173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 02:42:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1900}, 0x48) [ 575.950864][ T5173] Call Trace: [ 575.952208][ T5173] [ 575.953312][ T5173] dump_stack_lvl+0x125/0x1b0 [ 575.955052][ T5173] should_fail_ex+0x496/0x5b0 [ 575.956805][ T5173] should_failslab+0x9/0x20 [ 575.958487][ T5173] __kmem_cache_alloc_node+0x2fd/0x350 [ 575.960497][ T5173] ? kobject_get_path+0xce/0x2b0 [ 575.962329][ T5173] ? kobject_get_path+0xce/0x2b0 [ 575.964175][ T5173] __kmalloc+0x4c/0x100 [ 575.965725][ T5173] kobject_get_path+0xce/0x2b0 [ 575.967526][ T5173] kobject_uevent_env+0x26b/0x1800 [ 575.969410][ T5173] ? bus_to_subsys+0x129/0x160 [ 575.971201][ T5173] device_add+0x1186/0x1b40 [ 575.972923][ T5173] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 575.975428][ T5173] ? nci_free_device+0x50/0x50 [ 575.977250][ T5173] ? mark_held_locks+0x9f/0xe0 [ 575.979022][ T5173] ? lockdep_init_map_type+0x16d/0x7c0 [ 575.981032][ T5173] nfc_register_device+0x41/0x3c0 [ 575.982889][ T5173] nci_register_device+0x7f4/0xb80 [ 575.984796][ T5173] ? nci_init_complete_req+0x410/0x410 [ 575.986814][ T5173] virtual_ncidev_open+0x147/0x220 [ 575.988730][ T5173] ? virtual_ncidev_read+0x4e0/0x4e0 [ 575.990850][ T5173] misc_open+0x3da/0x4c0 [ 575.992540][ T5173] ? misc_devnode+0x120/0x120 [ 575.994238][ T5173] chrdev_open+0x277/0x700 [ 575.995997][ T5173] ? __unregister_chrdev+0x100/0x100 [ 575.998011][ T5173] ? fsnotify_perm.part.0+0x25d/0x630 [ 576.000111][ T5173] ? fsnotify_perm.part.0+0x268/0x630 [ 576.002116][ T5173] do_dentry_open+0x88b/0x1780 [ 576.003899][ T5173] ? __unregister_chrdev+0x100/0x100 [ 576.006054][ T5173] ? may_open+0x1f2/0x400 [ 576.007949][ T5173] path_openat+0x19af/0x29c0 [ 576.009678][ T5173] ? path_lookupat+0x770/0x770 [ 576.011494][ T5173] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 576.013789][ T5173] do_filp_open+0x1de/0x430 [ 576.015498][ T5173] ? may_open_dev+0xf0/0xf0 [ 576.017263][ T5173] ? _raw_spin_unlock+0x28/0x40 [ 576.019402][ T5173] ? alloc_fd+0x2da/0x6c0 [ 576.021374][ T5173] do_sys_openat2+0x176/0x1e0 [ 576.023557][ T5173] ? build_open_flags+0x690/0x690 [ 576.025924][ T5173] __ia32_compat_sys_openat+0x16e/0x200 [ 576.028284][ T5173] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 576.030767][ T5173] ? ksys_write+0x1a7/0x250 [ 576.032754][ T5173] __do_fast_syscall_32+0x61/0xe0 [ 576.035094][ T5173] do_fast_syscall_32+0x33/0x70 [ 576.037394][ T5173] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 576.040300][ T5173] RIP: 0023:0xf7f8d579 [ 576.042242][ T5173] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 576.050556][ T5173] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 576.053968][ T5173] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 576.057152][ T5173] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 576.060786][ T5173] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 576.064033][ T5173] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 576.067358][ T5173] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 576.070421][ T5173] [ 576.077512][ T5207] FAULT_INJECTION: forcing a failure. [ 576.077512][ T5207] name failslab, interval 1, probability 0, space 0, times 0 [ 576.083557][ T5207] CPU: 3 PID: 5207 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 576.087371][ T5207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 576.091077][ T5207] Call Trace: [ 576.092354][ T5207] [ 576.093460][ T5207] dump_stack_lvl+0x125/0x1b0 [ 576.095222][ T5207] should_fail_ex+0x496/0x5b0 [ 576.096985][ T5207] should_failslab+0x9/0x20 [ 576.098677][ T5207] kmem_cache_alloc_node+0x389/0x3f0 [ 576.100679][ T5207] ? __alloc_skb+0x287/0x330 [ 576.102413][ T5207] ? find_held_lock+0x2d/0x110 [ 576.104225][ T5207] __alloc_skb+0x287/0x330 [ 576.105902][ T5207] ? __napi_build_skb+0x50/0x50 [ 576.107762][ T5207] ? reacquire_held_locks+0x4b0/0x4b0 [ 576.109713][ T5207] alloc_uevent_skb+0x7d/0x210 [ 576.111518][ T5207] kobject_uevent_env+0xc20/0x1800 [ 576.113442][ T5207] ? bus_to_subsys+0x129/0x160 [ 576.115225][ T5207] device_add+0x1186/0x1b40 [ 576.116924][ T5207] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 576.119439][ T5207] ? nci_free_device+0x50/0x50 [ 576.121245][ T5207] ? mark_held_locks+0x9f/0xe0 [ 576.123024][ T5207] ? lockdep_init_map_type+0x16d/0x7c0 [ 576.125065][ T5207] nfc_register_device+0x41/0x3c0 [ 576.126924][ T5207] nci_register_device+0x7f4/0xb80 [ 576.129135][ T5207] ? nci_init_complete_req+0x410/0x410 [ 576.131605][ T5207] virtual_ncidev_open+0x147/0x220 [ 576.133526][ T5207] ? virtual_ncidev_read+0x4e0/0x4e0 [ 576.135616][ T5207] misc_open+0x3da/0x4c0 [ 576.137432][ T5207] ? misc_devnode+0x120/0x120 [ 576.139311][ T5207] chrdev_open+0x277/0x700 [ 576.141191][ T5207] ? __unregister_chrdev+0x100/0x100 [ 576.143334][ T5207] ? fsnotify_perm.part.0+0x25d/0x630 [ 576.145559][ T5207] ? fsnotify_perm.part.0+0x268/0x630 [ 576.147704][ T5207] do_dentry_open+0x88b/0x1780 [ 576.149665][ T5207] ? __unregister_chrdev+0x100/0x100 [ 576.151849][ T5207] ? may_open+0x1f2/0x400 [ 576.153502][ T5207] path_openat+0x19af/0x29c0 [ 576.155196][ T5207] ? path_lookupat+0x770/0x770 [ 576.156964][ T5207] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 576.159150][ T5207] do_filp_open+0x1de/0x430 [ 576.160849][ T5207] ? may_open_dev+0xf0/0xf0 [ 576.162513][ T5207] ? _raw_spin_unlock+0x28/0x40 [ 576.164311][ T5207] ? alloc_fd+0x2da/0x6c0 [ 576.165901][ T5207] do_sys_openat2+0x176/0x1e0 [ 576.167640][ T5207] ? build_open_flags+0x690/0x690 [ 576.169489][ T5207] __ia32_compat_sys_openat+0x16e/0x200 [ 576.171647][ T5207] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 576.173757][ T5207] ? ksys_write+0x1a7/0x250 [ 576.175568][ T5207] __do_fast_syscall_32+0x61/0xe0 [ 576.177473][ T5207] do_fast_syscall_32+0x33/0x70 [ 576.179289][ T5207] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 576.181750][ T5207] RIP: 0023:0xf7f9e579 [ 576.183453][ T5207] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 576.190911][ T5207] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 576.194192][ T5207] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 576.197149][ T5207] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 576.200157][ T5207] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 576.203334][ T5207] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 576.206326][ T5207] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 576.209259][ T5207] 02:42:24 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 58) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1a00}, 0x48) 02:42:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1b00}, 0x48) 02:42:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:24 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 58) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1c00}, 0x48) [ 576.241903][ T5224] FAULT_INJECTION: forcing a failure. [ 576.241903][ T5224] name failslab, interval 1, probability 0, space 0, times 0 [ 576.247091][ T5224] CPU: 0 PID: 5224 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 576.250932][ T5224] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 576.255125][ T5224] Call Trace: 02:42:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) [ 576.256676][ T5224] [ 576.257971][ T5224] dump_stack_lvl+0x125/0x1b0 [ 576.259796][ T5224] should_fail_ex+0x496/0x5b0 [ 576.261631][ T5224] should_failslab+0x9/0x20 [ 576.263509][ T5224] kmem_cache_alloc_node+0x389/0x3f0 [ 576.265555][ T5224] ? __alloc_skb+0x287/0x330 [ 576.267767][ T5224] ? find_held_lock+0x2d/0x110 [ 576.269645][ T5224] __alloc_skb+0x287/0x330 [ 576.271381][ T5224] ? __napi_build_skb+0x50/0x50 [ 576.273387][ T5224] ? reacquire_held_locks+0x4b0/0x4b0 [ 576.275913][ T5224] alloc_uevent_skb+0x7d/0x210 [ 576.277707][ T5224] kobject_uevent_env+0xc20/0x1800 [ 576.279619][ T5224] ? bus_to_subsys+0x129/0x160 [ 576.281393][ T5224] device_add+0x1186/0x1b40 [ 576.283180][ T5224] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 576.285805][ T5224] ? nci_free_device+0x50/0x50 [ 576.287597][ T5224] ? mark_held_locks+0x9f/0xe0 [ 576.289370][ T5224] ? lockdep_init_map_type+0x16d/0x7c0 [ 576.291386][ T5224] nfc_register_device+0x41/0x3c0 [ 576.293291][ T5224] nci_register_device+0x7f4/0xb80 [ 576.295190][ T5224] ? nci_init_complete_req+0x410/0x410 [ 576.297235][ T5224] virtual_ncidev_open+0x147/0x220 [ 576.299135][ T5224] ? virtual_ncidev_read+0x4e0/0x4e0 [ 576.301187][ T5224] misc_open+0x3da/0x4c0 [ 576.302790][ T5224] ? misc_devnode+0x120/0x120 [ 576.304584][ T5224] chrdev_open+0x277/0x700 [ 576.306338][ T5224] ? __unregister_chrdev+0x100/0x100 [ 576.308336][ T5224] ? fsnotify_perm.part.0+0x25d/0x630 [ 576.310322][ T5224] ? fsnotify_perm.part.0+0x268/0x630 [ 576.312381][ T5224] do_dentry_open+0x88b/0x1780 [ 576.314174][ T5224] ? __unregister_chrdev+0x100/0x100 [ 576.316282][ T5224] ? may_open+0x1f2/0x400 [ 576.317919][ T5224] path_openat+0x19af/0x29c0 [ 576.319663][ T5224] ? path_lookupat+0x770/0x770 [ 576.321420][ T5224] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 576.323641][ T5224] do_filp_open+0x1de/0x430 [ 576.325326][ T5224] ? may_open_dev+0xf0/0xf0 [ 576.327026][ T5224] ? _raw_spin_unlock+0x28/0x40 [ 576.328847][ T5224] ? alloc_fd+0x2da/0x6c0 [ 576.330453][ T5224] do_sys_openat2+0x176/0x1e0 [ 576.332217][ T5224] ? build_open_flags+0x690/0x690 [ 576.334079][ T5224] __ia32_compat_sys_openat+0x16e/0x200 [ 576.336308][ T5224] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 576.338370][ T5224] ? ksys_write+0x1a7/0x250 [ 576.340088][ T5224] __do_fast_syscall_32+0x61/0xe0 [ 576.341977][ T5224] do_fast_syscall_32+0x33/0x70 [ 576.343846][ T5224] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 576.346195][ T5224] RIP: 0023:0xf7f8d579 [ 576.347839][ T5224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 576.354862][ T5224] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 576.357900][ T5224] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 576.360777][ T5224] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 576.363683][ T5224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 576.366571][ T5224] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 576.369443][ T5224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 576.372347][ T5224] 02:42:24 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 59) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1d00}, 0x48) 02:42:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x14}, 0x48) 02:42:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1e00}, 0x48) 02:42:24 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 59) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x14}, 0x48) 02:42:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1f00}, 0x48) 02:42:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x14}, 0x48) 02:42:24 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:24 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x2000}, 0x48) [ 576.460111][ T5270] FAULT_INJECTION: forcing a failure. [ 576.460111][ T5270] name failslab, interval 1, probability 0, space 0, times 0 02:42:24 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 60) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') [ 576.465537][ T5270] CPU: 0 PID: 5270 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 576.469699][ T5270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 02:42:24 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x2100}, 0x48) [ 576.473485][ T5270] Call Trace: [ 576.475001][ T5270] [ 576.476138][ T5270] dump_stack_lvl+0x125/0x1b0 [ 576.477884][ T5270] should_fail_ex+0x496/0x5b0 [ 576.479643][ T5270] should_failslab+0x9/0x20 [ 576.481321][ T5270] kmem_cache_alloc+0x33a/0x3b0 02:42:24 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 576.483321][ T5270] skb_clone+0x171/0x3c0 [ 576.485265][ T5270] netlink_broadcast+0x9b0/0xea0 [ 576.487166][ T5270] ? netlink_connect+0x550/0x550 02:42:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x2200}, 0x48) [ 576.489121][ T5270] ? alloc_uevent_skb+0x1bb/0x210 [ 576.491243][ T5270] kobject_uevent_env+0xbd2/0x1800 [ 576.493229][ T5270] ? bus_to_subsys+0x129/0x160 [ 576.495051][ T5270] device_add+0x1186/0x1b40 [ 576.496789][ T5270] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 576.499299][ T5270] ? nci_free_device+0x50/0x50 [ 576.501080][ T5270] ? mark_held_locks+0x9f/0xe0 [ 576.502779][ T5270] ? lockdep_init_map_type+0x16d/0x7c0 [ 576.504820][ T5270] nfc_register_device+0x41/0x3c0 [ 576.506682][ T5270] nci_register_device+0x7f4/0xb80 [ 576.508625][ T5270] ? nci_init_complete_req+0x410/0x410 [ 576.510640][ T5270] virtual_ncidev_open+0x147/0x220 [ 576.512564][ T5270] ? virtual_ncidev_read+0x4e0/0x4e0 [ 576.514525][ T5270] misc_open+0x3da/0x4c0 [ 576.516172][ T5270] ? misc_devnode+0x120/0x120 [ 576.517961][ T5270] chrdev_open+0x277/0x700 [ 576.519619][ T5270] ? __unregister_chrdev+0x100/0x100 [ 576.521527][ T5270] ? fsnotify_perm.part.0+0x25d/0x630 [ 576.523541][ T5270] ? fsnotify_perm.part.0+0x268/0x630 [ 576.525568][ T5270] do_dentry_open+0x88b/0x1780 [ 576.527348][ T5270] ? __unregister_chrdev+0x100/0x100 [ 576.529346][ T5270] ? may_open+0x1f2/0x400 [ 576.530978][ T5270] path_openat+0x19af/0x29c0 [ 576.532726][ T5270] ? path_lookupat+0x770/0x770 [ 576.534577][ T5270] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 576.536836][ T5270] do_filp_open+0x1de/0x430 [ 576.538528][ T5270] ? may_open_dev+0xf0/0xf0 [ 576.540313][ T5270] ? _raw_spin_unlock+0x28/0x40 [ 576.542138][ T5270] ? alloc_fd+0x2da/0x6c0 [ 576.543810][ T5270] do_sys_openat2+0x176/0x1e0 [ 576.545547][ T5270] ? build_open_flags+0x690/0x690 [ 576.547426][ T5270] __ia32_compat_sys_openat+0x16e/0x200 [ 576.549501][ T5270] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 576.551547][ T5270] ? ksys_write+0x1a7/0x250 [ 576.553281][ T5270] __do_fast_syscall_32+0x61/0xe0 [ 576.555230][ T5270] do_fast_syscall_32+0x33/0x70 [ 576.557119][ T5270] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 576.559524][ T5270] RIP: 0023:0xf7f8d579 [ 576.561039][ T5270] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 576.568239][ T5270] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 576.571372][ T5270] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 576.574329][ T5270] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 576.577255][ T5270] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 576.580158][ T5270] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 576.583175][ T5270] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 576.586203][ T5270] [ 576.591859][ T5277] FAULT_INJECTION: forcing a failure. [ 576.591859][ T5277] name failslab, interval 1, probability 0, space 0, times 0 [ 576.598025][ T5277] CPU: 1 PID: 5277 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 576.602849][ T5277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 576.607609][ T5277] Call Trace: [ 576.609188][ T5277] [ 576.610585][ T5277] dump_stack_lvl+0x125/0x1b0 [ 576.612887][ T5277] should_fail_ex+0x496/0x5b0 [ 576.615130][ T5277] should_failslab+0x9/0x20 [ 576.617313][ T5277] __kmem_cache_alloc_node+0x2fd/0x350 [ 576.619896][ T5277] ? nfc_llcp_register_device+0x47/0x9d0 [ 576.622553][ T5277] kmalloc_trace+0x25/0xe0 [ 576.624643][ T5277] nfc_llcp_register_device+0x47/0x9d0 [ 576.627241][ T5277] nfc_register_device+0x6d/0x3c0 [ 576.629639][ T5277] nci_register_device+0x7f4/0xb80 [ 576.632073][ T5277] ? nci_init_complete_req+0x410/0x410 [ 576.634685][ T5277] virtual_ncidev_open+0x147/0x220 [ 576.637129][ T5277] ? virtual_ncidev_read+0x4e0/0x4e0 [ 576.639641][ T5277] misc_open+0x3da/0x4c0 [ 576.641659][ T5277] ? misc_devnode+0x120/0x120 [ 576.644011][ T5277] chrdev_open+0x277/0x700 [ 576.646190][ T5277] ? __unregister_chrdev+0x100/0x100 [ 576.648698][ T5277] ? fsnotify_perm.part.0+0x25d/0x630 [ 576.651243][ T5277] ? fsnotify_perm.part.0+0x268/0x630 [ 576.653804][ T5277] do_dentry_open+0x88b/0x1780 [ 576.656176][ T5277] ? __unregister_chrdev+0x100/0x100 [ 576.658748][ T5277] ? may_open+0x1f2/0x400 [ 576.660826][ T5277] path_openat+0x19af/0x29c0 [ 576.662946][ T5277] ? path_lookupat+0x770/0x770 [ 576.665166][ T5277] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 576.667938][ T5277] do_filp_open+0x1de/0x430 [ 576.670112][ T5277] ? may_open_dev+0xf0/0xf0 [ 576.672298][ T5277] ? _raw_spin_unlock+0x28/0x40 [ 576.674657][ T5277] ? alloc_fd+0x2da/0x6c0 [ 576.676509][ T5277] do_sys_openat2+0x176/0x1e0 [ 576.678260][ T5277] ? build_open_flags+0x690/0x690 [ 576.680150][ T5277] __ia32_compat_sys_openat+0x16e/0x200 [ 576.682187][ T5277] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 576.684192][ T5277] ? ksys_write+0x1a7/0x250 02:42:24 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 61) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x2300}, 0x48) [ 576.685890][ T5277] __do_fast_syscall_32+0x61/0xe0 [ 576.687964][ T5277] do_fast_syscall_32+0x33/0x70 [ 576.689766][ T5277] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 576.692108][ T5277] RIP: 0023:0xf7f9e579 [ 576.693623][ T5277] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 576.700658][ T5277] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 576.703709][ T5277] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 576.706614][ T5277] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 576.709556][ T5277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 576.712459][ T5277] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 576.715418][ T5277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 576.718490][ T5277] [ 576.720680][ T5277] nfc: nfc_register_device: Could not register llcp device [ 576.725001][ T5295] FAULT_INJECTION: forcing a failure. [ 576.725001][ T5295] name failslab, interval 1, probability 0, space 0, times 0 [ 576.730655][ T5295] CPU: 1 PID: 5295 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 576.734703][ T5295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 576.739002][ T5295] Call Trace: [ 576.740549][ T5295] [ 576.741932][ T5295] dump_stack_lvl+0x125/0x1b0 [ 576.744013][ T5295] should_fail_ex+0x496/0x5b0 [ 576.745954][ T5295] should_failslab+0x9/0x20 [ 576.746545][ T5276] llcp: nfc_llcp_remove_local: Shutting down device not found [ 576.747854][ T5295] __kmem_cache_alloc_node+0x2fd/0x350 [ 576.747876][ T5295] ? nfc_llcp_build_tlv+0xfd/0x230 [ 576.747903][ T5295] ? nfc_llcp_build_tlv+0xfd/0x230 [ 576.757075][ T5295] __kmalloc+0x4c/0x100 [ 576.758802][ T5295] nfc_llcp_build_tlv+0xfd/0x230 [ 576.760848][ T5295] nfc_llcp_build_gb.isra.0+0xf1/0x410 [ 576.763077][ T5295] ? nfc_llcp_reserve_sdp_ssap+0x120/0x120 [ 576.765465][ T5295] ? reacquire_held_locks+0x4b0/0x4b0 [ 576.767686][ T5295] ? mark_held_locks+0x9f/0xe0 [ 576.769651][ T5295] ? lockdep_init_map_type+0x16d/0x7c0 [ 576.771904][ T5295] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 576.774311][ T5295] nfc_llcp_register_device+0x5c5/0x9d0 [ 576.776598][ T5295] nfc_register_device+0x6d/0x3c0 [ 576.778791][ T5295] nci_register_device+0x7f4/0xb80 [ 576.780944][ T5295] ? nci_init_complete_req+0x410/0x410 [ 576.783204][ T5295] virtual_ncidev_open+0x147/0x220 [ 576.785316][ T5295] ? virtual_ncidev_read+0x4e0/0x4e0 [ 576.787505][ T5295] misc_open+0x3da/0x4c0 [ 576.789255][ T5295] ? misc_devnode+0x120/0x120 [ 576.791208][ T5295] chrdev_open+0x277/0x700 [ 576.793066][ T5295] ? __unregister_chrdev+0x100/0x100 02:42:24 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 61) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1000000}, 0x48) [ 576.795244][ T5295] ? fsnotify_perm.part.0+0x25d/0x630 [ 576.797673][ T5295] ? fsnotify_perm.part.0+0x268/0x630 [ 576.799889][ T5295] do_dentry_open+0x88b/0x1780 [ 576.801854][ T5295] ? __unregister_chrdev+0x100/0x100 [ 576.804031][ T5295] ? may_open+0x1f2/0x400 [ 576.805808][ T5295] path_openat+0x19af/0x29c0 [ 576.807934][ T5295] ? path_lookupat+0x770/0x770 [ 576.809941][ T5295] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 576.812473][ T5295] do_filp_open+0x1de/0x430 [ 576.814391][ T5295] ? may_open_dev+0xf0/0xf0 [ 576.816369][ T5295] ? _raw_spin_unlock+0x28/0x40 [ 576.818373][ T5295] ? alloc_fd+0x2da/0x6c0 [ 576.820174][ T5295] do_sys_openat2+0x176/0x1e0 [ 576.822112][ T5295] ? build_open_flags+0x690/0x690 [ 576.824201][ T5295] __ia32_compat_sys_openat+0x16e/0x200 [ 576.826489][ T5295] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 576.828748][ T5295] ? ksys_write+0x1a7/0x250 [ 576.830658][ T5295] __do_fast_syscall_32+0x61/0xe0 [ 576.832689][ T5295] do_fast_syscall_32+0x33/0x70 [ 576.834728][ T5295] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 576.837206][ T5295] RIP: 0023:0xf7f8d579 [ 576.838753][ T5295] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 576.846161][ T5295] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 576.850051][ T5295] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 576.853496][ T5295] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 576.857336][ T5295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 576.861140][ T5295] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 576.864800][ T5295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 576.868039][ T5295] 02:42:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x2000000}, 0x48) 02:42:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) [ 576.884993][ T5302] FAULT_INJECTION: forcing a failure. [ 576.884993][ T5302] name failslab, interval 1, probability 0, space 0, times 0 [ 576.894204][ T5302] CPU: 0 PID: 5302 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 576.898172][ T5302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 576.901988][ T5302] Call Trace: [ 576.903397][ T5302] [ 576.904639][ T5302] dump_stack_lvl+0x125/0x1b0 [ 576.906448][ T5302] should_fail_ex+0x496/0x5b0 [ 576.908305][ T5302] should_failslab+0x9/0x20 [ 576.910017][ T5302] __kmem_cache_alloc_node+0x2fd/0x350 02:42:24 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 62) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x3000000}, 0x48) [ 576.912250][ T5302] ? nfc_llcp_build_tlv+0xfd/0x230 02:42:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x12}, 0x48) [ 576.914856][ T5302] ? nfc_llcp_build_tlv+0xfd/0x230 [ 576.917321][ T5302] __kmalloc+0x4c/0x100 [ 576.918892][ T5302] nfc_llcp_build_tlv+0xfd/0x230 [ 576.921107][ T5302] nfc_llcp_build_gb.isra.0+0xf1/0x410 [ 576.923537][ T5302] ? nfc_llcp_reserve_sdp_ssap+0x120/0x120 [ 576.926124][ T5302] ? reacquire_held_locks+0x4b0/0x4b0 [ 576.928513][ T5302] ? mark_held_locks+0x9f/0xe0 [ 576.930584][ T5302] ? lockdep_init_map_type+0x16d/0x7c0 [ 576.932763][ T5302] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 576.934949][ T5302] nfc_llcp_register_device+0x5c5/0x9d0 [ 576.937019][ T5302] nfc_register_device+0x6d/0x3c0 [ 576.938926][ T5302] nci_register_device+0x7f4/0xb80 [ 576.940831][ T5302] ? nci_init_complete_req+0x410/0x410 [ 576.943177][ T5302] virtual_ncidev_open+0x147/0x220 [ 576.945383][ T5302] ? virtual_ncidev_read+0x4e0/0x4e0 [ 576.947772][ T5302] misc_open+0x3da/0x4c0 [ 576.949646][ T5302] ? misc_devnode+0x120/0x120 [ 576.951733][ T5302] chrdev_open+0x277/0x700 [ 576.953779][ T5302] ? __unregister_chrdev+0x100/0x100 [ 576.956045][ T5302] ? fsnotify_perm.part.0+0x25d/0x630 [ 576.958456][ T5302] ? fsnotify_perm.part.0+0x268/0x630 [ 576.960887][ T5302] do_dentry_open+0x88b/0x1780 [ 576.963241][ T5302] ? __unregister_chrdev+0x100/0x100 [ 576.965458][ T5302] ? may_open+0x1f2/0x400 [ 576.966948][ T5302] path_openat+0x19af/0x29c0 [ 576.968747][ T5302] ? path_lookupat+0x770/0x770 [ 576.970525][ T5302] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 576.972870][ T5302] do_filp_open+0x1de/0x430 [ 576.974630][ T5302] ? may_open_dev+0xf0/0xf0 [ 576.976372][ T5302] ? _raw_spin_unlock+0x28/0x40 [ 576.978242][ T5302] ? alloc_fd+0x2da/0x6c0 [ 576.979919][ T5302] do_sys_openat2+0x176/0x1e0 [ 576.981801][ T5302] ? build_open_flags+0x690/0x690 [ 576.983740][ T5302] __ia32_compat_sys_openat+0x16e/0x200 [ 576.986148][ T5302] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 576.988731][ T5302] ? ksys_write+0x1a7/0x250 [ 576.990931][ T5302] __do_fast_syscall_32+0x61/0xe0 [ 576.993398][ T5302] do_fast_syscall_32+0x33/0x70 [ 576.995675][ T5302] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 576.998335][ T5302] RIP: 0023:0xf7f9e579 [ 576.999884][ T5302] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 577.008786][ T5302] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 577.012713][ T5302] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 577.015859][ T5302] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 577.018890][ T5302] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 577.021945][ T5302] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 577.025676][ T5302] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 577.029359][ T5302] [ 577.036240][ T5320] FAULT_INJECTION: forcing a failure. [ 577.036240][ T5320] name failslab, interval 1, probability 0, space 0, times 0 [ 577.041800][ T5320] CPU: 0 PID: 5320 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 577.046387][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 577.050482][ T5320] Call Trace: [ 577.051870][ T5320] [ 577.053043][ T5320] dump_stack_lvl+0x125/0x1b0 [ 577.055082][ T5320] should_fail_ex+0x496/0x5b0 [ 577.057414][ T5320] should_failslab+0x9/0x20 [ 577.059602][ T5320] __kmem_cache_alloc_node+0x2fd/0x350 [ 577.062167][ T5320] ? nfc_llcp_build_tlv+0xfd/0x230 [ 577.064649][ T5320] ? kasan_set_track+0x25/0x30 [ 577.066981][ T5320] ? nfc_llcp_build_tlv+0xfd/0x230 [ 577.069471][ T5320] __kmalloc+0x4c/0x100 [ 577.071496][ T5320] nfc_llcp_build_tlv+0xfd/0x230 [ 577.073877][ T5320] nfc_llcp_build_gb.isra.0+0x122/0x410 [ 577.076170][ T5320] ? nfc_llcp_reserve_sdp_ssap+0x120/0x120 [ 577.078649][ T5320] ? reacquire_held_locks+0x4b0/0x4b0 [ 577.081194][ T5320] ? mark_held_locks+0x9f/0xe0 [ 577.083500][ T5320] ? lockdep_init_map_type+0x16d/0x7c0 [ 577.086056][ T5320] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 577.088873][ T5320] nfc_llcp_register_device+0x5c5/0x9d0 [ 577.091542][ T5320] nfc_register_device+0x6d/0x3c0 [ 577.093967][ T5320] nci_register_device+0x7f4/0xb80 [ 577.096430][ T5320] ? nci_init_complete_req+0x410/0x410 [ 577.099031][ T5320] virtual_ncidev_open+0x147/0x220 [ 577.101464][ T5320] ? virtual_ncidev_read+0x4e0/0x4e0 [ 577.103958][ T5320] misc_open+0x3da/0x4c0 [ 577.105940][ T5320] ? misc_devnode+0x120/0x120 [ 577.107834][ T5320] chrdev_open+0x277/0x700 [ 577.109673][ T5320] ? __unregister_chrdev+0x100/0x100 [ 577.111781][ T5320] ? fsnotify_perm.part.0+0x25d/0x630 [ 577.114333][ T5320] ? fsnotify_perm.part.0+0x268/0x630 [ 577.116871][ T5320] do_dentry_open+0x88b/0x1780 [ 577.119139][ T5320] ? __unregister_chrdev+0x100/0x100 [ 577.121660][ T5320] ? may_open+0x1f2/0x400 [ 577.123682][ T5320] path_openat+0x19af/0x29c0 [ 577.125419][ T5320] ? path_lookupat+0x770/0x770 [ 577.127262][ T5320] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 577.129531][ T5320] do_filp_open+0x1de/0x430 [ 577.131261][ T5320] ? may_open_dev+0xf0/0xf0 [ 577.133019][ T5320] ? _raw_spin_unlock+0x28/0x40 [ 577.134884][ T5320] ? alloc_fd+0x2da/0x6c0 [ 577.136504][ T5320] do_sys_openat2+0x176/0x1e0 [ 577.138369][ T5320] ? build_open_flags+0x690/0x690 [ 577.140810][ T5320] __ia32_compat_sys_openat+0x16e/0x200 [ 577.143369][ T5320] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 577.145354][ T5320] ? ksys_write+0x1a7/0x250 [ 577.147043][ T5320] __do_fast_syscall_32+0x61/0xe0 [ 577.148911][ T5320] do_fast_syscall_32+0x33/0x70 [ 577.150700][ T5320] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 577.153125][ T5320] RIP: 0023:0xf7f8d579 [ 577.154631][ T5320] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 02:42:24 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 62) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x4000000}, 0x48) 02:42:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x12}, 0x48) 02:42:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x5000000}, 0x48) 02:42:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x12}, 0x48) [ 577.161719][ T5320] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 577.165901][ T5320] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 577.168892][ T5320] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 577.171990][ T5320] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 577.174995][ T5320] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 577.178015][ T5320] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 577.180993][ T5320] [ 577.187796][ T5331] FAULT_INJECTION: forcing a failure. [ 577.187796][ T5331] name failslab, interval 1, probability 0, space 0, times 0 [ 577.192594][ T5331] CPU: 0 PID: 5331 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 577.196512][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 577.200329][ T5331] Call Trace: [ 577.201615][ T5331] [ 577.202916][ T5331] dump_stack_lvl+0x125/0x1b0 [ 577.204773][ T5331] should_fail_ex+0x496/0x5b0 [ 577.206620][ T5331] should_failslab+0x9/0x20 [ 577.208400][ T5331] __kmem_cache_alloc_node+0x2fd/0x350 [ 577.210432][ T5331] ? nfc_llcp_build_tlv+0xfd/0x230 [ 577.212392][ T5331] ? kasan_set_track+0x25/0x30 [ 577.214165][ T5331] ? nfc_llcp_build_tlv+0xfd/0x230 [ 577.216063][ T5331] __kmalloc+0x4c/0x100 [ 577.217722][ T5331] nfc_llcp_build_tlv+0xfd/0x230 [ 577.219702][ T5331] nfc_llcp_build_gb.isra.0+0x122/0x410 [ 577.221904][ T5331] ? nfc_llcp_reserve_sdp_ssap+0x120/0x120 [ 577.224224][ T5331] ? reacquire_held_locks+0x4b0/0x4b0 [ 577.226405][ T5331] ? mark_held_locks+0x9f/0xe0 [ 577.228234][ T5331] ? lockdep_init_map_type+0x16d/0x7c0 [ 577.230307][ T5331] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 577.232572][ T5331] nfc_llcp_register_device+0x5c5/0x9d0 [ 577.234668][ T5331] nfc_register_device+0x6d/0x3c0 [ 577.236587][ T5331] nci_register_device+0x7f4/0xb80 [ 577.238523][ T5331] ? nci_init_complete_req+0x410/0x410 [ 577.240601][ T5331] virtual_ncidev_open+0x147/0x220 [ 577.242574][ T5331] ? virtual_ncidev_read+0x4e0/0x4e0 [ 577.244579][ T5331] misc_open+0x3da/0x4c0 [ 577.246169][ T5331] ? misc_devnode+0x120/0x120 [ 577.247977][ T5331] chrdev_open+0x277/0x700 [ 577.249707][ T5331] ? __unregister_chrdev+0x100/0x100 [ 577.251755][ T5331] ? fsnotify_perm.part.0+0x25d/0x630 [ 577.253999][ T5331] ? fsnotify_perm.part.0+0x268/0x630 [ 577.256010][ T5331] do_dentry_open+0x88b/0x1780 [ 577.257837][ T5331] ? __unregister_chrdev+0x100/0x100 [ 577.259866][ T5331] ? may_open+0x1f2/0x400 [ 577.261489][ T5331] path_openat+0x19af/0x29c0 [ 577.263269][ T5331] ? path_lookupat+0x770/0x770 [ 577.265076][ T5331] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 577.267394][ T5331] do_filp_open+0x1de/0x430 [ 577.269139][ T5331] ? may_open_dev+0xf0/0xf0 [ 577.270845][ T5331] ? _raw_spin_unlock+0x28/0x40 [ 577.272765][ T5331] ? alloc_fd+0x2da/0x6c0 [ 577.274414][ T5331] do_sys_openat2+0x176/0x1e0 [ 577.276195][ T5331] ? build_open_flags+0x690/0x690 [ 577.278113][ T5331] __ia32_compat_sys_openat+0x16e/0x200 [ 577.280223][ T5331] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 577.282366][ T5331] ? ksys_write+0x1a7/0x250 [ 577.284144][ T5331] __do_fast_syscall_32+0x61/0xe0 [ 577.286026][ T5331] do_fast_syscall_32+0x33/0x70 [ 577.287884][ T5331] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 577.290239][ T5331] RIP: 0023:0xf7f9e579 [ 577.291840][ T5331] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 577.299075][ T5331] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 577.302252][ T5331] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 577.305280][ T5331] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 577.308240][ T5331] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 577.311236][ T5331] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 577.314266][ T5331] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 577.317275][ T5331] 02:42:25 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 63) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x6000000}, 0x48) 02:42:25 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 577.338168][ T5345] FAULT_INJECTION: forcing a failure. [ 577.338168][ T5345] name failslab, interval 1, probability 0, space 0, times 0 [ 577.343035][ T5345] CPU: 0 PID: 5345 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 577.346906][ T5345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 577.350709][ T5345] Call Trace: [ 577.352013][ T5345] [ 577.353144][ T5345] dump_stack_lvl+0x125/0x1b0 [ 577.354920][ T5345] should_fail_ex+0x496/0x5b0 [ 577.356727][ T5345] should_failslab+0x9/0x20 [ 577.358470][ T5345] __kmem_cache_alloc_node+0x2fd/0x350 [ 577.360510][ T5345] ? nfc_llcp_build_tlv+0xfd/0x230 02:42:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x7000000}, 0x48) 02:42:25 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 63) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:25 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 577.362712][ T5345] ? kasan_set_track+0x25/0x30 [ 577.364701][ T5345] ? nfc_llcp_build_tlv+0xfd/0x230 [ 577.366649][ T5345] __kmalloc+0x4c/0x100 [ 577.368224][ T5345] nfc_llcp_build_tlv+0xfd/0x230 [ 577.370168][ T5345] nfc_llcp_build_gb.isra.0+0x165/0x410 02:42:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x8000000}, 0x48) [ 577.372327][ T5345] ? nfc_llcp_reserve_sdp_ssap+0x120/0x120 [ 577.374694][ T5345] ? reacquire_held_locks+0x4b0/0x4b0 [ 577.376738][ T5345] ? mark_held_locks+0x9f/0xe0 02:42:25 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 577.378558][ T5345] ? lockdep_init_map_type+0x16d/0x7c0 [ 577.380745][ T5345] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 577.383066][ T5345] nfc_llcp_register_device+0x5c5/0x9d0 [ 577.385155][ T5345] nfc_register_device+0x6d/0x3c0 [ 577.387070][ T5345] nci_register_device+0x7f4/0xb80 [ 577.389040][ T5345] ? nci_init_complete_req+0x410/0x410 [ 577.391123][ T5345] virtual_ncidev_open+0x147/0x220 [ 577.393117][ T5345] ? virtual_ncidev_read+0x4e0/0x4e0 [ 577.395112][ T5345] misc_open+0x3da/0x4c0 [ 577.396710][ T5345] ? misc_devnode+0x120/0x120 [ 577.398474][ T5345] chrdev_open+0x277/0x700 [ 577.400172][ T5345] ? __unregister_chrdev+0x100/0x100 [ 577.402191][ T5345] ? fsnotify_perm.part.0+0x25d/0x630 [ 577.404223][ T5345] ? fsnotify_perm.part.0+0x268/0x630 [ 577.406260][ T5345] do_dentry_open+0x88b/0x1780 [ 577.408065][ T5345] ? __unregister_chrdev+0x100/0x100 [ 577.410068][ T5345] ? may_open+0x1f2/0x400 [ 577.411767][ T5345] path_openat+0x19af/0x29c0 [ 577.413472][ T5345] ? path_lookupat+0x770/0x770 [ 577.415283][ T5345] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 577.417538][ T5345] do_filp_open+0x1de/0x430 [ 577.419239][ T5345] ? may_open_dev+0xf0/0xf0 [ 577.420968][ T5345] ? _raw_spin_unlock+0x28/0x40 [ 577.422816][ T5345] ? alloc_fd+0x2da/0x6c0 [ 577.424493][ T5345] do_sys_openat2+0x176/0x1e0 [ 577.426350][ T5345] ? build_open_flags+0x690/0x690 [ 577.428243][ T5345] __ia32_compat_sys_openat+0x16e/0x200 [ 577.430314][ T5345] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 577.432437][ T5345] ? ksys_write+0x1a7/0x250 [ 577.434188][ T5345] __do_fast_syscall_32+0x61/0xe0 [ 577.436100][ T5345] do_fast_syscall_32+0x33/0x70 [ 577.437966][ T5345] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 577.440349][ T5345] RIP: 0023:0xf7f8d579 [ 577.441886][ T5345] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 577.449124][ T5345] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 577.452281][ T5345] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 577.455259][ T5345] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 577.458279][ T5345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 577.461477][ T5345] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 577.464473][ T5345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 577.467450][ T5345] [ 577.475947][ T5352] FAULT_INJECTION: forcing a failure. [ 577.475947][ T5352] name failslab, interval 1, probability 0, space 0, times 0 [ 577.481618][ T5352] CPU: 0 PID: 5352 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 577.485509][ T5352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 577.489266][ T5352] Call Trace: [ 577.490523][ T5352] [ 577.491701][ T5352] dump_stack_lvl+0x125/0x1b0 [ 577.493511][ T5352] should_fail_ex+0x496/0x5b0 [ 577.495292][ T5352] should_failslab+0x9/0x20 [ 577.497053][ T5352] __kmem_cache_alloc_node+0x2fd/0x350 [ 577.499097][ T5352] ? nfc_llcp_build_tlv+0xfd/0x230 [ 577.501060][ T5352] ? kasan_set_track+0x25/0x30 [ 577.502960][ T5352] ? nfc_llcp_build_tlv+0xfd/0x230 [ 577.504903][ T5352] __kmalloc+0x4c/0x100 [ 577.506538][ T5352] nfc_llcp_build_tlv+0xfd/0x230 [ 577.508437][ T5352] nfc_llcp_build_gb.isra.0+0x122/0x410 [ 577.510489][ T5352] ? nfc_llcp_reserve_sdp_ssap+0x120/0x120 [ 577.512736][ T5352] ? reacquire_held_locks+0x4b0/0x4b0 [ 577.514769][ T5352] ? mark_held_locks+0x9f/0xe0 [ 577.516636][ T5352] ? lockdep_init_map_type+0x16d/0x7c0 [ 577.518670][ T5352] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 577.520876][ T5352] nfc_llcp_register_device+0x5c5/0x9d0 [ 577.523329][ T5352] nfc_register_device+0x6d/0x3c0 [ 577.525541][ T5352] nci_register_device+0x7f4/0xb80 [ 577.527413][ T5352] ? nci_init_complete_req+0x410/0x410 [ 577.529430][ T5352] virtual_ncidev_open+0x147/0x220 [ 577.531315][ T5352] ? virtual_ncidev_read+0x4e0/0x4e0 [ 577.533273][ T5352] misc_open+0x3da/0x4c0 [ 577.534837][ T5352] ? misc_devnode+0x120/0x120 [ 577.536589][ T5352] chrdev_open+0x277/0x700 [ 577.538244][ T5352] ? __unregister_chrdev+0x100/0x100 [ 577.540200][ T5352] ? fsnotify_perm.part.0+0x25d/0x630 [ 577.542350][ T5352] ? fsnotify_perm.part.0+0x268/0x630 [ 577.544932][ T5352] do_dentry_open+0x88b/0x1780 [ 577.546696][ T5352] ? __unregister_chrdev+0x100/0x100 [ 577.548639][ T5352] ? may_open+0x1f2/0x400 [ 577.550221][ T5352] path_openat+0x19af/0x29c0 [ 577.552110][ T5352] ? path_lookupat+0x770/0x770 [ 577.553939][ T5352] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 577.556269][ T5352] do_filp_open+0x1de/0x430 [ 577.557990][ T5352] ? may_open_dev+0xf0/0xf0 [ 577.559741][ T5352] ? _raw_spin_unlock+0x28/0x40 [ 577.561565][ T5352] ? alloc_fd+0x2da/0x6c0 [ 577.563241][ T5352] do_sys_openat2+0x176/0x1e0 [ 577.565023][ T5352] ? build_open_flags+0x690/0x690 [ 577.566935][ T5352] __ia32_compat_sys_openat+0x16e/0x200 [ 577.569042][ T5352] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 577.571076][ T5352] ? ksys_write+0x1a7/0x250 [ 577.573179][ T5352] __do_fast_syscall_32+0x61/0xe0 [ 577.575526][ T5352] do_fast_syscall_32+0x33/0x70 [ 577.577372][ T5352] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 577.579777][ T5352] RIP: 0023:0xf7f9e579 [ 577.581308][ T5352] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 577.588515][ T5352] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 577.591674][ T5352] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 577.594869][ T5352] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 577.597838][ T5352] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 577.600800][ T5352] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 577.603752][ T5352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 577.606713][ T5352] 02:42:25 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x9000000}, 0x48) 02:42:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) [ 577.638686][ T5368] FAULT_INJECTION: forcing a failure. [ 577.638686][ T5368] name failslab, interval 1, probability 0, space 0, times 0 [ 577.643396][ T5368] CPU: 3 PID: 5368 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 02:42:25 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xa000000}, 0x48) [ 577.647232][ T5368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 577.651921][ T5368] Call Trace: [ 577.653518][ T5368] [ 577.654937][ T5368] dump_stack_lvl+0x125/0x1b0 [ 577.657193][ T5368] should_fail_ex+0x496/0x5b0 [ 577.659434][ T5368] should_failslab+0x9/0x20 [ 577.661622][ T5368] __kmem_cache_alloc_node+0x2fd/0x350 [ 577.664225][ T5368] ? nfc_llcp_build_tlv+0xfd/0x230 [ 577.666401][ T5368] ? kasan_set_track+0x25/0x30 [ 577.668273][ T5368] ? nfc_llcp_build_tlv+0xfd/0x230 [ 577.670512][ T5368] __kmalloc+0x4c/0x100 [ 577.672372][ T5368] nfc_llcp_build_tlv+0xfd/0x230 [ 577.674313][ T5368] nfc_llcp_build_gb.isra.0+0x122/0x410 [ 577.676462][ T5368] ? nfc_llcp_reserve_sdp_ssap+0x120/0x120 [ 577.678628][ T5368] ? reacquire_held_locks+0x4b0/0x4b0 [ 577.680712][ T5368] ? mark_held_locks+0x9f/0xe0 [ 577.682496][ T5368] ? lockdep_init_map_type+0x16d/0x7c0 [ 577.684540][ T5368] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 577.686819][ T5368] nfc_llcp_register_device+0x5c5/0x9d0 [ 577.689573][ T5368] nfc_register_device+0x6d/0x3c0 [ 577.691952][ T5368] nci_register_device+0x7f4/0xb80 [ 577.694389][ T5368] ? nci_init_complete_req+0x410/0x410 [ 577.697024][ T5368] virtual_ncidev_open+0x147/0x220 [ 577.699443][ T5368] ? virtual_ncidev_read+0x4e0/0x4e0 [ 577.701976][ T5368] misc_open+0x3da/0x4c0 [ 577.703991][ T5368] ? misc_devnode+0x120/0x120 [ 577.706219][ T5368] chrdev_open+0x277/0x700 [ 577.708363][ T5368] ? __unregister_chrdev+0x100/0x100 [ 577.710853][ T5368] ? fsnotify_perm.part.0+0x25d/0x630 [ 577.713445][ T5368] ? fsnotify_perm.part.0+0x268/0x630 [ 577.716009][ T5368] do_dentry_open+0x88b/0x1780 [ 577.718412][ T5368] ? __unregister_chrdev+0x100/0x100 [ 577.720918][ T5368] ? may_open+0x1f2/0x400 [ 577.722964][ T5368] path_openat+0x19af/0x29c0 [ 577.725197][ T5368] ? path_lookupat+0x770/0x770 [ 577.727447][ T5368] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 577.730294][ T5368] do_filp_open+0x1de/0x430 [ 577.732517][ T5368] ? may_open_dev+0xf0/0xf0 [ 577.734704][ T5368] ? _raw_spin_unlock+0x28/0x40 [ 577.736685][ T5368] ? alloc_fd+0x2da/0x6c0 [ 577.738269][ T5368] do_sys_openat2+0x176/0x1e0 [ 577.739986][ T5368] ? build_open_flags+0x690/0x690 [ 577.741820][ T5368] __ia32_compat_sys_openat+0x16e/0x200 [ 577.743844][ T5368] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 577.745803][ T5368] ? ksys_write+0x1a7/0x250 [ 577.747473][ T5368] __do_fast_syscall_32+0x61/0xe0 [ 577.749293][ T5368] do_fast_syscall_32+0x33/0x70 [ 577.751057][ T5368] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 577.753396][ T5368] RIP: 0023:0xf7f8d579 [ 577.754868][ T5368] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 577.761819][ T5368] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 577.764833][ T5368] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 577.767680][ T5368] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 577.770551][ T5368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 577.773363][ T5368] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 577.776237][ T5368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 577.779075][ T5368] 02:42:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xb000000}, 0x48) 02:42:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) [ 577.785187][ T5377] FAULT_INJECTION: forcing a failure. [ 577.785187][ T5377] name failslab, interval 1, probability 0, space 0, times 0 [ 577.791123][ T5377] CPU: 0 PID: 5377 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 577.795742][ T5377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 577.799425][ T5377] Call Trace: [ 577.800684][ T5377] [ 577.801788][ T5377] dump_stack_lvl+0x125/0x1b0 [ 577.803571][ T5377] should_fail_ex+0x496/0x5b0 02:42:25 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 65) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xc000000}, 0x48) 02:42:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x11}, 0x48) [ 577.805326][ T5377] should_failslab+0x9/0x20 [ 577.807290][ T5377] __kmem_cache_alloc_node+0x2fd/0x350 [ 577.809378][ T5377] ? nfc_llcp_build_tlv+0xfd/0x230 [ 577.811316][ T5377] ? kasan_set_track+0x25/0x30 [ 577.813401][ T5377] ? nfc_llcp_build_tlv+0xfd/0x230 [ 577.815984][ T5377] __kmalloc+0x4c/0x100 [ 577.818102][ T5377] nfc_llcp_build_tlv+0xfd/0x230 [ 577.820486][ T5377] nfc_llcp_build_gb.isra.0+0x165/0x410 [ 577.822645][ T5377] ? nfc_llcp_reserve_sdp_ssap+0x120/0x120 [ 577.824935][ T5377] ? reacquire_held_locks+0x4b0/0x4b0 [ 577.827170][ T5377] ? mark_held_locks+0x9f/0xe0 [ 577.829490][ T5377] ? lockdep_init_map_type+0x16d/0x7c0 [ 577.832155][ T5377] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 577.834563][ T5377] nfc_llcp_register_device+0x5c5/0x9d0 [ 577.836641][ T5377] nfc_register_device+0x6d/0x3c0 [ 577.838491][ T5377] nci_register_device+0x7f4/0xb80 [ 577.840397][ T5377] ? nci_init_complete_req+0x410/0x410 [ 577.842474][ T5377] virtual_ncidev_open+0x147/0x220 [ 577.844876][ T5377] ? virtual_ncidev_read+0x4e0/0x4e0 [ 577.846864][ T5377] misc_open+0x3da/0x4c0 [ 577.848500][ T5377] ? misc_devnode+0x120/0x120 [ 577.850214][ T5377] chrdev_open+0x277/0x700 [ 577.852136][ T5377] ? __unregister_chrdev+0x100/0x100 [ 577.854269][ T5377] ? fsnotify_perm.part.0+0x25d/0x630 [ 577.856255][ T5377] ? fsnotify_perm.part.0+0x268/0x630 [ 577.858194][ T5377] do_dentry_open+0x88b/0x1780 [ 577.860316][ T5377] ? __unregister_chrdev+0x100/0x100 [ 577.862681][ T5377] ? may_open+0x1f2/0x400 [ 577.864631][ T5377] path_openat+0x19af/0x29c0 [ 577.866865][ T5377] ? path_lookupat+0x770/0x770 [ 577.868973][ T5377] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 577.871487][ T5377] do_filp_open+0x1de/0x430 [ 577.873506][ T5377] ? may_open_dev+0xf0/0xf0 [ 577.875509][ T5377] ? _raw_spin_unlock+0x28/0x40 [ 577.877675][ T5377] ? alloc_fd+0x2da/0x6c0 [ 577.879556][ T5377] do_sys_openat2+0x176/0x1e0 [ 577.881647][ T5377] ? build_open_flags+0x690/0x690 [ 577.884044][ T5377] __ia32_compat_sys_openat+0x16e/0x200 [ 577.886603][ T5377] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 577.889123][ T5377] ? ksys_write+0x1a7/0x250 [ 577.891226][ T5377] __do_fast_syscall_32+0x61/0xe0 [ 577.893544][ T5377] do_fast_syscall_32+0x33/0x70 [ 577.895781][ T5377] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 577.898799][ T5377] RIP: 0023:0xf7f9e579 [ 577.900704][ T5377] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 577.909195][ T5377] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 577.912984][ T5377] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 577.916575][ T5377] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 577.919992][ T5377] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 577.923417][ T5377] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 577.926902][ T5377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 577.929854][ T5377] [ 577.938703][ T5392] FAULT_INJECTION: forcing a failure. [ 577.938703][ T5392] name failslab, interval 1, probability 0, space 0, times 0 [ 577.944393][ T5392] CPU: 3 PID: 5392 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 577.949058][ T5392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 577.953574][ T5392] Call Trace: [ 577.955080][ T5392] 02:42:25 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 65) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xd000000}, 0x48) 02:42:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x11}, 0x48) [ 577.956307][ T5392] dump_stack_lvl+0x125/0x1b0 [ 577.958499][ T5392] should_fail_ex+0x496/0x5b0 [ 577.960802][ T5392] should_failslab+0x9/0x20 [ 577.962988][ T5392] __kmem_cache_alloc_node+0x2fd/0x350 [ 577.965482][ T5392] ? rfkill_alloc+0xac/0x320 [ 577.967516][ T5392] ? rfkill_alloc+0xac/0x320 [ 577.969614][ T5392] __kmalloc+0x4c/0x100 [ 577.971500][ T5392] rfkill_alloc+0xac/0x320 [ 577.973499][ T5392] nfc_register_device+0xe1/0x3c0 [ 577.975787][ T5392] nci_register_device+0x7f4/0xb80 [ 577.978193][ T5392] ? nci_init_complete_req+0x410/0x410 [ 577.980789][ T5392] virtual_ncidev_open+0x147/0x220 [ 577.983073][ T5392] ? virtual_ncidev_read+0x4e0/0x4e0 [ 577.985562][ T5392] misc_open+0x3da/0x4c0 [ 577.987593][ T5392] ? misc_devnode+0x120/0x120 [ 577.989840][ T5392] chrdev_open+0x277/0x700 [ 577.991985][ T5392] ? __unregister_chrdev+0x100/0x100 [ 577.994466][ T5392] ? fsnotify_perm.part.0+0x25d/0x630 [ 577.996988][ T5392] ? fsnotify_perm.part.0+0x268/0x630 [ 577.999525][ T5392] do_dentry_open+0x88b/0x1780 [ 578.001778][ T5392] ? __unregister_chrdev+0x100/0x100 [ 578.004315][ T5392] ? may_open+0x1f2/0x400 [ 578.006402][ T5392] path_openat+0x19af/0x29c0 [ 578.008636][ T5392] ? path_lookupat+0x770/0x770 [ 578.010908][ T5392] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 578.013838][ T5392] do_filp_open+0x1de/0x430 [ 578.016010][ T5392] ? may_open_dev+0xf0/0xf0 [ 578.018196][ T5392] ? _raw_spin_unlock+0x28/0x40 [ 578.020500][ T5392] ? alloc_fd+0x2da/0x6c0 [ 578.022584][ T5392] do_sys_openat2+0x176/0x1e0 [ 578.024852][ T5392] ? build_open_flags+0x690/0x690 [ 578.027271][ T5392] __ia32_compat_sys_openat+0x16e/0x200 [ 578.029929][ T5392] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 578.032521][ T5392] ? ksys_write+0x1a7/0x250 [ 578.034696][ T5392] __do_fast_syscall_32+0x61/0xe0 [ 578.036989][ T5392] do_fast_syscall_32+0x33/0x70 [ 578.039202][ T5392] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 578.042070][ T5392] RIP: 0023:0xf7f8d579 [ 578.043990][ T5392] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 578.052935][ T5392] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 578.056900][ T5392] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 578.060635][ T5392] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 578.064388][ T5392] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 578.068099][ T5392] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 578.071839][ T5392] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.075557][ T5392] 02:42:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xe000000}, 0x48) 02:42:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x11}, 0x48) [ 578.086712][ T5402] FAULT_INJECTION: forcing a failure. [ 578.086712][ T5402] name failslab, interval 1, probability 0, space 0, times 0 [ 578.095047][ T5402] CPU: 2 PID: 5402 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 578.099873][ T5402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 578.104447][ T5402] Call Trace: [ 578.105891][ T5402] [ 578.107270][ T5402] dump_stack_lvl+0x125/0x1b0 [ 578.109489][ T5402] should_fail_ex+0x496/0x5b0 [ 578.111753][ T5402] should_failslab+0x9/0x20 [ 578.113907][ T5402] __kmem_cache_alloc_node+0x2fd/0x350 [ 578.116521][ T5402] ? rfkill_alloc+0xac/0x320 [ 578.118781][ T5402] ? rfkill_alloc+0xac/0x320 [ 578.120966][ T5402] __kmalloc+0x4c/0x100 [ 578.122895][ T5402] rfkill_alloc+0xac/0x320 [ 578.124978][ T5402] nfc_register_device+0xe1/0x3c0 [ 578.127260][ T5402] nci_register_device+0x7f4/0xb80 [ 578.129486][ T5402] ? nci_init_complete_req+0x410/0x410 [ 578.131958][ T5402] virtual_ncidev_open+0x147/0x220 [ 578.134325][ T5402] ? virtual_ncidev_read+0x4e0/0x4e0 [ 578.136813][ T5402] misc_open+0x3da/0x4c0 [ 578.138822][ T5402] ? misc_devnode+0x120/0x120 [ 578.140973][ T5402] chrdev_open+0x277/0x700 [ 578.143015][ T5402] ? __unregister_chrdev+0x100/0x100 [ 578.145321][ T5402] ? fsnotify_perm.part.0+0x25d/0x630 [ 578.147816][ T5402] ? fsnotify_perm.part.0+0x268/0x630 [ 578.150395][ T5402] do_dentry_open+0x88b/0x1780 [ 578.152639][ T5402] ? __unregister_chrdev+0x100/0x100 [ 578.155057][ T5402] ? may_open+0x1f2/0x400 [ 578.157039][ T5402] path_openat+0x19af/0x29c0 [ 578.159246][ T5402] ? path_lookupat+0x770/0x770 [ 578.161544][ T5402] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 578.164386][ T5402] do_filp_open+0x1de/0x430 [ 578.166538][ T5402] ? may_open_dev+0xf0/0xf0 [ 578.168682][ T5402] ? _raw_spin_unlock+0x28/0x40 [ 578.170982][ T5402] ? alloc_fd+0x2da/0x6c0 [ 578.173085][ T5402] do_sys_openat2+0x176/0x1e0 [ 578.175319][ T5402] ? build_open_flags+0x690/0x690 [ 578.177719][ T5402] __ia32_compat_sys_openat+0x16e/0x200 [ 578.180337][ T5402] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 578.182922][ T5402] ? ksys_write+0x1a7/0x250 [ 578.185121][ T5402] __do_fast_syscall_32+0x61/0xe0 [ 578.187473][ T5402] do_fast_syscall_32+0x33/0x70 [ 578.189622][ T5402] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 578.192527][ T5402] RIP: 0023:0xf7f9e579 [ 578.194396][ T5402] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 578.202273][ T5402] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 578.205940][ T5402] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 578.209362][ T5402] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 578.212935][ T5402] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 578.216652][ T5402] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 578.220353][ T5402] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.224033][ T5402] 02:42:26 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 66) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xf000000}, 0x48) 02:42:26 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 578.254893][ T5417] FAULT_INJECTION: forcing a failure. [ 578.254893][ T5417] name failslab, interval 1, probability 0, space 0, times 0 02:42:26 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 66) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x10000000}, 0x48) 02:42:26 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 578.263027][ T5417] CPU: 0 PID: 5417 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 578.267074][ T5417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 578.270788][ T5417] Call Trace: [ 578.272063][ T5417] [ 578.273173][ T5417] dump_stack_lvl+0x125/0x1b0 [ 578.274906][ T5417] should_fail_ex+0x496/0x5b0 [ 578.276673][ T5417] should_failslab+0x9/0x20 [ 578.278381][ T5417] __kmem_cache_alloc_node+0x2fd/0x350 [ 578.280434][ T5417] ? nfc_llcp_build_tlv+0xfd/0x230 [ 578.282355][ T5417] ? kasan_set_track+0x25/0x30 [ 578.284308][ T5417] ? nfc_llcp_build_tlv+0xfd/0x230 [ 578.286194][ T5417] __kmalloc+0x4c/0x100 [ 578.287749][ T5417] nfc_llcp_build_tlv+0xfd/0x230 02:42:26 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x11000000}, 0x48) [ 578.289583][ T5417] nfc_llcp_build_gb.isra.0+0x19d/0x410 [ 578.292022][ T5417] ? nfc_llcp_reserve_sdp_ssap+0x120/0x120 [ 578.294492][ T5417] ? reacquire_held_locks+0x4b0/0x4b0 [ 578.296573][ T5417] ? mark_held_locks+0x9f/0xe0 [ 578.298430][ T5417] ? lockdep_init_map_type+0x16d/0x7c0 [ 578.300540][ T5417] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 578.302789][ T5417] nfc_llcp_register_device+0x5c5/0x9d0 [ 578.305074][ T5417] nfc_register_device+0x6d/0x3c0 [ 578.307021][ T5417] nci_register_device+0x7f4/0xb80 [ 578.309008][ T5417] ? nci_init_complete_req+0x410/0x410 [ 578.311183][ T5417] virtual_ncidev_open+0x147/0x220 [ 578.313206][ T5417] ? virtual_ncidev_read+0x4e0/0x4e0 [ 578.315208][ T5417] misc_open+0x3da/0x4c0 [ 578.316878][ T5417] ? misc_devnode+0x120/0x120 [ 578.318678][ T5417] chrdev_open+0x277/0x700 [ 578.320413][ T5417] ? __unregister_chrdev+0x100/0x100 [ 578.322483][ T5417] ? fsnotify_perm.part.0+0x25d/0x630 [ 578.324608][ T5417] ? fsnotify_perm.part.0+0x268/0x630 [ 578.326623][ T5417] do_dentry_open+0x88b/0x1780 [ 578.328537][ T5417] ? __unregister_chrdev+0x100/0x100 [ 578.330562][ T5417] ? may_open+0x1f2/0x400 [ 578.332252][ T5417] path_openat+0x19af/0x29c0 [ 578.334050][ T5417] ? path_lookupat+0x770/0x770 [ 578.335847][ T5417] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 578.338142][ T5417] do_filp_open+0x1de/0x430 [ 578.339921][ T5417] ? may_open_dev+0xf0/0xf0 [ 578.341671][ T5417] ? _raw_spin_unlock+0x28/0x40 [ 578.343528][ T5417] ? alloc_fd+0x2da/0x6c0 [ 578.345200][ T5417] do_sys_openat2+0x176/0x1e0 [ 578.346961][ T5417] ? build_open_flags+0x690/0x690 [ 578.348921][ T5417] __ia32_compat_sys_openat+0x16e/0x200 [ 578.351027][ T5417] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 578.353147][ T5417] ? ksys_write+0x1a7/0x250 [ 578.354853][ T5417] __do_fast_syscall_32+0x61/0xe0 [ 578.356803][ T5417] do_fast_syscall_32+0x33/0x70 [ 578.358672][ T5417] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 578.361068][ T5417] RIP: 0023:0xf7f8d579 [ 578.362614][ T5417] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 578.369775][ T5417] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 578.372959][ T5417] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 578.375899][ T5417] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 578.378859][ T5417] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 578.381857][ T5417] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 578.385334][ T5417] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.388263][ T5417] [ 578.399857][ T5426] FAULT_INJECTION: forcing a failure. [ 578.399857][ T5426] name failslab, interval 1, probability 0, space 0, times 0 02:42:26 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 67) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x12000000}, 0x48) [ 578.404525][ T5426] CPU: 1 PID: 5426 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 578.408470][ T5426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 578.412153][ T5426] Call Trace: [ 578.413661][ T5426] [ 578.414840][ T5426] dump_stack_lvl+0x125/0x1b0 [ 578.416595][ T5426] should_fail_ex+0x496/0x5b0 [ 578.418363][ T5426] should_failslab+0x9/0x20 [ 578.420083][ T5426] __kmem_cache_alloc_node+0x2fd/0x350 [ 578.422107][ T5426] ? nfc_llcp_build_tlv+0xfd/0x230 [ 578.424031][ T5426] ? kasan_set_track+0x25/0x30 [ 578.425825][ T5426] ? nfc_llcp_build_tlv+0xfd/0x230 [ 578.428017][ T5426] __kmalloc+0x4c/0x100 [ 578.429944][ T5426] nfc_llcp_build_tlv+0xfd/0x230 [ 578.432239][ T5426] nfc_llcp_build_gb.isra.0+0x19d/0x410 [ 578.434810][ T5426] ? nfc_llcp_reserve_sdp_ssap+0x120/0x120 [ 578.437137][ T5426] ? reacquire_held_locks+0x4b0/0x4b0 [ 578.439211][ T5426] ? mark_held_locks+0x9f/0xe0 [ 578.441003][ T5426] ? lockdep_init_map_type+0x16d/0x7c0 [ 578.443034][ T5426] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 578.445225][ T5426] nfc_llcp_register_device+0x5c5/0x9d0 [ 578.447327][ T5426] nfc_register_device+0x6d/0x3c0 [ 578.449206][ T5426] nci_register_device+0x7f4/0xb80 [ 578.451279][ T5426] ? nci_init_complete_req+0x410/0x410 [ 578.453794][ T5426] virtual_ncidev_open+0x147/0x220 [ 578.455791][ T5426] ? virtual_ncidev_read+0x4e0/0x4e0 [ 578.457741][ T5426] misc_open+0x3da/0x4c0 [ 578.459329][ T5426] ? misc_devnode+0x120/0x120 [ 578.461240][ T5426] chrdev_open+0x277/0x700 [ 578.463329][ T5426] ? __unregister_chrdev+0x100/0x100 [ 578.465780][ T5426] ? fsnotify_perm.part.0+0x25d/0x630 [ 578.468223][ T5426] ? fsnotify_perm.part.0+0x268/0x630 [ 578.470634][ T5426] do_dentry_open+0x88b/0x1780 [ 578.472816][ T5426] ? __unregister_chrdev+0x100/0x100 [ 578.475185][ T5426] ? may_open+0x1f2/0x400 [ 578.477129][ T5426] path_openat+0x19af/0x29c0 [ 578.479218][ T5426] ? path_lookupat+0x770/0x770 [ 578.481376][ T5426] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 578.484082][ T5426] do_filp_open+0x1de/0x430 [ 578.486119][ T5426] ? may_open_dev+0xf0/0xf0 [ 578.488188][ T5426] ? _raw_spin_unlock+0x28/0x40 [ 578.490369][ T5426] ? alloc_fd+0x2da/0x6c0 [ 578.492340][ T5426] do_sys_openat2+0x176/0x1e0 [ 578.494452][ T5426] ? build_open_flags+0x690/0x690 [ 578.496726][ T5426] __ia32_compat_sys_openat+0x16e/0x200 [ 578.499183][ T5426] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 578.501632][ T5426] ? ksys_write+0x1a7/0x250 [ 578.503705][ T5426] __do_fast_syscall_32+0x61/0xe0 [ 578.505957][ T5426] do_fast_syscall_32+0x33/0x70 [ 578.508181][ T5426] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 578.510989][ T5426] RIP: 0023:0xf7f9e579 [ 578.512516][ T5426] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 578.520673][ T5426] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 578.524394][ T5426] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 578.527923][ T5426] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 578.531434][ T5426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 578.534977][ T5426] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 578.537920][ T5426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.540874][ T5426] [ 578.546392][ T5440] FAULT_INJECTION: forcing a failure. [ 578.546392][ T5440] name failslab, interval 1, probability 0, space 0, times 0 [ 578.554494][ T5440] CPU: 1 PID: 5440 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 578.558317][ T5440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 578.562018][ T5440] Call Trace: [ 578.563262][ T5440] [ 578.564667][ T5440] dump_stack_lvl+0x125/0x1b0 [ 578.566931][ T5440] should_fail_ex+0x496/0x5b0 [ 578.569086][ T5440] should_failslab+0x9/0x20 [ 578.571165][ T5440] __kmem_cache_alloc_node+0x2fd/0x350 [ 578.573643][ T5440] ? device_add+0xd0c/0x1b40 [ 578.575911][ T5440] kmalloc_trace+0x25/0xe0 [ 578.577937][ T5440] device_add+0xd0c/0x1b40 [ 578.579957][ T5440] ? dev_set_name+0xc8/0x100 [ 578.582039][ T5440] ? device_initialize+0x540/0x540 [ 578.584357][ T5440] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 578.587383][ T5440] ? __init_waitqueue_head+0xca/0x150 [ 578.589815][ T5440] rfkill_register+0x1a9/0xb00 [ 578.592001][ T5440] nfc_register_device+0x11f/0x3c0 [ 578.594288][ T5440] nci_register_device+0x7f4/0xb80 [ 578.596609][ T5440] ? nci_init_complete_req+0x410/0x410 [ 578.599057][ T5440] virtual_ncidev_open+0x147/0x220 [ 578.601353][ T5440] ? virtual_ncidev_read+0x4e0/0x4e0 [ 578.603740][ T5440] misc_open+0x3da/0x4c0 [ 578.605644][ T5440] ? misc_devnode+0x120/0x120 [ 578.607787][ T5440] chrdev_open+0x277/0x700 [ 578.609897][ T5440] ? __unregister_chrdev+0x100/0x100 [ 578.612282][ T5440] ? fsnotify_perm.part.0+0x25d/0x630 [ 578.614683][ T5440] ? fsnotify_perm.part.0+0x268/0x630 [ 578.617098][ T5440] do_dentry_open+0x88b/0x1780 [ 578.619273][ T5440] ? __unregister_chrdev+0x100/0x100 [ 578.621642][ T5440] ? may_open+0x1f2/0x400 [ 578.623578][ T5440] path_openat+0x19af/0x29c0 [ 578.625609][ T5440] ? path_lookupat+0x770/0x770 [ 578.627780][ T5440] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 578.630467][ T5440] do_filp_open+0x1de/0x430 [ 578.632529][ T5440] ? may_open_dev+0xf0/0xf0 [ 578.634285][ T5440] ? _raw_spin_unlock+0x28/0x40 [ 578.636409][ T5440] ? alloc_fd+0x2da/0x6c0 [ 578.638375][ T5440] do_sys_openat2+0x176/0x1e0 [ 578.640511][ T5440] ? build_open_flags+0x690/0x690 [ 578.642779][ T5440] __ia32_compat_sys_openat+0x16e/0x200 [ 578.645073][ T5440] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 578.647524][ T5440] ? ksys_write+0x1a7/0x250 [ 578.649577][ T5440] __do_fast_syscall_32+0x61/0xe0 [ 578.651846][ T5440] do_fast_syscall_32+0x33/0x70 [ 578.654032][ T5440] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 578.656873][ T5440] RIP: 0023:0xf7f8d579 [ 578.658701][ T5440] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 578.667595][ T5440] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 578.671370][ T5440] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 578.674966][ T5440] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 578.678524][ T5440] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 578.682081][ T5440] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 578.685690][ T5440] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.689271][ T5440] 02:42:26 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 67) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x13000000}, 0x48) 02:42:26 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 68) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) [ 578.726502][ T5447] FAULT_INJECTION: forcing a failure. [ 578.726502][ T5447] name failslab, interval 1, probability 0, space 0, times 0 [ 578.732003][ T5447] CPU: 1 PID: 5447 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 02:42:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x14000000}, 0x48) [ 578.735813][ T5447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 578.739813][ T5447] Call Trace: 02:42:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x10}, 0x48) [ 578.741378][ T5447] [ 578.742743][ T5447] dump_stack_lvl+0x125/0x1b0 [ 578.744891][ T5447] should_fail_ex+0x496/0x5b0 02:42:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x15000000}, 0x48) [ 578.747027][ T5447] should_failslab+0x9/0x20 [ 578.749220][ T5447] __kmem_cache_alloc_node+0x2fd/0x350 [ 578.751691][ T5447] ? rfkill_alloc+0xac/0x320 [ 578.753794][ T5447] ? rfkill_alloc+0xac/0x320 [ 578.756064][ T5447] __kmalloc+0x4c/0x100 [ 578.757972][ T5447] rfkill_alloc+0xac/0x320 [ 578.760035][ T5447] nfc_register_device+0xe1/0x3c0 [ 578.762302][ T5447] nci_register_device+0x7f4/0xb80 [ 578.764649][ T5447] ? nci_init_complete_req+0x410/0x410 [ 578.767124][ T5447] virtual_ncidev_open+0x147/0x220 [ 578.769429][ T5447] ? virtual_ncidev_read+0x4e0/0x4e0 [ 578.771820][ T5447] misc_open+0x3da/0x4c0 [ 578.773731][ T5447] ? misc_devnode+0x120/0x120 [ 578.775842][ T5447] chrdev_open+0x277/0x700 [ 578.777856][ T5447] ? __unregister_chrdev+0x100/0x100 [ 578.780224][ T5447] ? fsnotify_perm.part.0+0x25d/0x630 [ 578.782631][ T5447] ? fsnotify_perm.part.0+0x268/0x630 [ 578.785052][ T5447] do_dentry_open+0x88b/0x1780 [ 578.787209][ T5447] ? __unregister_chrdev+0x100/0x100 [ 578.789584][ T5447] ? may_open+0x1f2/0x400 [ 578.791553][ T5447] path_openat+0x19af/0x29c0 [ 578.793675][ T5447] ? path_lookupat+0x770/0x770 [ 578.795836][ T5447] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 578.798517][ T5447] do_filp_open+0x1de/0x430 [ 578.800579][ T5447] ? may_open_dev+0xf0/0xf0 [ 578.802602][ T5447] ? _raw_spin_unlock+0x28/0x40 [ 578.804769][ T5447] ? alloc_fd+0x2da/0x6c0 [ 578.806806][ T5447] do_sys_openat2+0x176/0x1e0 [ 578.808729][ T5447] ? build_open_flags+0x690/0x690 [ 578.810624][ T5447] __ia32_compat_sys_openat+0x16e/0x200 [ 578.812743][ T5447] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 578.814775][ T5447] ? ksys_write+0x1a7/0x250 [ 578.816512][ T5447] __do_fast_syscall_32+0x61/0xe0 [ 578.818359][ T5447] do_fast_syscall_32+0x33/0x70 [ 578.820260][ T5447] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 578.822677][ T5447] RIP: 0023:0xf7f9e579 [ 578.824238][ T5447] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 578.831857][ T5447] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 578.835179][ T5447] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 578.838104][ T5447] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 578.841042][ T5447] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 578.843958][ T5447] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 578.846893][ T5447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.849824][ T5447] [ 578.855559][ T5455] FAULT_INJECTION: forcing a failure. [ 578.855559][ T5455] name failslab, interval 1, probability 0, space 0, times 0 [ 578.863799][ T5455] CPU: 0 PID: 5455 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 578.868540][ T5455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 578.872759][ T5455] Call Trace: [ 578.874118][ T5455] [ 578.875296][ T5455] dump_stack_lvl+0x125/0x1b0 [ 578.877193][ T5455] should_fail_ex+0x496/0x5b0 [ 578.879401][ T5455] should_failslab+0x9/0x20 [ 578.881536][ T5455] __kmem_cache_alloc_node+0x2fd/0x350 [ 578.884040][ T5455] ? device_add+0xd0c/0x1b40 [ 578.886213][ T5455] kmalloc_trace+0x25/0xe0 [ 578.888294][ T5455] device_add+0xd0c/0x1b40 [ 578.890357][ T5455] ? dev_set_name+0xc8/0x100 [ 578.892449][ T5455] ? device_initialize+0x540/0x540 [ 578.894721][ T5455] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 578.897807][ T5455] ? __init_waitqueue_head+0xca/0x150 [ 578.900249][ T5455] rfkill_register+0x1a9/0xb00 [ 578.902537][ T5455] nfc_register_device+0x11f/0x3c0 [ 578.905005][ T5455] nci_register_device+0x7f4/0xb80 [ 578.907501][ T5455] ? nci_init_complete_req+0x410/0x410 [ 578.910129][ T5455] virtual_ncidev_open+0x147/0x220 [ 578.912611][ T5455] ? virtual_ncidev_read+0x4e0/0x4e0 [ 578.915144][ T5455] misc_open+0x3da/0x4c0 [ 578.917210][ T5455] ? misc_devnode+0x120/0x120 [ 578.919417][ T5455] chrdev_open+0x277/0x700 [ 578.921529][ T5455] ? __unregister_chrdev+0x100/0x100 [ 578.924065][ T5455] ? fsnotify_perm.part.0+0x25d/0x630 [ 578.926642][ T5455] ? fsnotify_perm.part.0+0x268/0x630 [ 578.929217][ T5455] do_dentry_open+0x88b/0x1780 [ 578.931548][ T5455] ? __unregister_chrdev+0x100/0x100 [ 578.934006][ T5455] ? may_open+0x1f2/0x400 [ 578.936132][ T5455] path_openat+0x19af/0x29c0 [ 578.938340][ T5455] ? path_lookupat+0x770/0x770 [ 578.940501][ T5455] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 578.943248][ T5455] do_filp_open+0x1de/0x430 [ 578.945430][ T5455] ? may_open_dev+0xf0/0xf0 [ 578.947670][ T5455] ? _raw_spin_unlock+0x28/0x40 [ 578.950164][ T5455] ? alloc_fd+0x2da/0x6c0 [ 578.952041][ T5455] do_sys_openat2+0x176/0x1e0 [ 578.953913][ T5455] ? build_open_flags+0x690/0x690 [ 578.955976][ T5455] __ia32_compat_sys_openat+0x16e/0x200 [ 578.958145][ T5455] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 578.960632][ T5455] ? ksys_write+0x1a7/0x250 [ 578.962677][ T5455] __do_fast_syscall_32+0x61/0xe0 [ 578.964917][ T5455] do_fast_syscall_32+0x33/0x70 [ 578.966753][ T5455] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 578.969210][ T5455] RIP: 0023:0xf7f8d579 [ 578.970919][ T5455] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 578.979038][ T5455] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 578.982334][ T5455] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 578.985272][ T5455] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 578.988942][ T5455] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 578.992665][ T5455] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 578.996322][ T5455] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.999991][ T5455] 02:42:26 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 68) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x10}, 0x48) 02:42:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x16000000}, 0x48) 02:42:26 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 69) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x10}, 0x48) 02:42:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x17000000}, 0x48) [ 579.054408][ T5475] FAULT_INJECTION: forcing a failure. 02:42:26 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 579.054408][ T5475] name failslab, interval 1, probability 0, space 0, times 0 [ 579.061369][ T5475] CPU: 0 PID: 5475 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 579.066181][ T5475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 579.070481][ T5475] Call Trace: [ 579.071779][ T5475] [ 579.072910][ T5475] dump_stack_lvl+0x125/0x1b0 02:42:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x18000000}, 0x48) [ 579.074757][ T5475] should_fail_ex+0x496/0x5b0 [ 579.077265][ T5475] should_failslab+0x9/0x20 [ 579.079467][ T5475] __kmem_cache_alloc_node+0x2fd/0x350 [ 579.081879][ T5475] ? kvasprintf_const+0x66/0x190 [ 579.084204][ T5475] ? pointer+0xbf0/0xbf0 [ 579.085788][ T5475] ? kvasprintf_const+0x66/0x190 [ 579.087629][ T5475] __kmalloc_node_track_caller+0x4d/0x100 [ 579.089720][ T5475] kvasprintf+0xbd/0x150 [ 579.091309][ T5475] ? bust_spinlocks+0xe0/0xe0 [ 579.093153][ T5475] ? trace_contention_end+0xd6/0x100 [ 579.095095][ T5475] ? __mutex_lock+0x25b/0x1340 [ 579.096866][ T5475] kvasprintf_const+0x66/0x190 [ 579.098730][ T5475] kobject_set_name_vargs+0x5a/0x130 [ 579.100947][ T5475] dev_set_name+0xc8/0x100 [ 579.102968][ T5475] ? device_initialize+0x540/0x540 [ 579.105285][ T5475] ? __init_waitqueue_head+0xca/0x150 [ 579.107716][ T5475] rfkill_register+0xeb/0xb00 [ 579.109860][ T5475] nfc_register_device+0x11f/0x3c0 [ 579.112198][ T5475] nci_register_device+0x7f4/0xb80 [ 579.114526][ T5475] ? nci_init_complete_req+0x410/0x410 [ 579.117003][ T5475] virtual_ncidev_open+0x147/0x220 [ 579.119329][ T5475] ? virtual_ncidev_read+0x4e0/0x4e0 [ 579.121721][ T5475] misc_open+0x3da/0x4c0 [ 579.123677][ T5475] ? misc_devnode+0x120/0x120 [ 579.125815][ T5475] chrdev_open+0x277/0x700 [ 579.127831][ T5475] ? __unregister_chrdev+0x100/0x100 [ 579.130220][ T5475] ? fsnotify_perm.part.0+0x25d/0x630 [ 579.132704][ T5475] ? fsnotify_perm.part.0+0x268/0x630 [ 579.135233][ T5475] do_dentry_open+0x88b/0x1780 [ 579.137601][ T5475] ? __unregister_chrdev+0x100/0x100 [ 579.139703][ T5475] ? may_open+0x1f2/0x400 [ 579.141300][ T5475] path_openat+0x19af/0x29c0 [ 579.143151][ T5475] ? path_lookupat+0x770/0x770 [ 579.145423][ T5475] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 579.147679][ T5475] do_filp_open+0x1de/0x430 [ 579.149350][ T5475] ? may_open_dev+0xf0/0xf0 [ 579.151037][ T5475] ? _raw_spin_unlock+0x28/0x40 [ 579.152880][ T5475] ? alloc_fd+0x2da/0x6c0 [ 579.154475][ T5475] do_sys_openat2+0x176/0x1e0 [ 579.156259][ T5475] ? build_open_flags+0x690/0x690 [ 579.158110][ T5475] __ia32_compat_sys_openat+0x16e/0x200 [ 579.160131][ T5475] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 579.162125][ T5475] ? ksys_write+0x1a7/0x250 [ 579.163865][ T5475] __do_fast_syscall_32+0x61/0xe0 [ 579.165709][ T5475] do_fast_syscall_32+0x33/0x70 [ 579.167518][ T5475] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 579.169822][ T5475] RIP: 0023:0xf7f9e579 [ 579.171335][ T5475] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 579.178360][ T5475] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 579.181398][ T5475] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 579.184330][ T5475] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 579.187200][ T5475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 579.190095][ T5475] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 579.193034][ T5475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 579.195940][ T5475] [ 579.208725][ T5479] FAULT_INJECTION: forcing a failure. [ 579.208725][ T5479] name failslab, interval 1, probability 0, space 0, times 0 [ 579.214649][ T5479] CPU: 2 PID: 5479 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 579.218554][ T5479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 579.222269][ T5479] Call Trace: [ 579.223509][ T5479] [ 579.224595][ T5479] dump_stack_lvl+0x125/0x1b0 [ 579.226338][ T5479] should_fail_ex+0x496/0x5b0 [ 579.228082][ T5479] should_failslab+0x9/0x20 [ 579.229748][ T5479] kmem_cache_alloc+0x33a/0x3b0 [ 579.231549][ T5479] ? kstrdup+0x5c/0x70 [ 579.233092][ T5479] __kernfs_new_node+0xd3/0x8a0 [ 579.234880][ T5479] ? kernfs_path_from_node+0x60/0x60 [ 579.236832][ T5479] ? __lock_acquire+0x182f/0x5de0 [ 579.238682][ T5479] kernfs_create_dir_ns+0x9a/0x210 [ 579.240559][ T5479] sysfs_create_dir_ns+0x13b/0x2a0 [ 579.242534][ T5479] ? sysfs_create_mount_point+0xb0/0xb0 [ 579.244643][ T5479] ? spin_bug+0x1d0/0x1d0 [ 579.246259][ T5479] ? do_raw_spin_unlock+0x173/0x230 [ 579.248193][ T5479] kobject_add_internal+0x2c8/0x990 [ 579.250137][ T5479] kobject_add+0x16f/0x240 [ 579.251814][ T5479] ? kset_create_and_add+0x190/0x190 [ 579.254276][ T5479] ? do_raw_spin_unlock+0x173/0x230 [ 579.256719][ T5479] ? kobject_put+0xbe/0x5b0 [ 579.258524][ T5479] device_add+0x2b3/0x1b40 [ 579.260182][ T5479] ? device_initialize+0x540/0x540 [ 579.262049][ T5479] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 579.264542][ T5479] ? __init_waitqueue_head+0xca/0x150 [ 579.266504][ T5479] rfkill_register+0x1a9/0xb00 [ 579.268412][ T5479] nfc_register_device+0x11f/0x3c0 [ 579.270301][ T5479] nci_register_device+0x7f4/0xb80 [ 579.272217][ T5479] ? nci_init_complete_req+0x410/0x410 [ 579.274221][ T5479] virtual_ncidev_open+0x147/0x220 [ 579.276021][ T5479] ? virtual_ncidev_read+0x4e0/0x4e0 [ 579.277878][ T5479] misc_open+0x3da/0x4c0 [ 579.279407][ T5479] ? misc_devnode+0x120/0x120 [ 579.281254][ T5479] chrdev_open+0x277/0x700 [ 579.283276][ T5479] ? __unregister_chrdev+0x100/0x100 [ 579.285595][ T5479] ? fsnotify_perm.part.0+0x25d/0x630 [ 579.287958][ T5479] ? fsnotify_perm.part.0+0x268/0x630 [ 579.290324][ T5479] do_dentry_open+0x88b/0x1780 [ 579.292446][ T5479] ? __unregister_chrdev+0x100/0x100 [ 579.294736][ T5479] ? may_open+0x1f2/0x400 [ 579.296614][ T5479] path_openat+0x19af/0x29c0 [ 579.298642][ T5479] ? path_lookupat+0x770/0x770 [ 579.300763][ T5479] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 579.303481][ T5479] do_filp_open+0x1de/0x430 [ 579.305503][ T5479] ? may_open_dev+0xf0/0xf0 [ 579.307519][ T5479] ? _raw_spin_unlock+0x28/0x40 [ 579.309651][ T5479] ? alloc_fd+0x2da/0x6c0 [ 579.311541][ T5479] do_sys_openat2+0x176/0x1e0 [ 579.313334][ T5479] ? build_open_flags+0x690/0x690 [ 579.315192][ T5479] __ia32_compat_sys_openat+0x16e/0x200 [ 579.317221][ T5479] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 579.319222][ T5479] ? ksys_write+0x1a7/0x250 [ 579.320938][ T5479] __do_fast_syscall_32+0x61/0xe0 [ 579.323033][ T5479] do_fast_syscall_32+0x33/0x70 [ 579.325267][ T5479] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 579.328200][ T5479] RIP: 0023:0xf7f8d579 [ 579.330145][ T5479] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 579.339078][ T5479] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 579.342876][ T5479] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 579.346547][ T5479] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 579.350211][ T5479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 579.353927][ T5479] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 579.357625][ T5479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 579.361094][ T5479] 02:42:27 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:27 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 69) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x19000000}, 0x48) [ 579.368908][ T5479] kobject: kobject_add_internal failed for rfkill859 (error: -12 parent: nfc3) [ 579.386560][ T5497] FAULT_INJECTION: forcing a failure. [ 579.386560][ T5497] name failslab, interval 1, probability 0, space 0, times 0 [ 579.391164][ T5497] CPU: 2 PID: 5497 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 579.395297][ T5497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 579.398958][ T5497] Call Trace: 02:42:27 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:27 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 70) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1a000000}, 0x48) [ 579.400191][ T5497] [ 579.401504][ T5497] dump_stack_lvl+0x125/0x1b0 [ 579.403666][ T5497] should_fail_ex+0x496/0x5b0 [ 579.405624][ T5497] should_failslab+0x9/0x20 [ 579.407309][ T5497] kmem_cache_alloc+0x33a/0x3b0 [ 579.409113][ T5497] ? kstrdup+0x5c/0x70 [ 579.410617][ T5497] __kernfs_new_node+0xd3/0x8a0 [ 579.412533][ T5497] ? kernfs_path_from_node+0x60/0x60 [ 579.414481][ T5497] ? __lock_acquire+0x182f/0x5de0 02:42:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1b000000}, 0x48) [ 579.416339][ T5497] kernfs_create_dir_ns+0x9a/0x210 [ 579.418559][ T5497] sysfs_create_dir_ns+0x13b/0x2a0 [ 579.420471][ T5497] ? sysfs_create_mount_point+0xb0/0xb0 [ 579.422705][ T5497] ? spin_bug+0x1d0/0x1d0 [ 579.424765][ T5497] ? do_raw_spin_unlock+0x173/0x230 [ 579.427131][ T5497] kobject_add_internal+0x2c8/0x990 [ 579.429502][ T5497] kobject_add+0x16f/0x240 [ 579.431564][ T5497] ? kset_create_and_add+0x190/0x190 [ 579.433976][ T5497] ? do_raw_spin_unlock+0x173/0x230 [ 579.436330][ T5497] ? kobject_put+0xbe/0x5b0 [ 579.438425][ T5497] device_add+0x2b3/0x1b40 [ 579.440480][ T5497] ? device_initialize+0x540/0x540 [ 579.442827][ T5497] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 579.445892][ T5497] ? __init_waitqueue_head+0xca/0x150 [ 579.448436][ T5497] rfkill_register+0x1a9/0xb00 [ 579.450625][ T5497] nfc_register_device+0x11f/0x3c0 [ 579.453043][ T5497] nci_register_device+0x7f4/0xb80 [ 579.455366][ T5497] ? nci_init_complete_req+0x410/0x410 [ 579.457785][ T5497] virtual_ncidev_open+0x147/0x220 [ 579.460023][ T5497] ? virtual_ncidev_read+0x4e0/0x4e0 [ 579.462369][ T5497] misc_open+0x3da/0x4c0 [ 579.464079][ T5497] ? misc_devnode+0x120/0x120 [ 579.465811][ T5497] chrdev_open+0x277/0x700 [ 579.467508][ T5497] ? __unregister_chrdev+0x100/0x100 [ 579.469446][ T5497] ? fsnotify_perm.part.0+0x25d/0x630 [ 579.471414][ T5497] ? fsnotify_perm.part.0+0x268/0x630 [ 579.473459][ T5497] do_dentry_open+0x88b/0x1780 [ 579.475206][ T5497] ? __unregister_chrdev+0x100/0x100 [ 579.477163][ T5497] ? may_open+0x1f2/0x400 [ 579.478754][ T5497] path_openat+0x19af/0x29c0 [ 579.480474][ T5497] ? path_lookupat+0x770/0x770 [ 579.482252][ T5497] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 579.484501][ T5497] do_filp_open+0x1de/0x430 [ 579.486190][ T5497] ? may_open_dev+0xf0/0xf0 [ 579.487910][ T5497] ? _raw_spin_unlock+0x28/0x40 [ 579.489853][ T5497] ? alloc_fd+0x2da/0x6c0 [ 579.491474][ T5497] do_sys_openat2+0x176/0x1e0 [ 579.493616][ T5497] ? build_open_flags+0x690/0x690 [ 579.495778][ T5497] __ia32_compat_sys_openat+0x16e/0x200 [ 579.497813][ T5497] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 579.499810][ T5497] ? ksys_write+0x1a7/0x250 [ 579.501486][ T5497] __do_fast_syscall_32+0x61/0xe0 [ 579.503777][ T5497] do_fast_syscall_32+0x33/0x70 [ 579.505566][ T5497] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 579.507864][ T5497] RIP: 0023:0xf7f9e579 [ 579.509362][ T5497] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 579.516755][ T5497] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 579.519822][ T5497] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 579.522970][ T5497] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 579.525940][ T5497] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 579.528820][ T5497] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 579.531716][ T5497] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 579.534856][ T5497] [ 579.536609][ T5497] kobject: kobject_add_internal failed for rfkill860 (error: -12 parent: nfc2) [ 579.541130][ T5505] FAULT_INJECTION: forcing a failure. [ 579.541130][ T5505] name failslab, interval 1, probability 0, space 0, times 0 [ 579.546295][ T5505] CPU: 2 PID: 5505 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 579.550048][ T5505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 579.554086][ T5505] Call Trace: [ 579.555315][ T5505] [ 579.556435][ T5505] dump_stack_lvl+0x125/0x1b0 [ 579.558159][ T5505] should_fail_ex+0x496/0x5b0 [ 579.559902][ T5505] should_failslab+0x9/0x20 [ 579.561589][ T5505] kmem_cache_alloc+0x33a/0x3b0 [ 579.563750][ T5505] __kernfs_new_node+0xd3/0x8a0 [ 579.565707][ T5505] ? kernfs_add_one+0x3ca/0x510 [ 579.567508][ T5505] ? kernfs_path_from_node+0x60/0x60 [ 579.569446][ T5505] ? up_write+0x1b3/0x510 [ 579.571031][ T5505] kernfs_new_node+0x94/0x110 [ 579.573080][ T5505] __kernfs_create_file+0x53/0x340 [ 579.575329][ T5505] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 579.577820][ T5505] sysfs_merge_group+0x1b1/0x330 [ 579.580285][ T5505] ? sysfs_update_groups+0x30/0x30 [ 579.582672][ T5505] ? panel_show+0xf0/0xf0 [ 579.584728][ T5505] ? bus_to_subsys+0x129/0x160 [ 579.587051][ T5505] dpm_sysfs_add+0x22f/0x280 [ 579.589265][ T5505] device_add+0x9e5/0x1b40 [ 579.591381][ T5505] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 579.594468][ T5505] ? nci_free_device+0x50/0x50 [ 579.596647][ T5505] ? mark_held_locks+0x9f/0xe0 [ 579.598827][ T5505] ? lockdep_init_map_type+0x16d/0x7c0 [ 579.601442][ T5505] nfc_register_device+0x41/0x3c0 [ 579.603872][ T5505] nci_register_device+0x7f4/0xb80 [ 579.606376][ T5505] ? nci_init_complete_req+0x410/0x410 [ 579.609043][ T5505] virtual_ncidev_open+0x147/0x220 [ 579.611294][ T5505] ? virtual_ncidev_read+0x4e0/0x4e0 [ 579.613684][ T5505] misc_open+0x3da/0x4c0 [ 579.615605][ T5505] ? misc_devnode+0x120/0x120 [ 579.617336][ T5505] chrdev_open+0x277/0x700 [ 579.618999][ T5505] ? __unregister_chrdev+0x100/0x100 [ 579.620944][ T5505] ? fsnotify_perm.part.0+0x25d/0x630 [ 579.622946][ T5505] ? fsnotify_perm.part.0+0x268/0x630 [ 579.624944][ T5505] do_dentry_open+0x88b/0x1780 [ 579.626709][ T5505] ? __unregister_chrdev+0x100/0x100 [ 579.628668][ T5505] ? may_open+0x1f2/0x400 [ 579.630276][ T5505] path_openat+0x19af/0x29c0 [ 579.632057][ T5505] ? path_lookupat+0x770/0x770 [ 579.634133][ T5505] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 579.636379][ T5505] do_filp_open+0x1de/0x430 [ 579.638192][ T5505] ? may_open_dev+0xf0/0xf0 [ 579.639906][ T5505] ? _raw_spin_unlock+0x28/0x40 [ 579.641740][ T5505] ? alloc_fd+0x2da/0x6c0 [ 579.643464][ T5505] do_sys_openat2+0x176/0x1e0 [ 579.645263][ T5505] ? build_open_flags+0x690/0x690 [ 579.647161][ T5505] __ia32_compat_sys_openat+0x16e/0x200 [ 579.649239][ T5505] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 579.651319][ T5505] ? ksys_write+0x1a7/0x250 [ 579.653149][ T5505] __do_fast_syscall_32+0x61/0xe0 [ 579.655048][ T5505] do_fast_syscall_32+0x33/0x70 [ 579.656875][ T5505] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 579.659237][ T5505] RIP: 0023:0xf7f8d579 [ 579.660800][ T5505] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 579.667858][ T5505] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 579.670904][ T5505] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 579.674425][ T5505] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 579.677384][ T5505] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 579.680271][ T5505] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 579.683161][ T5505] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 579.686061][ T5505] 02:42:27 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 70) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1c000000}, 0x48) 02:42:27 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 71) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xf}, 0x48) [ 579.731881][ T5523] FAULT_INJECTION: forcing a failure. 02:42:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1d000000}, 0x48) [ 579.731881][ T5523] name failslab, interval 1, probability 0, space 0, times 0 [ 579.746478][ T5523] CPU: 2 PID: 5523 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 579.750268][ T5523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 579.753964][ T5523] Call Trace: [ 579.755186][ T5523] [ 579.756278][ T5523] dump_stack_lvl+0x125/0x1b0 [ 579.758016][ T5523] should_fail_ex+0x496/0x5b0 [ 579.759749][ T5523] should_failslab+0x9/0x20 [ 579.761423][ T5523] __kmem_cache_alloc_node+0x2fd/0x350 [ 579.763417][ T5523] ? kstrdup_const+0x5f/0x70 [ 579.765127][ T5523] ? kstrdup_const+0x5f/0x70 [ 579.766819][ T5523] __kmalloc_node_track_caller+0x4d/0x100 [ 579.768898][ T5523] kstrdup+0x3c/0x70 02:42:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xf}, 0x48) [ 579.770335][ T5523] kstrdup_const+0x5f/0x70 [ 579.772283][ T5523] __kernfs_new_node+0x9c/0x8a0 [ 579.774068][ T5523] ? kernfs_path_from_node+0x60/0x60 [ 579.776013][ T5523] ? __lock_acquire+0x182f/0x5de0 [ 579.777864][ T5523] kernfs_create_dir_ns+0x9a/0x210 [ 579.779872][ T5523] sysfs_create_dir_ns+0x13b/0x2a0 [ 579.781773][ T5523] ? sysfs_create_mount_point+0xb0/0xb0 [ 579.783834][ T5523] ? spin_bug+0x1d0/0x1d0 [ 579.785436][ T5523] ? do_raw_spin_unlock+0x173/0x230 [ 579.787354][ T5523] kobject_add_internal+0x2c8/0x990 [ 579.789284][ T5523] kobject_add+0x16f/0x240 [ 579.790922][ T5523] ? kset_create_and_add+0x190/0x190 [ 579.793084][ T5523] ? do_raw_spin_unlock+0x173/0x230 [ 579.795078][ T5523] ? kobject_put+0xbe/0x5b0 [ 579.796881][ T5523] device_add+0x2b3/0x1b40 [ 579.798576][ T5523] ? device_initialize+0x540/0x540 [ 579.800588][ T5523] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 579.803329][ T5523] ? __init_waitqueue_head+0xca/0x150 [ 579.805616][ T5523] rfkill_register+0x1a9/0xb00 [ 579.807605][ T5523] nfc_register_device+0x11f/0x3c0 [ 579.809555][ T5523] nci_register_device+0x7f4/0xb80 [ 579.811505][ T5523] ? nci_init_complete_req+0x410/0x410 [ 579.813637][ T5523] virtual_ncidev_open+0x147/0x220 [ 579.815602][ T5523] ? virtual_ncidev_read+0x4e0/0x4e0 [ 579.817626][ T5523] misc_open+0x3da/0x4c0 [ 579.819221][ T5523] ? misc_devnode+0x120/0x120 [ 579.821022][ T5523] chrdev_open+0x277/0x700 [ 579.822831][ T5523] ? __unregister_chrdev+0x100/0x100 [ 579.824774][ T5523] ? fsnotify_perm.part.0+0x25d/0x630 [ 579.827161][ T5523] ? fsnotify_perm.part.0+0x268/0x630 [ 579.829784][ T5523] do_dentry_open+0x88b/0x1780 [ 579.831938][ T5523] ? __unregister_chrdev+0x100/0x100 [ 579.834240][ T5523] ? may_open+0x1f2/0x400 [ 579.836318][ T5523] path_openat+0x19af/0x29c0 [ 579.838487][ T5523] ? path_lookupat+0x770/0x770 [ 579.840705][ T5523] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 579.843355][ T5523] do_filp_open+0x1de/0x430 [ 579.845099][ T5523] ? may_open_dev+0xf0/0xf0 [ 579.847148][ T5523] ? _raw_spin_unlock+0x28/0x40 [ 579.849323][ T5523] ? alloc_fd+0x2da/0x6c0 [ 579.851294][ T5523] do_sys_openat2+0x176/0x1e0 [ 579.853556][ T5523] ? build_open_flags+0x690/0x690 [ 579.855917][ T5523] __ia32_compat_sys_openat+0x16e/0x200 [ 579.858511][ T5523] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 579.860759][ T5523] ? ksys_write+0x1a7/0x250 [ 579.862546][ T5523] __do_fast_syscall_32+0x61/0xe0 [ 579.864487][ T5523] do_fast_syscall_32+0x33/0x70 [ 579.866405][ T5523] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 579.868848][ T5523] RIP: 0023:0xf7f9e579 [ 579.870449][ T5523] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 579.877967][ T5523] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 579.881175][ T5523] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 579.884365][ T5523] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 579.888048][ T5523] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 579.891145][ T5523] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 579.894257][ T5523] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 579.897279][ T5523] [ 579.908212][ T5523] kobject: kobject_add_internal failed for rfkill861 (error: -12 parent: nfc2) [ 579.913553][ T5529] FAULT_INJECTION: forcing a failure. [ 579.913553][ T5529] name failslab, interval 1, probability 0, space 0, times 0 [ 579.919912][ T5529] CPU: 0 PID: 5529 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 579.924711][ T5529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 579.929423][ T5529] Call Trace: [ 579.931012][ T5529] [ 579.932454][ T5529] dump_stack_lvl+0x125/0x1b0 [ 579.934702][ T5529] should_fail_ex+0x496/0x5b0 [ 579.936982][ T5529] should_failslab+0x9/0x20 [ 579.939144][ T5529] kmem_cache_alloc+0x33a/0x3b0 [ 579.941474][ T5529] __kernfs_new_node+0xd3/0x8a0 [ 579.943824][ T5529] ? kernfs_path_from_node+0x60/0x60 [ 579.946129][ T5529] ? lock_acquire+0x1ae/0x510 [ 579.947942][ T5529] ? find_held_lock+0x2d/0x110 [ 579.949967][ T5529] ? sysfs_do_create_link_sd+0x82/0x140 [ 579.952609][ T5529] kernfs_new_node+0x94/0x110 [ 579.954853][ T5529] kernfs_create_link+0xcc/0x230 [ 579.957226][ T5529] sysfs_do_create_link_sd+0x90/0x140 [ 579.959775][ T5529] sysfs_create_link+0x61/0xc0 [ 579.962054][ T5529] device_add+0x549/0x1b40 [ 579.964247][ T5529] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 579.967505][ T5529] ? __init_waitqueue_head+0xca/0x150 [ 579.970084][ T5529] rfkill_register+0x1a9/0xb00 [ 579.972535][ T5529] nfc_register_device+0x11f/0x3c0 02:42:27 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 71) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xf}, 0x48) 02:42:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1e000000}, 0x48) [ 579.975016][ T5529] nci_register_device+0x7f4/0xb80 [ 579.977609][ T5529] ? nci_init_complete_req+0x410/0x410 [ 579.980233][ T5529] virtual_ncidev_open+0x147/0x220 [ 579.982345][ T5529] ? virtual_ncidev_read+0x4e0/0x4e0 [ 579.984396][ T5529] misc_open+0x3da/0x4c0 [ 579.986006][ T5529] ? misc_devnode+0x120/0x120 [ 579.987812][ T5529] chrdev_open+0x277/0x700 [ 579.989581][ T5529] ? __unregister_chrdev+0x100/0x100 [ 579.991580][ T5529] ? fsnotify_perm.part.0+0x25d/0x630 [ 579.993855][ T5529] ? fsnotify_perm.part.0+0x268/0x630 [ 579.996449][ T5529] do_dentry_open+0x88b/0x1780 [ 579.998758][ T5529] ? __unregister_chrdev+0x100/0x100 [ 580.001285][ T5529] ? may_open+0x1f2/0x400 [ 580.003179][ T5529] path_openat+0x19af/0x29c0 [ 580.005432][ T5529] ? path_lookupat+0x770/0x770 [ 580.007815][ T5529] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 580.010675][ T5529] do_filp_open+0x1de/0x430 [ 580.012888][ T5529] ? may_open_dev+0xf0/0xf0 [ 580.015087][ T5529] ? _raw_spin_unlock+0x28/0x40 [ 580.017453][ T5529] ? alloc_fd+0x2da/0x6c0 [ 580.019537][ T5529] do_sys_openat2+0x176/0x1e0 [ 580.021805][ T5529] ? build_open_flags+0x690/0x690 [ 580.024244][ T5529] __ia32_compat_sys_openat+0x16e/0x200 [ 580.026887][ T5529] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 580.029486][ T5529] ? ksys_write+0x1a7/0x250 [ 580.031725][ T5529] __do_fast_syscall_32+0x61/0xe0 [ 580.034132][ T5529] do_fast_syscall_32+0x33/0x70 [ 580.036496][ T5529] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 580.039630][ T5529] RIP: 0023:0xf7f8d579 [ 580.041605][ T5529] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 580.050712][ T5529] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 580.054488][ T5529] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 580.057697][ T5529] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 580.061086][ T5529] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 580.064472][ T5529] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 580.067465][ T5529] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 580.071189][ T5529] [ 580.091642][ T5546] FAULT_INJECTION: forcing a failure. [ 580.091642][ T5546] name failslab, interval 1, probability 0, space 0, times 0 02:42:27 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 72) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:27 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x1f000000}, 0x48) [ 580.107986][ T5546] CPU: 2 PID: 5546 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 580.112117][ T5546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 580.116200][ T5546] Call Trace: [ 580.117556][ T5546] 02:42:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x20000000}, 0x48) [ 580.118738][ T5546] dump_stack_lvl+0x125/0x1b0 [ 580.120816][ T5546] should_fail_ex+0x496/0x5b0 02:42:27 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 580.122616][ T5546] should_failslab+0x9/0x20 [ 580.124555][ T5546] __kmem_cache_alloc_node+0x2fd/0x350 [ 580.126693][ T5546] ? kstrdup_const+0x5f/0x70 [ 580.128474][ T5546] ? kstrdup_const+0x5f/0x70 [ 580.130212][ T5546] __kmalloc_node_track_caller+0x4d/0x100 [ 580.132446][ T5546] kstrdup+0x3c/0x70 [ 580.133921][ T5546] kstrdup_const+0x5f/0x70 [ 580.135637][ T5546] __kernfs_new_node+0x9c/0x8a0 [ 580.137478][ T5546] ? kernfs_path_from_node+0x60/0x60 [ 580.139511][ T5546] ? __lock_acquire+0x182f/0x5de0 [ 580.141488][ T5546] kernfs_create_dir_ns+0x9a/0x210 [ 580.143401][ T5546] sysfs_create_dir_ns+0x13b/0x2a0 [ 580.145354][ T5546] ? sysfs_create_mount_point+0xb0/0xb0 [ 580.147462][ T5546] ? spin_bug+0x1d0/0x1d0 [ 580.149238][ T5546] ? do_raw_spin_unlock+0x173/0x230 [ 580.151604][ T5546] kobject_add_internal+0x2c8/0x990 [ 580.153960][ T5546] kobject_add+0x16f/0x240 [ 580.156035][ T5546] ? kset_create_and_add+0x190/0x190 [ 580.158230][ T5546] ? do_raw_spin_unlock+0x173/0x230 [ 580.160212][ T5546] ? kobject_put+0xbe/0x5b0 [ 580.162027][ T5546] device_add+0x2b3/0x1b40 [ 580.163607][ T5546] ? device_initialize+0x540/0x540 [ 580.165474][ T5546] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 580.167966][ T5546] ? __init_waitqueue_head+0xca/0x150 [ 580.169953][ T5546] rfkill_register+0x1a9/0xb00 [ 580.171836][ T5546] nfc_register_device+0x11f/0x3c0 [ 580.173745][ T5546] nci_register_device+0x7f4/0xb80 [ 580.175653][ T5546] ? nci_init_complete_req+0x410/0x410 [ 580.177670][ T5546] virtual_ncidev_open+0x147/0x220 [ 580.179709][ T5546] ? virtual_ncidev_read+0x4e0/0x4e0 [ 580.182066][ T5546] misc_open+0x3da/0x4c0 [ 580.183976][ T5546] ? misc_devnode+0x120/0x120 [ 580.186064][ T5546] chrdev_open+0x277/0x700 [ 580.188064][ T5546] ? __unregister_chrdev+0x100/0x100 [ 580.190420][ T5546] ? fsnotify_perm.part.0+0x25d/0x630 [ 580.192833][ T5546] ? fsnotify_perm.part.0+0x268/0x630 [ 580.195227][ T5546] do_dentry_open+0x88b/0x1780 [ 580.197363][ T5546] ? __unregister_chrdev+0x100/0x100 [ 580.199711][ T5546] ? may_open+0x1f2/0x400 [ 580.201542][ T5546] path_openat+0x19af/0x29c0 [ 580.203420][ T5546] ? path_lookupat+0x770/0x770 [ 580.205558][ T5546] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 580.208225][ T5546] do_filp_open+0x1de/0x430 [ 580.210242][ T5546] ? may_open_dev+0xf0/0xf0 [ 580.212306][ T5546] ? _raw_spin_unlock+0x28/0x40 [ 580.214476][ T5546] ? alloc_fd+0x2da/0x6c0 [ 580.216371][ T5546] do_sys_openat2+0x176/0x1e0 [ 580.218067][ T5546] ? build_open_flags+0x690/0x690 [ 580.219917][ T5546] __ia32_compat_sys_openat+0x16e/0x200 [ 580.221939][ T5546] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 580.223947][ T5546] ? ksys_write+0x1a7/0x250 [ 580.225626][ T5546] __do_fast_syscall_32+0x61/0xe0 [ 580.227481][ T5546] do_fast_syscall_32+0x33/0x70 [ 580.229277][ T5546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 580.231634][ T5546] RIP: 0023:0xf7f9e579 [ 580.232999][ T5546] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 580.239997][ T5546] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 580.243036][ T5546] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 580.245925][ T5546] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 580.248820][ T5546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 580.252325][ T5546] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 580.255838][ T5546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 580.259347][ T5546] [ 580.266607][ T5546] kobject: kobject_add_internal failed for rfkill863 (error: -12 parent: nfc2) [ 580.289355][ T5553] FAULT_INJECTION: forcing a failure. 02:42:28 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 72) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x21000000}, 0x48) 02:42:28 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 580.289355][ T5553] name failslab, interval 1, probability 0, space 0, times 0 [ 580.294958][ T5553] CPU: 2 PID: 5553 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 580.299422][ T5553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 580.303843][ T5553] Call Trace: [ 580.305287][ T5553] [ 580.306591][ T5553] dump_stack_lvl+0x125/0x1b0 [ 580.308643][ T5553] should_fail_ex+0x496/0x5b0 [ 580.310674][ T5553] should_failslab+0x9/0x20 [ 580.312699][ T5553] kmem_cache_alloc+0x33a/0x3b0 [ 580.314855][ T5553] ? reacquire_held_locks+0x4b0/0x4b0 [ 580.317260][ T5553] __kernfs_new_node+0xd3/0x8a0 [ 580.319449][ T5553] ? kernfs_path_from_node+0x60/0x60 [ 580.321747][ T5553] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 580.324299][ T5553] ? kernfs_create_dir_ns+0x195/0x210 [ 580.326599][ T5553] kernfs_new_node+0x94/0x110 [ 580.328687][ T5553] __kernfs_create_file+0x53/0x340 [ 580.330918][ T5553] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 580.333327][ T5553] sysfs_create_file_ns+0x13e/0x1d0 [ 580.335660][ T5553] ? sysfs_add_file_mode_ns+0x3b0/0x3b0 [ 580.338126][ T5553] ? down_read+0x13e/0x470 [ 580.340152][ T5553] ? _down_write_nest_lock+0x200/0x200 [ 580.342154][ T5553] ? kobject_put+0xbe/0x5b0 [ 580.344086][ T5553] device_create_file+0xee/0x1d0 [ 580.346264][ T5553] device_add+0x305/0x1b40 [ 580.348230][ T5553] ? device_initialize+0x540/0x540 [ 580.350515][ T5553] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 580.353550][ T5553] ? __init_waitqueue_head+0xca/0x150 [ 580.355940][ T5553] rfkill_register+0x1a9/0xb00 [ 580.358095][ T5553] nfc_register_device+0x11f/0x3c0 [ 580.360387][ T5553] nci_register_device+0x7f4/0xb80 [ 580.362680][ T5553] ? nci_init_complete_req+0x410/0x410 [ 580.365157][ T5553] virtual_ncidev_open+0x147/0x220 [ 580.367457][ T5553] ? virtual_ncidev_read+0x4e0/0x4e0 [ 580.369796][ T5553] misc_open+0x3da/0x4c0 [ 580.371700][ T5553] ? misc_devnode+0x120/0x120 [ 580.373808][ T5553] chrdev_open+0x277/0x700 [ 580.375817][ T5553] ? __unregister_chrdev+0x100/0x100 [ 580.378159][ T5553] ? fsnotify_perm.part.0+0x25d/0x630 [ 580.380557][ T5553] ? fsnotify_perm.part.0+0x268/0x630 [ 580.382962][ T5553] do_dentry_open+0x88b/0x1780 [ 580.385135][ T5553] ? __unregister_chrdev+0x100/0x100 [ 580.387520][ T5553] ? may_open+0x1f2/0x400 [ 580.389436][ T5553] path_openat+0x19af/0x29c0 [ 580.391524][ T5553] ? path_lookupat+0x770/0x770 [ 580.393677][ T5553] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 580.396361][ T5553] do_filp_open+0x1de/0x430 [ 580.398386][ T5553] ? may_open_dev+0xf0/0xf0 [ 580.400442][ T5553] ? _raw_spin_unlock+0x28/0x40 [ 580.402616][ T5553] ? alloc_fd+0x2da/0x6c0 [ 580.404561][ T5553] do_sys_openat2+0x176/0x1e0 [ 580.406664][ T5553] ? build_open_flags+0x690/0x690 [ 580.408920][ T5553] __ia32_compat_sys_openat+0x16e/0x200 [ 580.411399][ T5553] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 580.413851][ T5553] ? ksys_write+0x1a7/0x250 [ 580.415905][ T5553] __do_fast_syscall_32+0x61/0xe0 [ 580.418139][ T5553] do_fast_syscall_32+0x33/0x70 [ 580.420333][ T5553] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 580.423136][ T5553] RIP: 0023:0xf7f8d579 [ 580.424961][ T5553] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 580.433495][ T5553] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 580.437207][ T5553] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 580.440708][ T5553] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 580.444254][ T5553] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 580.447756][ T5553] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 580.451269][ T5553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 580.454806][ T5553] [ 580.464692][ T5569] FAULT_INJECTION: forcing a failure. [ 580.464692][ T5569] name failslab, interval 1, probability 0, space 0, times 0 [ 580.475805][ T5569] CPU: 0 PID: 5569 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 580.480546][ T5569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 580.485171][ T5569] Call Trace: [ 580.486724][ T5569] [ 580.488121][ T5569] dump_stack_lvl+0x125/0x1b0 [ 580.490341][ T5569] should_fail_ex+0x496/0x5b0 [ 580.492624][ T5569] should_failslab+0x9/0x20 [ 580.494771][ T5569] kmem_cache_alloc+0x33a/0x3b0 [ 580.497104][ T5569] __kernfs_new_node+0xd3/0x8a0 [ 580.499441][ T5569] ? kernfs_add_one+0x3ca/0x510 [ 580.501741][ T5569] ? kernfs_path_from_node+0x60/0x60 [ 580.504246][ T5569] ? lock_acquire+0x1ae/0x510 [ 580.506482][ T5569] ? find_held_lock+0x2d/0x110 [ 580.508601][ T5569] ? sysfs_do_create_link_sd+0x82/0x140 [ 580.510637][ T5569] kernfs_new_node+0x94/0x110 [ 580.512395][ T5569] kernfs_create_link+0xcc/0x230 [ 580.514208][ T5569] sysfs_do_create_link_sd+0x90/0x140 [ 580.516188][ T5569] sysfs_create_link+0x61/0xc0 [ 580.517955][ T5569] device_add+0x5d0/0x1b40 [ 580.519610][ T5569] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 580.522098][ T5569] ? __init_waitqueue_head+0xca/0x150 [ 580.524085][ T5569] rfkill_register+0x1a9/0xb00 [ 580.525844][ T5569] nfc_register_device+0x11f/0x3c0 [ 580.527852][ T5569] nci_register_device+0x7f4/0xb80 [ 580.529729][ T5569] ? nci_init_complete_req+0x410/0x410 [ 580.531759][ T5569] virtual_ncidev_open+0x147/0x220 [ 580.533638][ T5569] ? virtual_ncidev_read+0x4e0/0x4e0 [ 580.535567][ T5569] misc_open+0x3da/0x4c0 [ 580.537143][ T5569] ? misc_devnode+0x120/0x120 [ 580.538891][ T5569] chrdev_open+0x277/0x700 [ 580.540557][ T5569] ? __unregister_chrdev+0x100/0x100 [ 580.542496][ T5569] ? fsnotify_perm.part.0+0x25d/0x630 [ 580.544471][ T5569] ? fsnotify_perm.part.0+0x268/0x630 [ 580.546431][ T5569] do_dentry_open+0x88b/0x1780 [ 580.548208][ T5569] ? __unregister_chrdev+0x100/0x100 [ 580.550142][ T5569] ? may_open+0x1f2/0x400 [ 580.551765][ T5569] path_openat+0x19af/0x29c0 [ 580.553492][ T5569] ? path_lookupat+0x770/0x770 [ 580.555261][ T5569] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 580.557474][ T5569] do_filp_open+0x1de/0x430 [ 580.559139][ T5569] ? may_open_dev+0xf0/0xf0 [ 580.560827][ T5569] ? _raw_spin_unlock+0x28/0x40 [ 580.562848][ T5569] ? alloc_fd+0x2da/0x6c0 [ 580.564807][ T5569] do_sys_openat2+0x176/0x1e0 [ 580.566772][ T5569] ? build_open_flags+0x690/0x690 [ 580.568643][ T5569] __ia32_compat_sys_openat+0x16e/0x200 [ 580.570693][ T5569] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 580.572739][ T5569] ? ksys_write+0x1a7/0x250 [ 580.574423][ T5569] __do_fast_syscall_32+0x61/0xe0 [ 580.576287][ T5569] do_fast_syscall_32+0x33/0x70 [ 580.578085][ T5569] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 580.580419][ T5569] RIP: 0023:0xf7f9e579 [ 580.581912][ T5569] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 580.588976][ T5569] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 580.592057][ T5569] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 580.594951][ T5569] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 580.597866][ T5569] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 580.600778][ T5569] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 580.603692][ T5569] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 580.606590][ T5569] 02:42:28 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 73) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x22000000}, 0x48) 02:42:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) [ 580.625732][ T5581] FAULT_INJECTION: forcing a failure. [ 580.625732][ T5581] name failslab, interval 1, probability 0, space 0, times 0 [ 580.630908][ T5581] CPU: 0 PID: 5581 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 02:42:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x23000000}, 0x48) [ 580.634678][ T5581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 580.638546][ T5581] Call Trace: [ 580.639748][ T5581] [ 580.640848][ T5581] dump_stack_lvl+0x125/0x1b0 [ 580.642583][ T5581] should_fail_ex+0x496/0x5b0 [ 580.644348][ T5581] should_failslab+0x9/0x20 [ 580.646039][ T5581] __kmem_cache_alloc_node+0x2fd/0x350 [ 580.648048][ T5581] ? kstrdup_const+0x5f/0x70 [ 580.649749][ T5581] ? kstrdup_const+0x5f/0x70 [ 580.651481][ T5581] __kmalloc_node_track_caller+0x4d/0x100 [ 580.653562][ T5581] kstrdup+0x3c/0x70 [ 580.654998][ T5581] kstrdup_const+0x5f/0x70 [ 580.656652][ T5581] __kernfs_new_node+0x9c/0x8a0 [ 580.658456][ T5581] ? kernfs_add_one+0x3ca/0x510 02:42:28 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 73) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13}, 0x48) [ 580.660440][ T5581] ? kernfs_path_from_node+0x60/0x60 [ 580.663071][ T5581] ? lock_acquire+0x1ae/0x510 [ 580.664815][ T5581] ? find_held_lock+0x2d/0x110 [ 580.666579][ T5581] ? sysfs_do_create_link_sd+0x82/0x140 [ 580.668697][ T5581] kernfs_new_node+0x94/0x110 02:42:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) [ 580.670433][ T5581] kernfs_create_link+0xcc/0x230 [ 580.672444][ T5581] sysfs_do_create_link_sd+0x90/0x140 [ 580.674421][ T5581] sysfs_create_link+0x61/0xc0 [ 580.676202][ T5581] device_add+0x66b/0x1b40 [ 580.677861][ T5581] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 580.680385][ T5581] ? __init_waitqueue_head+0xca/0x150 [ 580.682337][ T5581] rfkill_register+0x1a9/0xb00 [ 580.684106][ T5581] nfc_register_device+0x11f/0x3c0 [ 580.685987][ T5581] nci_register_device+0x7f4/0xb80 [ 580.687885][ T5581] ? nci_init_complete_req+0x410/0x410 [ 580.689868][ T5581] virtual_ncidev_open+0x147/0x220 [ 580.691790][ T5581] ? virtual_ncidev_read+0x4e0/0x4e0 [ 580.693729][ T5581] misc_open+0x3da/0x4c0 [ 580.695302][ T5581] ? misc_devnode+0x120/0x120 [ 580.697030][ T5581] chrdev_open+0x277/0x700 [ 580.698932][ T5581] ? __unregister_chrdev+0x100/0x100 [ 580.701208][ T5581] ? fsnotify_perm.part.0+0x25d/0x630 [ 580.703174][ T5581] ? fsnotify_perm.part.0+0x268/0x630 [ 580.705177][ T5581] do_dentry_open+0x88b/0x1780 [ 580.706939][ T5581] ? __unregister_chrdev+0x100/0x100 [ 580.708886][ T5581] ? may_open+0x1f2/0x400 [ 580.710483][ T5581] path_openat+0x19af/0x29c0 [ 580.712215][ T5581] ? path_lookupat+0x770/0x770 [ 580.713968][ T5581] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 580.716149][ T5581] do_filp_open+0x1de/0x430 [ 580.718048][ T5581] ? may_open_dev+0xf0/0xf0 [ 580.720124][ T5581] ? _raw_spin_unlock+0x28/0x40 [ 580.722115][ T5581] ? alloc_fd+0x2da/0x6c0 [ 580.723747][ T5581] do_sys_openat2+0x176/0x1e0 [ 580.725499][ T5581] ? build_open_flags+0x690/0x690 [ 580.727375][ T5581] __ia32_compat_sys_openat+0x16e/0x200 [ 580.729432][ T5581] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 580.731460][ T5581] ? ksys_write+0x1a7/0x250 [ 580.733718][ T5581] __do_fast_syscall_32+0x61/0xe0 [ 580.735976][ T5581] do_fast_syscall_32+0x33/0x70 [ 580.737863][ T5581] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 580.740196][ T5581] RIP: 0023:0xf7f8d579 [ 580.741714][ T5581] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 580.748715][ T5581] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 580.751764][ T5581] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 580.754648][ T5581] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 580.757552][ T5581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 580.760475][ T5581] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 580.763382][ T5581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 580.766277][ T5581] [ 580.770563][ T5592] FAULT_INJECTION: forcing a failure. [ 580.770563][ T5592] name failslab, interval 1, probability 0, space 0, times 0 [ 580.775315][ T5592] CPU: 3 PID: 5592 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 580.779146][ T5592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 580.782870][ T5592] Call Trace: [ 580.784132][ T5592] 02:42:28 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 74) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x2}, 0x48) 02:42:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe}, 0x48) [ 580.785239][ T5592] dump_stack_lvl+0x125/0x1b0 [ 580.787136][ T5592] should_fail_ex+0x496/0x5b0 [ 580.788899][ T5592] should_failslab+0x9/0x20 [ 580.790599][ T5592] __kmem_cache_alloc_node+0x2fd/0x350 [ 580.792892][ T5592] ? kstrdup_const+0x5f/0x70 [ 580.794619][ T5592] ? kstrdup_const+0x5f/0x70 [ 580.796384][ T5592] __kmalloc_node_track_caller+0x4d/0x100 [ 580.798525][ T5592] kstrdup+0x3c/0x70 [ 580.800001][ T5592] kstrdup_const+0x5f/0x70 [ 580.801673][ T5592] __kernfs_new_node+0x9c/0x8a0 [ 580.803669][ T5592] ? kernfs_add_one+0x3ca/0x510 [ 580.805570][ T5592] ? kernfs_path_from_node+0x60/0x60 [ 580.807593][ T5592] ? lock_acquire+0x1ae/0x510 [ 580.809407][ T5592] ? find_held_lock+0x2d/0x110 [ 580.811252][ T5592] ? sysfs_do_create_link_sd+0x82/0x140 [ 580.813605][ T5592] kernfs_new_node+0x94/0x110 [ 580.815409][ T5592] kernfs_create_link+0xcc/0x230 [ 580.817349][ T5592] sysfs_do_create_link_sd+0x90/0x140 [ 580.819378][ T5592] sysfs_create_link+0x61/0xc0 [ 580.821186][ T5592] device_add+0x66b/0x1b40 [ 580.822926][ T5592] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 580.825508][ T5592] ? __init_waitqueue_head+0xca/0x150 [ 580.827587][ T5592] rfkill_register+0x1a9/0xb00 [ 580.829605][ T5592] nfc_register_device+0x11f/0x3c0 [ 580.831582][ T5592] nci_register_device+0x7f4/0xb80 [ 580.833524][ T5592] ? nci_init_complete_req+0x410/0x410 [ 580.835601][ T5592] virtual_ncidev_open+0x147/0x220 [ 580.837542][ T5592] ? virtual_ncidev_read+0x4e0/0x4e0 [ 580.839521][ T5592] misc_open+0x3da/0x4c0 [ 580.841140][ T5592] ? misc_devnode+0x120/0x120 [ 580.843117][ T5592] chrdev_open+0x277/0x700 [ 580.844810][ T5592] ? __unregister_chrdev+0x100/0x100 [ 580.846852][ T5592] ? fsnotify_perm.part.0+0x25d/0x630 [ 580.849278][ T5592] ? fsnotify_perm.part.0+0x268/0x630 [ 580.851700][ T5592] do_dentry_open+0x88b/0x1780 [ 580.853682][ T5592] ? __unregister_chrdev+0x100/0x100 [ 580.855971][ T5592] ? may_open+0x1f2/0x400 [ 580.857582][ T5592] path_openat+0x19af/0x29c0 [ 580.859328][ T5592] ? path_lookupat+0x770/0x770 [ 580.861149][ T5592] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 580.863496][ T5592] do_filp_open+0x1de/0x430 [ 580.865200][ T5592] ? may_open_dev+0xf0/0xf0 [ 580.866933][ T5592] ? _raw_spin_unlock+0x28/0x40 [ 580.868781][ T5592] ? alloc_fd+0x2da/0x6c0 [ 580.870431][ T5592] do_sys_openat2+0x176/0x1e0 [ 580.872432][ T5592] ? build_open_flags+0x690/0x690 [ 580.874854][ T5592] __ia32_compat_sys_openat+0x16e/0x200 [ 580.877200][ T5592] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 580.879170][ T5592] ? ksys_write+0x1a7/0x250 [ 580.880835][ T5592] __do_fast_syscall_32+0x61/0xe0 [ 580.882931][ T5592] do_fast_syscall_32+0x33/0x70 [ 580.885272][ T5592] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 580.888152][ T5592] RIP: 0023:0xf7f9e579 [ 580.890029][ T5592] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 580.898829][ T5592] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 580.902701][ T5592] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 580.906430][ T5592] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 580.909899][ T5592] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 580.913368][ T5592] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 580.916886][ T5592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 580.920541][ T5592] 02:42:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xd}, 0x48) 02:42:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x3}, 0x48) 02:42:28 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 74) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xd}, 0x48) 02:42:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x4}, 0x48) [ 580.940548][ T5606] FAULT_INJECTION: forcing a failure. [ 580.940548][ T5606] name failslab, interval 1, probability 0, space 0, times 0 [ 580.948184][ T5606] CPU: 0 PID: 5606 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 580.953066][ T5606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 580.957753][ T5606] Call Trace: [ 580.959346][ T5606] [ 580.960775][ T5606] dump_stack_lvl+0x125/0x1b0 [ 580.963048][ T5606] should_fail_ex+0x496/0x5b0 [ 580.965331][ T5606] should_failslab+0x9/0x20 [ 580.967557][ T5606] kmem_cache_alloc+0x33a/0x3b0 [ 580.969911][ T5606] __kernfs_new_node+0xd3/0x8a0 [ 580.972284][ T5606] ? kernfs_path_from_node+0x60/0x60 [ 580.974806][ T5606] ? lock_acquire+0x1ae/0x510 [ 580.976993][ T5606] ? find_held_lock+0x2d/0x110 [ 580.979309][ T5606] ? sysfs_do_create_link_sd+0x82/0x140 [ 580.982000][ T5606] kernfs_new_node+0x94/0x110 [ 580.984289][ T5606] kernfs_create_link+0xcc/0x230 [ 580.986670][ T5606] sysfs_do_create_link_sd+0x90/0x140 [ 580.989251][ T5606] sysfs_create_link+0x61/0xc0 [ 580.991574][ T5606] device_add+0x549/0x1b40 [ 580.993758][ T5606] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 580.997027][ T5606] ? __init_waitqueue_head+0xca/0x150 [ 580.999599][ T5606] rfkill_register+0x1a9/0xb00 [ 581.001901][ T5606] nfc_register_device+0x11f/0x3c0 [ 581.004325][ T5606] nci_register_device+0x7f4/0xb80 [ 581.006291][ T5606] ? nci_init_complete_req+0x410/0x410 [ 581.008897][ T5606] virtual_ncidev_open+0x147/0x220 [ 581.010997][ T5606] ? virtual_ncidev_read+0x4e0/0x4e0 [ 581.013103][ T5606] misc_open+0x3da/0x4c0 [ 581.014729][ T5606] ? misc_devnode+0x120/0x120 [ 581.016604][ T5606] chrdev_open+0x277/0x700 [ 581.018337][ T5606] ? __unregister_chrdev+0x100/0x100 [ 581.020360][ T5606] ? fsnotify_perm.part.0+0x25d/0x630 [ 581.022420][ T5606] ? fsnotify_perm.part.0+0x268/0x630 [ 581.024467][ T5606] do_dentry_open+0x88b/0x1780 [ 581.026340][ T5606] ? __unregister_chrdev+0x100/0x100 [ 581.028376][ T5606] ? may_open+0x1f2/0x400 [ 581.030011][ T5606] path_openat+0x19af/0x29c0 [ 581.031836][ T5606] ? path_lookupat+0x770/0x770 [ 581.033671][ T5606] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 581.035980][ T5606] do_filp_open+0x1de/0x430 [ 581.037721][ T5606] ? may_open_dev+0xf0/0xf0 [ 581.039494][ T5606] ? _raw_spin_unlock+0x28/0x40 [ 581.041364][ T5606] ? alloc_fd+0x2da/0x6c0 [ 581.043029][ T5606] do_sys_openat2+0x176/0x1e0 [ 581.044832][ T5606] ? build_open_flags+0x690/0x690 [ 581.046766][ T5606] __ia32_compat_sys_openat+0x16e/0x200 [ 581.048882][ T5606] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 581.050922][ T5606] ? ksys_write+0x1a7/0x250 [ 581.052728][ T5606] __do_fast_syscall_32+0x61/0xe0 [ 581.054632][ T5606] do_fast_syscall_32+0x33/0x70 [ 581.056516][ T5606] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 581.058910][ T5606] RIP: 0023:0xf7f8d579 [ 581.060515][ T5606] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 581.067769][ T5606] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 581.070868][ T5606] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 581.073873][ T5606] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 581.076802][ T5606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 581.079814][ T5606] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 581.082787][ T5606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 581.085783][ T5606] [ 581.091304][ T5617] FAULT_INJECTION: forcing a failure. [ 581.091304][ T5617] name failslab, interval 1, probability 0, space 0, times 0 [ 581.096623][ T5617] CPU: 0 PID: 5617 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 581.101396][ T5617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 581.105758][ T5617] Call Trace: [ 581.107273][ T5617] [ 581.108452][ T5617] dump_stack_lvl+0x125/0x1b0 [ 581.110431][ T5617] should_fail_ex+0x496/0x5b0 [ 581.112436][ T5617] should_failslab+0x9/0x20 [ 581.114341][ T5617] kmem_cache_alloc+0x33a/0x3b0 [ 581.116398][ T5617] ? kstrdup+0x5c/0x70 [ 581.118119][ T5617] __kernfs_new_node+0xd3/0x8a0 [ 581.120156][ T5617] ? kernfs_add_one+0x3ca/0x510 [ 581.122195][ T5617] ? kernfs_path_from_node+0x60/0x60 [ 581.124405][ T5617] ? lock_acquire+0x1ae/0x510 [ 581.126377][ T5617] ? find_held_lock+0x2d/0x110 [ 581.128388][ T5617] ? sysfs_do_create_link_sd+0x82/0x140 [ 581.130673][ T5617] kernfs_new_node+0x94/0x110 [ 581.132674][ T5617] kernfs_create_link+0xcc/0x230 [ 581.134727][ T5617] sysfs_do_create_link_sd+0x90/0x140 [ 581.136978][ T5617] sysfs_create_link+0x61/0xc0 [ 581.138967][ T5617] device_add+0x66b/0x1b40 [ 581.140821][ T5617] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 581.143652][ T5617] ? __init_waitqueue_head+0xca/0x150 [ 581.145861][ T5617] rfkill_register+0x1a9/0xb00 [ 581.147887][ T5617] nfc_register_device+0x11f/0x3c0 [ 581.150006][ T5617] nci_register_device+0x7f4/0xb80 [ 581.152163][ T5617] ? nci_init_complete_req+0x410/0x410 [ 581.154423][ T5617] virtual_ncidev_open+0x147/0x220 [ 581.156554][ T5617] ? virtual_ncidev_read+0x4e0/0x4e0 [ 581.158728][ T5617] misc_open+0x3da/0x4c0 [ 581.160485][ T5617] ? misc_devnode+0x120/0x120 [ 581.162427][ T5617] chrdev_open+0x277/0x700 [ 581.164289][ T5617] ? __unregister_chrdev+0x100/0x100 [ 581.166479][ T5617] ? fsnotify_perm.part.0+0x25d/0x630 [ 581.168693][ T5617] ? fsnotify_perm.part.0+0x268/0x630 [ 581.170910][ T5617] do_dentry_open+0x88b/0x1780 [ 581.172924][ T5617] ? __unregister_chrdev+0x100/0x100 [ 581.175112][ T5617] ? may_open+0x1f2/0x400 [ 581.176916][ T5617] path_openat+0x19af/0x29c0 [ 581.178825][ T5617] ? path_lookupat+0x770/0x770 [ 581.180821][ T5617] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 581.183310][ T5617] do_filp_open+0x1de/0x430 [ 581.185228][ T5617] ? may_open_dev+0xf0/0xf0 [ 581.187163][ T5617] ? _raw_spin_unlock+0x28/0x40 [ 581.189208][ T5617] ? alloc_fd+0x2da/0x6c0 [ 581.191014][ T5617] do_sys_openat2+0x176/0x1e0 [ 581.193021][ T5617] ? build_open_flags+0x690/0x690 [ 581.195137][ T5617] __ia32_compat_sys_openat+0x16e/0x200 [ 581.197443][ T5617] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 581.199726][ T5617] ? ksys_write+0x1a7/0x250 [ 581.201616][ T5617] __do_fast_syscall_32+0x61/0xe0 [ 581.203746][ T5617] do_fast_syscall_32+0x33/0x70 [ 581.205761][ T5617] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 581.208383][ T5617] RIP: 0023:0xf7f9e579 [ 581.210077][ T5617] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 581.217361][ T5617] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 581.220776][ T5617] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 581.224034][ T5617] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 581.227261][ T5617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 581.230498][ T5617] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 581.233765][ T5617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 581.237017][ T5617] 02:42:29 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 75) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xd}, 0x48) 02:42:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x5}, 0x48) 02:42:29 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x6}, 0x48) 02:42:29 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 75) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:29 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:29 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 581.312842][ T5630] FAULT_INJECTION: forcing a failure. [ 581.312842][ T5630] name failslab, interval 1, probability 0, space 0, times 0 [ 581.319310][ T5630] CPU: 2 PID: 5630 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 581.322905][ T5630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 581.326454][ T5630] Call Trace: [ 581.327956][ T5630] [ 581.329267][ T5630] dump_stack_lvl+0x125/0x1b0 [ 581.330984][ T5630] should_fail_ex+0x496/0x5b0 [ 581.332686][ T5630] should_failslab+0x9/0x20 [ 581.334297][ T5630] __kmem_cache_alloc_node+0x2fd/0x350 [ 581.336237][ T5630] ? kstrdup_const+0x5f/0x70 [ 581.337857][ T5630] ? kstrdup_const+0x5f/0x70 [ 581.339515][ T5630] __kmalloc_node_track_caller+0x4d/0x100 [ 581.341497][ T5630] kstrdup+0x3c/0x70 [ 581.342903][ T5630] kstrdup_const+0x5f/0x70 [ 581.344431][ T5630] __kernfs_new_node+0x9c/0x8a0 [ 581.346136][ T5630] ? kernfs_add_one+0x3ca/0x510 [ 581.348116][ T5630] ? kernfs_path_from_node+0x60/0x60 [ 581.350137][ T5630] ? lock_acquire+0x1ae/0x510 [ 581.351980][ T5630] ? find_held_lock+0x2d/0x110 [ 581.353820][ T5630] ? sysfs_do_create_link_sd+0x82/0x140 [ 581.355944][ T5630] kernfs_new_node+0x94/0x110 [ 581.357757][ T5630] kernfs_create_link+0xcc/0x230 [ 581.359661][ T5630] sysfs_do_create_link_sd+0x90/0x140 [ 581.361709][ T5630] sysfs_create_link+0x61/0xc0 [ 581.363549][ T5630] device_add+0x66b/0x1b40 [ 581.365256][ T5630] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 581.367855][ T5630] ? __init_waitqueue_head+0xca/0x150 [ 581.369905][ T5630] rfkill_register+0x1a9/0xb00 [ 581.371776][ T5630] nfc_register_device+0x11f/0x3c0 [ 581.373737][ T5630] nci_register_device+0x7f4/0xb80 [ 581.375706][ T5630] ? nci_init_complete_req+0x410/0x410 [ 581.377803][ T5630] virtual_ncidev_open+0x147/0x220 [ 581.379798][ T5630] ? virtual_ncidev_read+0x4e0/0x4e0 [ 581.381789][ T5630] misc_open+0x3da/0x4c0 [ 581.383378][ T5630] ? misc_devnode+0x120/0x120 [ 581.385195][ T5630] chrdev_open+0x277/0x700 [ 581.386934][ T5630] ? __unregister_chrdev+0x100/0x100 [ 581.388969][ T5630] ? fsnotify_perm.part.0+0x25d/0x630 [ 581.391017][ T5630] ? fsnotify_perm.part.0+0x268/0x630 [ 581.393109][ T5630] do_dentry_open+0x88b/0x1780 [ 581.394972][ T5630] ? __unregister_chrdev+0x100/0x100 [ 581.397027][ T5630] ? may_open+0x1f2/0x400 [ 581.398693][ T5630] path_openat+0x19af/0x29c0 [ 581.400486][ T5630] ? path_lookupat+0x770/0x770 [ 581.402319][ T5630] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 581.404633][ T5630] do_filp_open+0x1de/0x430 [ 581.406378][ T5630] ? may_open_dev+0xf0/0xf0 [ 581.408162][ T5630] ? _raw_spin_unlock+0x28/0x40 [ 581.410046][ T5630] ? alloc_fd+0x2da/0x6c0 [ 581.411753][ T5630] do_sys_openat2+0x176/0x1e0 [ 581.413586][ T5630] ? build_open_flags+0x690/0x690 [ 581.415527][ T5630] __ia32_compat_sys_openat+0x16e/0x200 [ 581.417653][ T5630] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 581.419747][ T5630] ? ksys_write+0x1a7/0x250 [ 581.421457][ T5630] __do_fast_syscall_32+0x61/0xe0 [ 581.423392][ T5630] do_fast_syscall_32+0x33/0x70 [ 581.425277][ T5630] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 581.427648][ T5630] RIP: 0023:0xf7f8d579 [ 581.429178][ T5630] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 581.436454][ T5630] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 581.439616][ T5630] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 581.442592][ T5630] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 581.445554][ T5630] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 581.448522][ T5630] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 581.451531][ T5630] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 581.454535][ T5630] [ 581.462961][ T5641] FAULT_INJECTION: forcing a failure. [ 581.462961][ T5641] name failslab, interval 1, probability 0, space 0, times 0 [ 581.468133][ T5641] CPU: 0 PID: 5641 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 02:42:29 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 76) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x7}, 0x48) 02:42:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) [ 581.472025][ T5641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 581.476179][ T5641] Call Trace: [ 581.477552][ T5641] [ 581.478674][ T5641] dump_stack_lvl+0x125/0x1b0 [ 581.480440][ T5641] should_fail_ex+0x496/0x5b0 [ 581.482450][ T5641] should_failslab+0x9/0x20 [ 581.484506][ T5641] kmem_cache_alloc+0x33a/0x3b0 [ 581.486822][ T5641] __kernfs_new_node+0xd3/0x8a0 [ 581.489131][ T5641] ? kernfs_path_from_node+0x60/0x60 [ 581.491638][ T5641] ? find_held_lock+0x2d/0x110 [ 581.493932][ T5641] kernfs_new_node+0x94/0x110 [ 581.496139][ T5641] __kernfs_create_file+0x53/0x340 [ 581.498504][ T5641] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 581.501094][ T5641] internal_create_group+0x31c/0xb40 [ 581.503619][ T5641] ? sysfs_remove_group+0x170/0x170 [ 581.506084][ T5641] ? kernfs_create_link+0x1b6/0x230 [ 581.508563][ T5641] internal_create_groups+0x9d/0x150 [ 581.511055][ T5641] device_add+0x710/0x1b40 [ 581.513143][ T5641] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 581.515889][ T5641] ? __init_waitqueue_head+0xca/0x150 [ 581.518172][ T5641] rfkill_register+0x1a9/0xb00 [ 581.520488][ T5641] nfc_register_device+0x11f/0x3c0 [ 581.522965][ T5641] nci_register_device+0x7f4/0xb80 [ 581.525319][ T5641] ? nci_init_complete_req+0x410/0x410 [ 581.527919][ T5641] virtual_ncidev_open+0x147/0x220 [ 581.530367][ T5641] ? virtual_ncidev_read+0x4e0/0x4e0 [ 581.532813][ T5641] misc_open+0x3da/0x4c0 [ 581.534851][ T5641] ? misc_devnode+0x120/0x120 [ 581.537105][ T5641] chrdev_open+0x277/0x700 [ 581.539101][ T5641] ? __unregister_chrdev+0x100/0x100 [ 581.541130][ T5641] ? fsnotify_perm.part.0+0x25d/0x630 [ 581.543205][ T5641] ? fsnotify_perm.part.0+0x268/0x630 [ 581.545685][ T5641] do_dentry_open+0x88b/0x1780 [ 581.547639][ T5641] ? __unregister_chrdev+0x100/0x100 [ 581.549639][ T5641] ? may_open+0x1f2/0x400 [ 581.551713][ T5641] path_openat+0x19af/0x29c0 [ 581.553906][ T5641] ? path_lookupat+0x770/0x770 [ 581.556145][ T5641] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 581.559022][ T5641] do_filp_open+0x1de/0x430 [ 581.561141][ T5641] ? may_open_dev+0xf0/0xf0 [ 581.563312][ T5641] ? _raw_spin_unlock+0x28/0x40 [ 581.565605][ T5641] ? alloc_fd+0x2da/0x6c0 [ 581.567560][ T5641] do_sys_openat2+0x176/0x1e0 [ 581.569738][ T5641] ? build_open_flags+0x690/0x690 [ 581.572132][ T5641] __ia32_compat_sys_openat+0x16e/0x200 [ 581.574211][ T5641] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 581.576264][ T5641] ? ksys_write+0x1a7/0x250 [ 581.577970][ T5641] __do_fast_syscall_32+0x61/0xe0 [ 581.579847][ T5641] do_fast_syscall_32+0x33/0x70 [ 581.581675][ T5641] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 581.584052][ T5641] RIP: 0023:0xf7f9e579 [ 581.585575][ T5641] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 581.592690][ T5641] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 581.595770][ T5641] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 581.598692][ T5641] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 581.601630][ T5641] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 581.604578][ T5641] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 581.607516][ T5641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 581.610441][ T5641] 02:42:29 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 76) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x8}, 0x48) 02:42:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x9}, 0x48) 02:42:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) [ 582.717315][ T5659] FAULT_INJECTION: forcing a failure. [ 582.717315][ T5659] name failslab, interval 1, probability 0, space 0, times 0 [ 582.723452][ T5659] CPU: 2 PID: 5659 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 582.728255][ T5659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 582.732941][ T5659] Call Trace: [ 582.734524][ T5659] [ 582.735916][ T5659] dump_stack_lvl+0x125/0x1b0 [ 582.738117][ T5659] should_fail_ex+0x496/0x5b0 [ 582.740366][ T5659] should_failslab+0x9/0x20 [ 582.742516][ T5659] __kmem_cache_alloc_node+0x2fd/0x350 [ 582.745108][ T5659] ? kstrdup_const+0x5f/0x70 [ 582.747322][ T5659] ? kstrdup_const+0x5f/0x70 [ 582.749499][ T5659] __kmalloc_node_track_caller+0x4d/0x100 [ 582.752185][ T5659] kstrdup+0x3c/0x70 [ 582.754020][ T5659] kstrdup_const+0x5f/0x70 [ 582.756144][ T5659] __kernfs_new_node+0x9c/0x8a0 [ 582.758396][ T5659] ? kernfs_add_one+0x3ca/0x510 [ 582.760562][ T5659] ? kernfs_path_from_node+0x60/0x60 [ 582.762936][ T5659] ? lock_acquire+0x1ae/0x510 [ 582.765063][ T5659] ? find_held_lock+0x2d/0x110 [ 582.767232][ T5659] ? sysfs_do_create_link_sd+0x82/0x140 [ 582.769765][ T5659] kernfs_new_node+0x94/0x110 [ 582.772045][ T5659] kernfs_create_link+0xcc/0x230 [ 582.773983][ T5659] sysfs_do_create_link_sd+0x90/0x140 [ 582.776425][ T5659] sysfs_create_link+0x61/0xc0 [ 582.778322][ T5659] device_add+0x66b/0x1b40 [ 582.780089][ T5659] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 582.782833][ T5659] ? __init_waitqueue_head+0xca/0x150 [ 582.785366][ T5659] rfkill_register+0x1a9/0xb00 [ 582.787813][ T5659] nfc_register_device+0x11f/0x3c0 [ 582.789855][ T5659] nci_register_device+0x7f4/0xb80 [ 582.791846][ T5659] ? nci_init_complete_req+0x410/0x410 [ 582.794322][ T5659] virtual_ncidev_open+0x147/0x220 [ 582.796608][ T5659] ? virtual_ncidev_read+0x4e0/0x4e0 [ 582.798658][ T5659] misc_open+0x3da/0x4c0 [ 582.800283][ T5659] ? misc_devnode+0x120/0x120 [ 582.802081][ T5659] chrdev_open+0x277/0x700 [ 582.803890][ T5659] ? __unregister_chrdev+0x100/0x100 [ 582.805879][ T5659] ? fsnotify_perm.part.0+0x25d/0x630 [ 582.807939][ T5659] ? fsnotify_perm.part.0+0x268/0x630 [ 582.809957][ T5659] do_dentry_open+0x88b/0x1780 [ 582.811784][ T5659] ? __unregister_chrdev+0x100/0x100 [ 582.814154][ T5659] ? may_open+0x1f2/0x400 [ 582.815948][ T5659] path_openat+0x19af/0x29c0 [ 582.817704][ T5659] ? path_lookupat+0x770/0x770 [ 582.819485][ T5659] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 582.821728][ T5659] do_filp_open+0x1de/0x430 [ 582.823578][ T5659] ? may_open_dev+0xf0/0xf0 [ 582.825334][ T5659] ? _raw_spin_unlock+0x28/0x40 [ 582.827195][ T5659] ? alloc_fd+0x2da/0x6c0 [ 582.828877][ T5659] do_sys_openat2+0x176/0x1e0 [ 582.830670][ T5659] ? build_open_flags+0x690/0x690 [ 582.832720][ T5659] __ia32_compat_sys_openat+0x16e/0x200 [ 582.835328][ T5659] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 582.837871][ T5659] ? ksys_write+0x1a7/0x250 [ 582.839735][ T5659] __do_fast_syscall_32+0x61/0xe0 [ 582.841590][ T5659] do_fast_syscall_32+0x33/0x70 [ 582.843454][ T5659] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 582.845781][ T5659] RIP: 0023:0xf7f8d579 [ 582.847298][ T5659] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 582.855048][ T5659] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 582.858739][ T5659] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 582.861661][ T5659] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 582.864617][ T5659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 582.867542][ T5659] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 582.870475][ T5659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 582.873710][ T5659] [ 582.880170][ T5663] FAULT_INJECTION: forcing a failure. [ 582.880170][ T5663] name failslab, interval 1, probability 0, space 0, times 0 [ 582.885792][ T5663] CPU: 1 PID: 5663 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 02:42:30 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 77) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0xa}, 0x48) 02:42:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xb}, 0x48) [ 582.890637][ T5663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 582.895116][ T5663] Call Trace: [ 582.896401][ T5663] [ 582.897525][ T5663] dump_stack_lvl+0x125/0x1b0 [ 582.899451][ T5663] should_fail_ex+0x496/0x5b0 [ 582.901633][ T5663] should_failslab+0x9/0x20 [ 582.903770][ T5663] kmem_cache_alloc+0x33a/0x3b0 [ 582.906038][ T5663] __kernfs_new_node+0xd3/0x8a0 [ 582.908288][ T5663] ? kernfs_path_from_node+0x60/0x60 [ 582.910765][ T5663] ? find_held_lock+0x2d/0x110 [ 582.913019][ T5663] kernfs_new_node+0x94/0x110 [ 582.915170][ T5663] __kernfs_create_file+0x53/0x340 [ 582.917534][ T5663] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 582.920035][ T5663] internal_create_group+0x31c/0xb40 [ 582.922485][ T5663] ? sysfs_remove_group+0x170/0x170 [ 582.924887][ T5663] ? kernfs_create_link+0x1b6/0x230 [ 582.927289][ T5663] internal_create_groups+0x9d/0x150 [ 582.929706][ T5663] device_add+0x710/0x1b40 [ 582.931783][ T5663] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 582.934882][ T5663] ? __init_waitqueue_head+0xca/0x150 [ 582.937402][ T5663] rfkill_register+0x1a9/0xb00 [ 582.939613][ T5663] nfc_register_device+0x11f/0x3c0 [ 582.942034][ T5663] nci_register_device+0x7f4/0xb80 [ 582.944445][ T5663] ? nci_init_complete_req+0x410/0x410 [ 582.946881][ T5663] virtual_ncidev_open+0x147/0x220 [ 582.949214][ T5663] ? virtual_ncidev_read+0x4e0/0x4e0 [ 582.951764][ T5663] misc_open+0x3da/0x4c0 [ 582.953837][ T5663] ? misc_devnode+0x120/0x120 [ 582.956075][ T5663] chrdev_open+0x277/0x700 [ 582.958220][ T5663] ? __unregister_chrdev+0x100/0x100 [ 582.960472][ T5663] ? fsnotify_perm.part.0+0x25d/0x630 [ 582.962459][ T5663] ? fsnotify_perm.part.0+0x268/0x630 [ 582.964468][ T5663] do_dentry_open+0x88b/0x1780 [ 582.966242][ T5663] ? __unregister_chrdev+0x100/0x100 [ 582.968214][ T5663] ? may_open+0x1f2/0x400 [ 582.969812][ T5663] path_openat+0x19af/0x29c0 [ 582.971569][ T5663] ? path_lookupat+0x770/0x770 [ 582.973357][ T5663] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 582.975585][ T5663] do_filp_open+0x1de/0x430 [ 582.977268][ T5663] ? may_open_dev+0xf0/0xf0 [ 582.978959][ T5663] ? _raw_spin_unlock+0x28/0x40 [ 582.980767][ T5663] ? alloc_fd+0x2da/0x6c0 [ 582.982379][ T5663] do_sys_openat2+0x176/0x1e0 [ 582.984137][ T5663] ? build_open_flags+0x690/0x690 [ 582.986011][ T5663] __ia32_compat_sys_openat+0x16e/0x200 [ 582.988060][ T5663] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 582.990068][ T5663] ? ksys_write+0x1a7/0x250 [ 582.991791][ T5663] __do_fast_syscall_32+0x61/0xe0 [ 582.993661][ T5663] do_fast_syscall_32+0x33/0x70 [ 582.995475][ T5663] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 582.997804][ T5663] RIP: 0023:0xf7f9e579 [ 582.999324][ T5663] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 583.006392][ T5663] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 583.009451][ T5663] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 583.012366][ T5663] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 583.015275][ T5663] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 583.018180][ T5663] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 583.021072][ T5663] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 583.023974][ T5663] [ 583.030440][ T5677] FAULT_INJECTION: forcing a failure. [ 583.030440][ T5677] name failslab, interval 1, probability 0, space 0, times 0 [ 583.035360][ T5677] CPU: 0 PID: 5677 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 583.039117][ T5677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 583.042805][ T5677] Call Trace: [ 583.044049][ T5677] [ 583.045157][ T5677] dump_stack_lvl+0x125/0x1b0 [ 583.046905][ T5677] should_fail_ex+0x496/0x5b0 [ 583.048655][ T5677] should_failslab+0x9/0x20 [ 583.050364][ T5677] __kmem_cache_alloc_node+0x2fd/0x350 [ 583.052397][ T5677] ? nfc_llcp_build_tlv+0xfd/0x230 [ 583.054280][ T5677] ? nfc_llcp_build_tlv+0xfd/0x230 [ 583.056169][ T5677] __kmalloc+0x4c/0x100 [ 583.057713][ T5677] nfc_llcp_build_tlv+0xfd/0x230 [ 583.059559][ T5677] nfc_llcp_build_gb.isra.0+0xf1/0x410 [ 583.061561][ T5677] ? nfc_llcp_reserve_sdp_ssap+0x120/0x120 [ 583.063896][ T5677] ? reacquire_held_locks+0x4b0/0x4b0 [ 583.065895][ T5677] ? mark_held_locks+0x9f/0xe0 [ 583.067699][ T5677] ? lockdep_init_map_type+0x16d/0x7c0 [ 583.069704][ T5677] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 583.071886][ T5677] nfc_llcp_register_device+0x5c5/0x9d0 [ 583.073933][ T5677] nfc_register_device+0x6d/0x3c0 [ 583.075802][ T5677] nci_register_device+0x7f4/0xb80 [ 583.077697][ T5677] ? nci_init_complete_req+0x410/0x410 [ 583.079714][ T5677] virtual_ncidev_open+0x147/0x220 [ 583.081598][ T5677] ? virtual_ncidev_read+0x4e0/0x4e0 [ 583.083769][ T5677] misc_open+0x3da/0x4c0 [ 583.085540][ T5677] ? misc_devnode+0x120/0x120 [ 583.087283][ T5677] chrdev_open+0x277/0x700 [ 583.088948][ T5677] ? __unregister_chrdev+0x100/0x100 [ 583.090894][ T5677] ? fsnotify_perm.part.0+0x25d/0x630 [ 583.092903][ T5677] ? fsnotify_perm.part.0+0x268/0x630 [ 583.094886][ T5677] do_dentry_open+0x88b/0x1780 [ 583.096673][ T5677] ? __unregister_chrdev+0x100/0x100 [ 583.098638][ T5677] ? may_open+0x1f2/0x400 [ 583.100269][ T5677] path_openat+0x19af/0x29c0 [ 583.101991][ T5677] ? path_lookupat+0x770/0x770 [ 583.103795][ T5677] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 583.106023][ T5677] do_filp_open+0x1de/0x430 [ 583.107727][ T5677] ? may_open_dev+0xf0/0xf0 [ 583.109437][ T5677] ? _raw_spin_unlock+0x28/0x40 [ 583.111261][ T5677] ? alloc_fd+0x2da/0x6c0 [ 583.112893][ T5677] do_sys_openat2+0x176/0x1e0 [ 583.115161][ T5677] ? build_open_flags+0x690/0x690 [ 583.117184][ T5677] __ia32_compat_sys_openat+0x16e/0x200 [ 583.119239][ T5677] ? __x64_compat_sys_open+0x1d0/0x1d0 02:42:30 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 77) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xb}, 0x48) 02:42:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0xb}, 0x48) [ 583.121264][ T5677] ? ksys_write+0x1a7/0x250 [ 583.123220][ T5677] __do_fast_syscall_32+0x61/0xe0 [ 583.125159][ T5677] do_fast_syscall_32+0x33/0x70 [ 583.126996][ T5677] entry_SYSENTER_compat_after_hwframe+0x70/0x82 02:42:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xb}, 0x48) [ 583.129371][ T5677] RIP: 0023:0xf7f8d579 [ 583.131034][ T5677] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 583.138249][ T5677] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 583.141351][ T5677] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 583.144385][ T5677] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 583.147304][ T5677] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 583.150192][ T5677] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 02:42:30 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 583.153143][ T5677] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 583.156273][ T5677] [ 583.172405][ T5684] FAULT_INJECTION: forcing a failure. [ 583.172405][ T5684] name failslab, interval 1, probability 0, space 0, times 0 [ 583.183134][ T5684] CPU: 1 PID: 5684 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 583.186946][ T5684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 583.190670][ T5684] Call Trace: [ 583.191966][ T5684] [ 583.193097][ T5684] dump_stack_lvl+0x125/0x1b0 [ 583.194840][ T5684] should_fail_ex+0x496/0x5b0 [ 583.196588][ T5684] should_failslab+0x9/0x20 [ 583.198265][ T5684] kmem_cache_alloc+0x33a/0x3b0 [ 583.200103][ T5684] __kernfs_new_node+0xd3/0x8a0 [ 583.202291][ T5684] ? kernfs_add_one+0x3ca/0x510 [ 583.204462][ T5684] ? kernfs_path_from_node+0x60/0x60 [ 583.206421][ T5684] ? find_held_lock+0x2d/0x110 [ 583.208227][ T5684] ? up_write+0x1b3/0x510 [ 583.209831][ T5684] kernfs_new_node+0x94/0x110 [ 583.211595][ T5684] __kernfs_create_file+0x53/0x340 [ 583.213596][ T5684] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 583.215596][ T5684] internal_create_group+0x31c/0xb40 [ 583.217547][ T5684] ? sysfs_remove_group+0x170/0x170 [ 583.219467][ T5684] ? kernfs_create_link+0x1b6/0x230 [ 583.221375][ T5684] internal_create_groups+0x9d/0x150 [ 583.223353][ T5684] device_add+0x710/0x1b40 [ 583.225024][ T5684] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 583.227523][ T5684] ? __init_waitqueue_head+0xca/0x150 [ 583.229499][ T5684] rfkill_register+0x1a9/0xb00 [ 583.231271][ T5684] nfc_register_device+0x11f/0x3c0 [ 583.233241][ T5684] nci_register_device+0x7f4/0xb80 [ 583.235134][ T5684] ? nci_init_complete_req+0x410/0x410 [ 583.237138][ T5684] virtual_ncidev_open+0x147/0x220 [ 583.239013][ T5684] ? virtual_ncidev_read+0x4e0/0x4e0 [ 583.240961][ T5684] misc_open+0x3da/0x4c0 [ 583.242578][ T5684] ? misc_devnode+0x120/0x120 [ 583.244345][ T5684] chrdev_open+0x277/0x700 [ 583.246009][ T5684] ? __unregister_chrdev+0x100/0x100 [ 583.247959][ T5684] ? fsnotify_perm.part.0+0x25d/0x630 [ 583.249930][ T5684] ? fsnotify_perm.part.0+0x268/0x630 [ 583.252081][ T5684] do_dentry_open+0x88b/0x1780 [ 583.253856][ T5684] ? __unregister_chrdev+0x100/0x100 [ 583.255815][ T5684] ? may_open+0x1f2/0x400 [ 583.257417][ T5684] path_openat+0x19af/0x29c0 [ 583.259132][ T5684] ? path_lookupat+0x770/0x770 [ 583.260909][ T5684] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 583.263126][ T5684] do_filp_open+0x1de/0x430 [ 583.264823][ T5684] ? may_open_dev+0xf0/0xf0 [ 583.266531][ T5684] ? _raw_spin_unlock+0x28/0x40 [ 583.268343][ T5684] ? alloc_fd+0x2da/0x6c0 [ 583.269938][ T5684] do_sys_openat2+0x176/0x1e0 [ 583.271702][ T5684] ? build_open_flags+0x690/0x690 [ 583.273646][ T5684] __ia32_compat_sys_openat+0x16e/0x200 [ 583.275700][ T5684] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 583.277712][ T5684] ? ksys_write+0x1a7/0x250 [ 583.279417][ T5684] __do_fast_syscall_32+0x61/0xe0 [ 583.281263][ T5684] do_fast_syscall_32+0x33/0x70 [ 583.283058][ T5684] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 583.285376][ T5684] RIP: 0023:0xf7f9e579 [ 583.286883][ T5684] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 583.293980][ T5684] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 583.297024][ T5684] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 583.299964][ T5684] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 583.302898][ T5684] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 583.305823][ T5684] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 583.308745][ T5684] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 583.311666][ T5684] 02:42:31 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 78) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0xc}, 0x48) 02:42:31 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:31 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 78) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:31 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0xd}, 0x48) [ 583.353332][ T5704] FAULT_INJECTION: forcing a failure. 02:42:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) [ 583.353332][ T5704] name failslab, interval 1, probability 0, space 0, times 0 [ 583.367764][ T5704] CPU: 1 PID: 5704 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 583.371582][ T5704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 583.375320][ T5704] Call Trace: [ 583.376560][ T5704] [ 583.377656][ T5704] dump_stack_lvl+0x125/0x1b0 [ 583.379410][ T5704] should_fail_ex+0x496/0x5b0 [ 583.381138][ T5704] should_failslab+0x9/0x20 [ 583.382858][ T5704] kmem_cache_alloc+0x33a/0x3b0 [ 583.384669][ T5704] __kernfs_new_node+0xd3/0x8a0 [ 583.386466][ T5704] ? kernfs_path_from_node+0x60/0x60 [ 583.388416][ T5704] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 583.390676][ T5704] ? lockdep_hardirqs_on+0x7d/0x100 [ 583.392665][ T5704] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 583.394919][ T5704] kernfs_new_node+0x94/0x110 [ 583.396675][ T5704] __kernfs_create_file+0x53/0x340 [ 583.398554][ T5704] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 583.400531][ T5704] internal_create_group+0x31c/0xb40 [ 583.402503][ T5704] ? sysfs_remove_group+0x170/0x170 [ 583.404431][ T5704] ? kernfs_create_link+0x1b6/0x230 [ 583.406354][ T5704] internal_create_groups+0x9d/0x150 [ 583.408303][ T5704] device_add+0x710/0x1b40 [ 583.409953][ T5704] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 583.412553][ T5704] ? __init_waitqueue_head+0xca/0x150 [ 583.414519][ T5704] rfkill_register+0x1a9/0xb00 [ 583.416297][ T5704] nfc_register_device+0x11f/0x3c0 [ 583.418326][ T5704] nci_register_device+0x7f4/0xb80 [ 583.420221][ T5704] ? nci_init_complete_req+0x410/0x410 [ 583.422259][ T5704] virtual_ncidev_open+0x147/0x220 [ 583.424170][ T5704] ? virtual_ncidev_read+0x4e0/0x4e0 [ 583.426104][ T5704] misc_open+0x3da/0x4c0 [ 583.427680][ T5704] ? misc_devnode+0x120/0x120 [ 583.429404][ T5704] chrdev_open+0x277/0x700 [ 583.431051][ T5704] ? __unregister_chrdev+0x100/0x100 [ 583.433154][ T5704] ? fsnotify_perm.part.0+0x25d/0x630 [ 583.435108][ T5704] ? fsnotify_perm.part.0+0x268/0x630 [ 583.437064][ T5704] do_dentry_open+0x88b/0x1780 [ 583.438813][ T5704] ? __unregister_chrdev+0x100/0x100 [ 583.440752][ T5704] ? may_open+0x1f2/0x400 [ 583.442329][ T5704] path_openat+0x19af/0x29c0 [ 583.444043][ T5704] ? path_lookupat+0x770/0x770 [ 583.445796][ T5704] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 583.447987][ T5704] do_filp_open+0x1de/0x430 [ 583.449652][ T5704] ? may_open_dev+0xf0/0xf0 [ 583.451340][ T5704] ? _raw_spin_unlock+0x28/0x40 [ 583.453480][ T5704] ? alloc_fd+0x2da/0x6c0 [ 583.455116][ T5704] do_sys_openat2+0x176/0x1e0 [ 583.456967][ T5704] ? build_open_flags+0x690/0x690 [ 583.458826][ T5704] __ia32_compat_sys_openat+0x16e/0x200 [ 583.460856][ T5704] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 583.462852][ T5704] ? ksys_write+0x1a7/0x250 [ 583.464545][ T5704] __do_fast_syscall_32+0x61/0xe0 [ 583.466395][ T5704] do_fast_syscall_32+0x33/0x70 [ 583.468193][ T5704] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 583.470507][ T5704] RIP: 0023:0xf7f9e579 [ 583.472082][ T5704] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 583.480638][ T5704] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 583.484328][ T5704] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 583.487862][ T5704] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 583.490743][ T5704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 583.493708][ T5704] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 583.496594][ T5704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 583.499502][ T5704] 02:42:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) [ 583.514974][ T5703] FAULT_INJECTION: forcing a failure. [ 583.514974][ T5703] name failslab, interval 1, probability 0, space 0, times 0 [ 583.527366][ T5703] CPU: 1 PID: 5703 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 583.532171][ T5703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 583.535971][ T5703] Call Trace: [ 583.537245][ T5703] [ 583.538372][ T5703] dump_stack_lvl+0x125/0x1b0 [ 583.540173][ T5703] should_fail_ex+0x496/0x5b0 [ 583.541998][ T5703] should_failslab+0x9/0x20 [ 583.543728][ T5703] kmem_cache_alloc+0x33a/0x3b0 [ 583.545578][ T5703] __kernfs_new_node+0xd3/0x8a0 [ 583.547417][ T5703] ? kernfs_add_one+0x3ca/0x510 [ 583.549262][ T5703] ? kernfs_path_from_node+0x60/0x60 [ 583.551263][ T5703] ? find_held_lock+0x2d/0x110 [ 583.553211][ T5703] ? up_write+0x1b3/0x510 [ 583.554849][ T5703] kernfs_new_node+0x94/0x110 [ 583.556669][ T5703] __kernfs_create_file+0x53/0x340 [ 583.558656][ T5703] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 583.560702][ T5703] internal_create_group+0x31c/0xb40 [ 583.562715][ T5703] ? sysfs_remove_group+0x170/0x170 [ 583.564690][ T5703] ? kernfs_create_link+0x1b6/0x230 [ 583.566648][ T5703] internal_create_groups+0x9d/0x150 [ 583.568638][ T5703] device_add+0x710/0x1b40 [ 583.570331][ T5703] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 583.572969][ T5703] ? __init_waitqueue_head+0xca/0x150 [ 583.574982][ T5703] rfkill_register+0x1a9/0xb00 [ 583.576826][ T5703] nfc_register_device+0x11f/0x3c0 [ 583.578722][ T5703] nci_register_device+0x7f4/0xb80 [ 583.580681][ T5703] ? nci_init_complete_req+0x410/0x410 [ 583.582761][ T5703] virtual_ncidev_open+0x147/0x220 [ 583.584694][ T5703] ? virtual_ncidev_read+0x4e0/0x4e0 [ 583.586668][ T5703] misc_open+0x3da/0x4c0 [ 583.588303][ T5703] ? misc_devnode+0x120/0x120 [ 583.590085][ T5703] chrdev_open+0x277/0x700 [ 583.591791][ T5703] ? __unregister_chrdev+0x100/0x100 [ 583.593823][ T5703] ? fsnotify_perm.part.0+0x25d/0x630 [ 583.595994][ T5703] ? fsnotify_perm.part.0+0x268/0x630 [ 583.598069][ T5703] do_dentry_open+0x88b/0x1780 [ 583.599922][ T5703] ? __unregister_chrdev+0x100/0x100 [ 583.601968][ T5703] ? may_open+0x1f2/0x400 [ 583.603662][ T5703] path_openat+0x19af/0x29c0 [ 583.605402][ T5703] ? path_lookupat+0x770/0x770 [ 583.607230][ T5703] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 583.609515][ T5703] do_filp_open+0x1de/0x430 [ 583.611244][ T5703] ? may_open_dev+0xf0/0xf0 [ 583.613060][ T5703] ? _raw_spin_unlock+0x28/0x40 [ 583.614913][ T5703] ? alloc_fd+0x2da/0x6c0 [ 583.616578][ T5703] do_sys_openat2+0x176/0x1e0 [ 583.618372][ T5703] ? build_open_flags+0x690/0x690 [ 583.620312][ T5703] __ia32_compat_sys_openat+0x16e/0x200 [ 583.622462][ T5703] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 583.624543][ T5703] ? ksys_write+0x1a7/0x250 [ 583.626305][ T5703] __do_fast_syscall_32+0x61/0xe0 [ 583.628243][ T5703] do_fast_syscall_32+0x33/0x70 [ 583.630072][ T5703] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 583.632513][ T5703] RIP: 0023:0xf7f8d579 [ 583.634076][ T5703] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 583.641301][ T5703] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 583.644487][ T5703] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 583.647480][ T5703] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 583.650435][ T5703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 583.653521][ T5703] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 583.656521][ T5703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 583.659517][ T5703] 02:42:31 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 79) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0xe}, 0x48) 02:42:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:31 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 79) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7}, 0x48) 02:42:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0xf}, 0x48) [ 583.698170][ T5725] FAULT_INJECTION: forcing a failure. [ 583.698170][ T5725] name failslab, interval 1, probability 0, space 0, times 0 02:42:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7}, 0x48) [ 583.704108][ T5725] CPU: 2 PID: 5725 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 583.709094][ T5725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 583.713809][ T5725] Call Trace: [ 583.715420][ T5725] [ 583.716830][ T5725] dump_stack_lvl+0x125/0x1b0 [ 583.719083][ T5725] should_fail_ex+0x496/0x5b0 [ 583.721356][ T5725] should_failslab+0x9/0x20 02:42:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7}, 0x48) [ 583.723543][ T5725] kmem_cache_alloc+0x33a/0x3b0 [ 583.725967][ T5725] __kernfs_new_node+0xd3/0x8a0 [ 583.728331][ T5725] ? kernfs_add_one+0x3ca/0x510 [ 583.730667][ T5725] ? kernfs_path_from_node+0x60/0x60 [ 583.733224][ T5725] ? find_held_lock+0x2d/0x110 [ 583.735521][ T5725] ? up_write+0x1b3/0x510 [ 583.737586][ T5725] kernfs_new_node+0x94/0x110 [ 583.739840][ T5725] __kernfs_create_file+0x53/0x340 [ 583.742257][ T5725] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 583.744611][ T5725] internal_create_group+0x31c/0xb40 [ 583.746987][ T5725] ? sysfs_remove_group+0x170/0x170 [ 583.749333][ T5725] ? kernfs_create_link+0x1b6/0x230 [ 583.751726][ T5725] internal_create_groups+0x9d/0x150 [ 583.754190][ T5725] device_add+0x710/0x1b40 [ 583.756146][ T5725] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 583.759321][ T5725] ? __init_waitqueue_head+0xca/0x150 [ 583.761882][ T5725] rfkill_register+0x1a9/0xb00 [ 583.764099][ T5725] nfc_register_device+0x11f/0x3c0 [ 583.766487][ T5725] nci_register_device+0x7f4/0xb80 [ 583.768808][ T5725] ? nci_init_complete_req+0x410/0x410 [ 583.771331][ T5725] virtual_ncidev_open+0x147/0x220 [ 583.773695][ T5725] ? virtual_ncidev_read+0x4e0/0x4e0 [ 583.776178][ T5725] misc_open+0x3da/0x4c0 [ 583.778115][ T5725] ? misc_devnode+0x120/0x120 [ 583.780231][ T5725] chrdev_open+0x277/0x700 [ 583.782406][ T5725] ? __unregister_chrdev+0x100/0x100 [ 583.784858][ T5725] ? fsnotify_perm.part.0+0x25d/0x630 [ 583.787291][ T5725] ? fsnotify_perm.part.0+0x268/0x630 [ 583.789733][ T5725] do_dentry_open+0x88b/0x1780 [ 583.791600][ T5725] ? __unregister_chrdev+0x100/0x100 [ 583.793635][ T5725] ? may_open+0x1f2/0x400 [ 583.795241][ T5725] path_openat+0x19af/0x29c0 [ 583.797253][ T5725] ? path_lookupat+0x770/0x770 [ 583.799417][ T5725] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 583.801668][ T5725] do_filp_open+0x1de/0x430 [ 583.803677][ T5725] ? may_open_dev+0xf0/0xf0 [ 583.805756][ T5725] ? _raw_spin_unlock+0x28/0x40 [ 583.808022][ T5725] ? alloc_fd+0x2da/0x6c0 [ 583.809771][ T5725] do_sys_openat2+0x176/0x1e0 [ 583.811569][ T5725] ? build_open_flags+0x690/0x690 [ 583.813483][ T5725] __ia32_compat_sys_openat+0x16e/0x200 [ 583.815524][ T5725] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 583.817746][ T5725] ? ksys_write+0x1a7/0x250 [ 583.819466][ T5725] __do_fast_syscall_32+0x61/0xe0 [ 583.821299][ T5725] do_fast_syscall_32+0x33/0x70 [ 583.823110][ T5725] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 583.825455][ T5725] RIP: 0023:0xf7f9e579 [ 583.827023][ T5725] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 583.834234][ T5725] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 583.837307][ T5725] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 583.840210][ T5725] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 583.843076][ T5725] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 583.845928][ T5725] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 583.848849][ T5725] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 583.851783][ T5725] [ 583.864006][ T5729] FAULT_INJECTION: forcing a failure. [ 583.864006][ T5729] name failslab, interval 1, probability 0, space 0, times 0 [ 583.869132][ T5729] CPU: 2 PID: 5729 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 583.872832][ T5729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 583.876473][ T5729] Call Trace: [ 583.877724][ T5729] [ 583.878816][ T5729] dump_stack_lvl+0x125/0x1b0 [ 583.880656][ T5729] should_fail_ex+0x496/0x5b0 [ 583.882422][ T5729] should_failslab+0x9/0x20 [ 583.884228][ T5729] kmem_cache_alloc+0x33a/0x3b0 [ 583.886041][ T5729] __kernfs_new_node+0xd3/0x8a0 [ 583.887874][ T5729] ? kernfs_add_one+0x3ca/0x510 [ 583.889673][ T5729] ? kernfs_path_from_node+0x60/0x60 [ 583.891818][ T5729] ? find_held_lock+0x2d/0x110 [ 583.893854][ T5729] ? up_write+0x1b3/0x510 [ 583.895838][ T5729] kernfs_new_node+0x94/0x110 [ 583.897983][ T5729] __kernfs_create_file+0x53/0x340 [ 583.900314][ T5729] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 583.902743][ T5729] internal_create_group+0x31c/0xb40 [ 583.905157][ T5729] ? sysfs_remove_group+0x170/0x170 [ 583.907556][ T5729] ? kernfs_create_link+0x1b6/0x230 [ 583.909910][ T5729] internal_create_groups+0x9d/0x150 [ 583.912343][ T5729] device_add+0x710/0x1b40 [ 583.914366][ T5729] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 583.917442][ T5729] ? __init_waitqueue_head+0xca/0x150 [ 583.919456][ T5729] rfkill_register+0x1a9/0xb00 [ 583.921196][ T5729] nfc_register_device+0x11f/0x3c0 [ 583.923074][ T5729] nci_register_device+0x7f4/0xb80 [ 583.925018][ T5729] ? nci_init_complete_req+0x410/0x410 [ 583.927004][ T5729] virtual_ncidev_open+0x147/0x220 [ 583.928879][ T5729] ? virtual_ncidev_read+0x4e0/0x4e0 [ 583.930793][ T5729] misc_open+0x3da/0x4c0 [ 583.932407][ T5729] ? misc_devnode+0x120/0x120 [ 583.934149][ T5729] chrdev_open+0x277/0x700 [ 583.935816][ T5729] ? __unregister_chrdev+0x100/0x100 [ 583.937766][ T5729] ? fsnotify_perm.part.0+0x25d/0x630 [ 583.939881][ T5729] ? fsnotify_perm.part.0+0x268/0x630 [ 583.941872][ T5729] do_dentry_open+0x88b/0x1780 [ 583.943654][ T5729] ? __unregister_chrdev+0x100/0x100 [ 583.945575][ T5729] ? may_open+0x1f2/0x400 [ 583.947102][ T5729] path_openat+0x19af/0x29c0 [ 583.948723][ T5729] ? path_lookupat+0x770/0x770 [ 583.950519][ T5729] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 583.952742][ T5729] do_filp_open+0x1de/0x430 [ 583.954456][ T5729] ? may_open_dev+0xf0/0xf0 [ 583.956229][ T5729] ? _raw_spin_unlock+0x28/0x40 [ 583.958058][ T5729] ? alloc_fd+0x2da/0x6c0 [ 583.959737][ T5729] do_sys_openat2+0x176/0x1e0 [ 583.961559][ T5729] ? build_open_flags+0x690/0x690 [ 583.963488][ T5729] __ia32_compat_sys_openat+0x16e/0x200 [ 583.965590][ T5729] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 583.967613][ T5729] ? ksys_write+0x1a7/0x250 [ 583.969289][ T5729] __do_fast_syscall_32+0x61/0xe0 [ 583.971172][ T5729] do_fast_syscall_32+0x33/0x70 [ 583.973217][ T5729] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 583.976027][ T5729] RIP: 0023:0xf7f8d579 [ 583.977812][ T5729] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 583.985623][ T5729] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 583.988878][ T5729] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 583.991982][ T5729] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 583.994913][ T5729] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 583.998030][ T5729] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 584.001464][ T5729] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 584.005012][ T5729] 02:42:31 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 80) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x10}, 0x48) 02:42:31 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:31 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 80) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:31 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x11}, 0x48) [ 584.060698][ T5751] FAULT_INJECTION: forcing a failure. 02:42:31 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 584.060698][ T5751] name failslab, interval 1, probability 0, space 0, times 0 [ 584.080981][ T5751] CPU: 3 PID: 5751 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 02:42:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) [ 584.085888][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 584.090674][ T5751] Call Trace: [ 584.092300][ T5751] [ 584.093730][ T5751] dump_stack_lvl+0x125/0x1b0 [ 584.095990][ T5751] should_fail_ex+0x496/0x5b0 [ 584.098174][ T5751] should_failslab+0x9/0x20 [ 584.100259][ T5751] kmem_cache_alloc+0x33a/0x3b0 [ 584.102453][ T5751] __kernfs_new_node+0xd3/0x8a0 [ 584.104661][ T5751] ? kernfs_add_one+0x3ca/0x510 [ 584.106852][ T5751] ? kernfs_path_from_node+0x60/0x60 [ 584.109245][ T5751] ? find_held_lock+0x2d/0x110 [ 584.111517][ T5751] ? up_write+0x1b3/0x510 [ 584.113578][ T5751] kernfs_new_node+0x94/0x110 [ 584.115842][ T5751] __kernfs_create_file+0x53/0x340 [ 584.118299][ T5751] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 584.120936][ T5751] internal_create_group+0x31c/0xb40 [ 584.123477][ T5751] ? sysfs_remove_group+0x170/0x170 [ 584.125847][ T5751] ? kernfs_create_link+0x1b6/0x230 [ 584.128220][ T5751] internal_create_groups+0x9d/0x150 [ 584.130703][ T5751] device_add+0x710/0x1b40 [ 584.132838][ T5751] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 584.135916][ T5751] ? __init_waitqueue_head+0xca/0x150 [ 584.138339][ T5751] rfkill_register+0x1a9/0xb00 [ 584.140577][ T5751] nfc_register_device+0x11f/0x3c0 [ 584.143003][ T5751] nci_register_device+0x7f4/0xb80 [ 584.145386][ T5751] ? nci_init_complete_req+0x410/0x410 [ 584.147952][ T5751] virtual_ncidev_open+0x147/0x220 [ 584.150205][ T5751] ? virtual_ncidev_read+0x4e0/0x4e0 [ 584.152442][ T5751] misc_open+0x3da/0x4c0 [ 584.154211][ T5751] ? misc_devnode+0x120/0x120 [ 584.156235][ T5751] chrdev_open+0x277/0x700 [ 584.158074][ T5751] ? __unregister_chrdev+0x100/0x100 [ 584.160334][ T5751] ? fsnotify_perm.part.0+0x25d/0x630 [ 584.162659][ T5751] ? fsnotify_perm.part.0+0x268/0x630 [ 584.164621][ T5751] do_dentry_open+0x88b/0x1780 [ 584.166354][ T5751] ? __unregister_chrdev+0x100/0x100 [ 584.168399][ T5751] ? may_open+0x1f2/0x400 [ 584.170199][ T5751] path_openat+0x19af/0x29c0 [ 584.172439][ T5751] ? path_lookupat+0x770/0x770 [ 584.174706][ T5751] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 584.177454][ T5751] do_filp_open+0x1de/0x430 [ 584.179587][ T5751] ? may_open_dev+0xf0/0xf0 [ 584.181666][ T5751] ? _raw_spin_unlock+0x28/0x40 [ 584.183875][ T5751] ? alloc_fd+0x2da/0x6c0 [ 584.185846][ T5751] do_sys_openat2+0x176/0x1e0 [ 584.187984][ T5751] ? build_open_flags+0x690/0x690 [ 584.190276][ T5751] __ia32_compat_sys_openat+0x16e/0x200 [ 584.192541][ T5751] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 584.194497][ T5751] ? ksys_write+0x1a7/0x250 [ 584.196151][ T5751] __do_fast_syscall_32+0x61/0xe0 [ 584.197962][ T5751] do_fast_syscall_32+0x33/0x70 [ 584.199721][ T5751] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 584.201989][ T5751] RIP: 0023:0xf7f8d579 [ 584.203460][ T5751] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 584.210353][ T5751] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 584.213363][ T5751] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 584.216190][ T5751] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 584.219026][ T5751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 584.221870][ T5751] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 584.224729][ T5751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 584.227581][ T5751] [ 584.240673][ T5757] FAULT_INJECTION: forcing a failure. [ 584.240673][ T5757] name failslab, interval 1, probability 0, space 0, times 0 [ 584.248323][ T5757] CPU: 2 PID: 5757 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 584.252071][ T5757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 584.256710][ T5757] Call Trace: [ 584.258291][ T5757] [ 584.259378][ T5757] dump_stack_lvl+0x125/0x1b0 [ 584.261120][ T5757] should_fail_ex+0x496/0x5b0 [ 584.262919][ T5757] should_failslab+0x9/0x20 [ 584.264579][ T5757] kmem_cache_alloc+0x33a/0x3b0 [ 584.266341][ T5757] __kernfs_new_node+0xd3/0x8a0 [ 584.268113][ T5757] ? kernfs_add_one+0x3ca/0x510 [ 584.269872][ T5757] ? kernfs_path_from_node+0x60/0x60 [ 584.271838][ T5757] ? up_write+0x1b3/0x510 [ 584.273741][ T5757] kernfs_new_node+0x94/0x110 [ 584.275968][ T5757] __kernfs_create_file+0x53/0x340 [ 584.278078][ T5757] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 584.280272][ T5757] internal_create_group+0x31c/0xb40 [ 584.282341][ T5757] ? sysfs_remove_group+0x170/0x170 [ 584.284706][ T5757] ? kernfs_create_link+0x1b6/0x230 [ 584.286592][ T5757] internal_create_groups+0x9d/0x150 [ 584.288518][ T5757] device_add+0x710/0x1b40 [ 584.290155][ T5757] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 584.292948][ T5757] ? __init_waitqueue_head+0xca/0x150 [ 584.295143][ T5757] rfkill_register+0x1a9/0xb00 [ 584.296892][ T5757] nfc_register_device+0x11f/0x3c0 [ 584.298756][ T5757] nci_register_device+0x7f4/0xb80 [ 584.300630][ T5757] ? nci_init_complete_req+0x410/0x410 [ 584.302956][ T5757] virtual_ncidev_open+0x147/0x220 [ 584.305298][ T5757] ? virtual_ncidev_read+0x4e0/0x4e0 [ 584.307215][ T5757] misc_open+0x3da/0x4c0 [ 584.308779][ T5757] ? misc_devnode+0x120/0x120 [ 584.310472][ T5757] chrdev_open+0x277/0x700 [ 584.312243][ T5757] ? __unregister_chrdev+0x100/0x100 [ 584.314210][ T5757] ? fsnotify_perm.part.0+0x25d/0x630 [ 584.316151][ T5757] ? fsnotify_perm.part.0+0x268/0x630 [ 584.318088][ T5757] do_dentry_open+0x88b/0x1780 [ 584.319828][ T5757] ? __unregister_chrdev+0x100/0x100 [ 584.321809][ T5757] ? may_open+0x1f2/0x400 [ 584.323902][ T5757] path_openat+0x19af/0x29c0 [ 584.325857][ T5757] ? path_lookupat+0x770/0x770 [ 584.327602][ T5757] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 584.329778][ T5757] do_filp_open+0x1de/0x430 [ 584.331443][ T5757] ? may_open_dev+0xf0/0xf0 [ 584.333226][ T5757] ? _raw_spin_unlock+0x28/0x40 [ 584.335003][ T5757] ? alloc_fd+0x2da/0x6c0 [ 584.336602][ T5757] do_sys_openat2+0x176/0x1e0 [ 584.338314][ T5757] ? build_open_flags+0x690/0x690 [ 584.340148][ T5757] __ia32_compat_sys_openat+0x16e/0x200 [ 584.342345][ T5757] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 584.344915][ T5757] ? ksys_write+0x1a7/0x250 [ 584.346580][ T5757] __do_fast_syscall_32+0x61/0xe0 [ 584.348543][ T5757] do_fast_syscall_32+0x33/0x70 [ 584.350314][ T5757] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 584.352975][ T5757] RIP: 0023:0xf7f9e579 [ 584.354882][ T5757] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 584.362121][ T5757] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 584.366008][ T5757] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 584.369739][ T5757] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 584.373505][ T5757] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 584.377183][ T5757] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 584.380932][ T5757] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 584.384788][ T5757] 02:42:32 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 81) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x12}, 0x48) [ 584.427914][ T5774] FAULT_INJECTION: forcing a failure. [ 584.427914][ T5774] name failslab, interval 1, probability 0, space 0, times 0 [ 584.432540][ T5774] CPU: 3 PID: 5774 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 02:42:32 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 81) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x13}, 0x48) [ 584.436632][ T5774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 584.440948][ T5774] Call Trace: [ 584.442344][ T5774] [ 584.443598][ T5774] dump_stack_lvl+0x125/0x1b0 [ 584.445446][ T5774] should_fail_ex+0x496/0x5b0 [ 584.447322][ T5774] should_failslab+0x9/0x20 [ 584.449002][ T5774] kmem_cache_alloc+0x33a/0x3b0 [ 584.450971][ T5774] __kernfs_new_node+0xd3/0x8a0 [ 584.452847][ T5774] ? kernfs_add_one+0x3ca/0x510 [ 584.454717][ T5774] ? kernfs_path_from_node+0x60/0x60 [ 584.456817][ T5774] ? find_held_lock+0x2d/0x110 [ 584.458729][ T5774] ? up_write+0x1b3/0x510 [ 584.460400][ T5774] kernfs_new_node+0x94/0x110 [ 584.462275][ T5774] __kernfs_create_file+0x53/0x340 [ 584.464325][ T5774] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 584.466529][ T5774] internal_create_group+0x31c/0xb40 [ 584.468526][ T5774] ? sysfs_remove_group+0x170/0x170 [ 584.470560][ T5774] ? kernfs_create_link+0x1b6/0x230 [ 584.472533][ T5774] internal_create_groups+0x9d/0x150 [ 584.474479][ T5774] device_add+0x710/0x1b40 [ 584.476245][ T5774] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 584.478755][ T5774] ? __init_waitqueue_head+0xca/0x150 [ 584.480850][ T5774] rfkill_register+0x1a9/0xb00 [ 584.482707][ T5774] nfc_register_device+0x11f/0x3c0 [ 584.484669][ T5774] nci_register_device+0x7f4/0xb80 [ 584.486632][ T5774] ? nci_init_complete_req+0x410/0x410 [ 584.488699][ T5774] virtual_ncidev_open+0x147/0x220 [ 584.490708][ T5774] ? virtual_ncidev_read+0x4e0/0x4e0 [ 584.492868][ T5774] misc_open+0x3da/0x4c0 [ 584.494458][ T5774] ? misc_devnode+0x120/0x120 [ 584.496248][ T5774] chrdev_open+0x277/0x700 [ 584.497975][ T5774] ? __unregister_chrdev+0x100/0x100 [ 584.499972][ T5774] ? fsnotify_perm.part.0+0x25d/0x630 [ 584.502008][ T5774] ? fsnotify_perm.part.0+0x268/0x630 [ 584.504020][ T5774] do_dentry_open+0x88b/0x1780 [ 584.505761][ T5774] ? __unregister_chrdev+0x100/0x100 [ 584.507734][ T5774] ? may_open+0x1f2/0x400 [ 584.509713][ T5774] path_openat+0x19af/0x29c0 [ 584.511751][ T5774] ? path_lookupat+0x770/0x770 [ 584.513866][ T5774] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 584.516657][ T5774] do_filp_open+0x1de/0x430 [ 584.518790][ T5774] ? may_open_dev+0xf0/0xf0 [ 584.520870][ T5774] ? _raw_spin_unlock+0x28/0x40 [ 584.522875][ T5774] ? alloc_fd+0x2da/0x6c0 [ 584.524539][ T5774] do_sys_openat2+0x176/0x1e0 [ 584.526305][ T5774] ? build_open_flags+0x690/0x690 [ 584.528204][ T5774] __ia32_compat_sys_openat+0x16e/0x200 [ 584.530378][ T5774] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 584.532602][ T5774] ? ksys_write+0x1a7/0x250 [ 584.534392][ T5774] __do_fast_syscall_32+0x61/0xe0 [ 584.536474][ T5774] do_fast_syscall_32+0x33/0x70 [ 584.538360][ T5774] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 584.540731][ T5774] RIP: 0023:0xf7f8d579 [ 584.542292][ T5774] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 584.549821][ T5774] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 584.553046][ T5774] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 584.555661][ T5774] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 584.558836][ T5774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 584.562147][ T5774] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 584.565410][ T5774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 584.568497][ T5774] 02:42:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x14}, 0x48) 02:42:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x15}, 0x48) [ 584.575764][ T5781] FAULT_INJECTION: forcing a failure. [ 584.575764][ T5781] name failslab, interval 1, probability 0, space 0, times 0 [ 584.581759][ T5781] CPU: 1 PID: 5781 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 584.586304][ T5781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 584.590056][ T5781] Call Trace: [ 584.591321][ T5781] [ 584.592575][ T5781] dump_stack_lvl+0x125/0x1b0 [ 584.594385][ T5781] should_fail_ex+0x496/0x5b0 [ 584.596154][ T5781] should_failslab+0x9/0x20 [ 584.597859][ T5781] kmem_cache_alloc+0x33a/0x3b0 [ 584.599695][ T5781] __kernfs_new_node+0xd3/0x8a0 [ 584.601502][ T5781] ? kernfs_add_one+0x3ca/0x510 [ 584.603729][ T5781] ? kernfs_path_from_node+0x60/0x60 [ 584.605902][ T5781] ? find_held_lock+0x2d/0x110 [ 584.607706][ T5781] ? up_write+0x1b3/0x510 [ 584.609323][ T5781] kernfs_new_node+0x94/0x110 [ 584.611742][ T5781] __kernfs_create_file+0x53/0x340 [ 584.613794][ T5781] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 584.615786][ T5781] internal_create_group+0x31c/0xb40 [ 584.617747][ T5781] ? sysfs_remove_group+0x170/0x170 [ 584.619681][ T5781] ? kernfs_create_link+0x1b6/0x230 [ 584.621611][ T5781] internal_create_groups+0x9d/0x150 [ 584.624093][ T5781] device_add+0x710/0x1b40 [ 584.625879][ T5781] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 584.628392][ T5781] ? __init_waitqueue_head+0xca/0x150 [ 584.630389][ T5781] rfkill_register+0x1a9/0xb00 [ 584.632227][ T5781] nfc_register_device+0x11f/0x3c0 [ 584.634115][ T5781] nci_register_device+0x7f4/0xb80 02:42:32 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 82) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x16}, 0x48) 02:42:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x6}, 0x48) [ 584.636014][ T5781] ? nci_init_complete_req+0x410/0x410 [ 584.638415][ T5781] virtual_ncidev_open+0x147/0x220 [ 584.640328][ T5781] ? virtual_ncidev_read+0x4e0/0x4e0 [ 584.642427][ T5781] misc_open+0x3da/0x4c0 [ 584.644082][ T5781] ? misc_devnode+0x120/0x120 [ 584.645831][ T5781] chrdev_open+0x277/0x700 [ 584.647500][ T5781] ? __unregister_chrdev+0x100/0x100 [ 584.649457][ T5781] ? fsnotify_perm.part.0+0x25d/0x630 [ 584.651478][ T5781] ? fsnotify_perm.part.0+0x268/0x630 [ 584.653508][ T5781] do_dentry_open+0x88b/0x1780 [ 584.655281][ T5781] ? __unregister_chrdev+0x100/0x100 [ 584.657242][ T5781] ? may_open+0x1f2/0x400 [ 584.658846][ T5781] path_openat+0x19af/0x29c0 [ 584.660586][ T5781] ? path_lookupat+0x770/0x770 [ 584.662390][ T5781] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 584.664619][ T5781] do_filp_open+0x1de/0x430 [ 584.666304][ T5781] ? may_open_dev+0xf0/0xf0 [ 584.668012][ T5781] ? _raw_spin_unlock+0x28/0x40 [ 584.669820][ T5781] ? alloc_fd+0x2da/0x6c0 [ 584.671459][ T5781] do_sys_openat2+0x176/0x1e0 [ 584.673328][ T5781] ? build_open_flags+0x690/0x690 [ 584.675192][ T5781] __ia32_compat_sys_openat+0x16e/0x200 [ 584.677255][ T5781] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 584.679269][ T5781] ? ksys_write+0x1a7/0x250 [ 584.680984][ T5781] __do_fast_syscall_32+0x61/0xe0 [ 584.682860][ T5781] do_fast_syscall_32+0x33/0x70 [ 584.684733][ T5781] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 584.687179][ T5781] RIP: 0023:0xf7f9e579 [ 584.688722][ T5781] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 584.695942][ T5781] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 584.699020][ T5781] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 584.701979][ T5781] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 584.705488][ T5781] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 584.708417][ T5781] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 584.711358][ T5781] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 584.714318][ T5781] 02:42:32 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 82) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x6}, 0x48) 02:42:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x17}, 0x48) [ 584.747262][ T5798] FAULT_INJECTION: forcing a failure. [ 584.747262][ T5798] name failslab, interval 1, probability 0, space 0, times 0 [ 584.752041][ T5798] CPU: 1 PID: 5798 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 584.755980][ T5798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 584.759717][ T5798] Call Trace: [ 584.760955][ T5798] [ 584.762106][ T5798] dump_stack_lvl+0x125/0x1b0 02:42:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x6}, 0x48) [ 584.764405][ T5798] should_fail_ex+0x496/0x5b0 [ 584.766448][ T5798] should_failslab+0x9/0x20 [ 584.768167][ T5798] kmem_cache_alloc+0x33a/0x3b0 [ 584.769999][ T5798] __kernfs_new_node+0xd3/0x8a0 02:42:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x18}, 0x48) [ 584.771806][ T5798] ? kernfs_add_one+0x3ca/0x510 [ 584.774051][ T5798] ? kernfs_path_from_node+0x60/0x60 [ 584.776053][ T5798] ? find_held_lock+0x2d/0x110 [ 584.777840][ T5798] ? up_write+0x1b3/0x510 [ 584.779456][ T5798] kernfs_new_node+0x94/0x110 [ 584.781202][ T5798] __kernfs_create_file+0x53/0x340 [ 584.783478][ T5798] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 584.785855][ T5798] internal_create_group+0x31c/0xb40 [ 584.787969][ T5798] ? sysfs_remove_group+0x170/0x170 [ 584.789875][ T5798] ? kernfs_create_link+0x1b6/0x230 [ 584.791816][ T5798] internal_create_groups+0x9d/0x150 [ 584.793825][ T5798] device_add+0x710/0x1b40 [ 584.795483][ T5798] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 584.797987][ T5798] ? __init_waitqueue_head+0xca/0x150 [ 584.799959][ T5798] rfkill_register+0x1a9/0xb00 [ 584.801721][ T5798] nfc_register_device+0x11f/0x3c0 [ 584.804117][ T5798] nci_register_device+0x7f4/0xb80 [ 584.806187][ T5798] ? nci_init_complete_req+0x410/0x410 [ 584.808450][ T5798] virtual_ncidev_open+0x147/0x220 [ 584.810518][ T5798] ? virtual_ncidev_read+0x4e0/0x4e0 [ 584.812559][ T5798] misc_open+0x3da/0x4c0 [ 584.814184][ T5798] ? misc_devnode+0x120/0x120 [ 584.815947][ T5798] chrdev_open+0x277/0x700 [ 584.817606][ T5798] ? __unregister_chrdev+0x100/0x100 [ 584.819573][ T5798] ? fsnotify_perm.part.0+0x25d/0x630 [ 584.821550][ T5798] ? fsnotify_perm.part.0+0x268/0x630 [ 584.824051][ T5798] do_dentry_open+0x88b/0x1780 [ 584.825971][ T5798] ? __unregister_chrdev+0x100/0x100 [ 584.827950][ T5798] ? may_open+0x1f2/0x400 [ 584.829554][ T5798] path_openat+0x19af/0x29c0 [ 584.831289][ T5798] ? path_lookupat+0x770/0x770 [ 584.833118][ T5798] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 584.835328][ T5798] do_filp_open+0x1de/0x430 [ 584.837027][ T5798] ? may_open_dev+0xf0/0xf0 [ 584.838724][ T5798] ? _raw_spin_unlock+0x28/0x40 [ 584.840532][ T5798] ? alloc_fd+0x2da/0x6c0 [ 584.842215][ T5798] do_sys_openat2+0x176/0x1e0 [ 584.844494][ T5798] ? build_open_flags+0x690/0x690 [ 584.846391][ T5798] __ia32_compat_sys_openat+0x16e/0x200 [ 584.848435][ T5798] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 584.850464][ T5798] ? ksys_write+0x1a7/0x250 [ 584.852210][ T5798] __do_fast_syscall_32+0x61/0xe0 [ 584.854070][ T5798] do_fast_syscall_32+0x33/0x70 [ 584.855873][ T5798] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 584.858221][ T5798] RIP: 0023:0xf7f8d579 [ 584.859751][ T5798] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 584.866947][ T5798] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 584.870015][ T5798] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 584.872972][ T5798] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 584.875873][ T5798] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 584.878777][ T5798] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 584.881692][ T5798] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 584.884698][ T5798] [ 584.890817][ T5807] FAULT_INJECTION: forcing a failure. [ 584.890817][ T5807] name failslab, interval 1, probability 0, space 0, times 0 [ 584.895661][ T5807] CPU: 1 PID: 5807 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 584.899454][ T5807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 584.903186][ T5807] Call Trace: [ 584.904753][ T5807] [ 584.906132][ T5807] dump_stack_lvl+0x125/0x1b0 [ 584.908065][ T5807] should_fail_ex+0x496/0x5b0 02:42:32 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 83) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x19}, 0x48) 02:42:32 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 584.909832][ T5807] should_failslab+0x9/0x20 [ 584.911909][ T5807] kmem_cache_alloc+0x33a/0x3b0 [ 584.913753][ T5807] __kernfs_new_node+0xd3/0x8a0 [ 584.915579][ T5807] ? kernfs_add_one+0x3ca/0x510 [ 584.917372][ T5807] ? kernfs_path_from_node+0x60/0x60 [ 584.919319][ T5807] ? find_held_lock+0x2d/0x110 [ 584.921104][ T5807] ? up_write+0x1b3/0x510 [ 584.922745][ T5807] kernfs_new_node+0x94/0x110 [ 584.924500][ T5807] __kernfs_create_file+0x53/0x340 [ 584.926386][ T5807] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 584.928376][ T5807] internal_create_group+0x31c/0xb40 [ 584.930318][ T5807] ? sysfs_remove_group+0x170/0x170 [ 584.932297][ T5807] ? kernfs_create_link+0x1b6/0x230 [ 584.934271][ T5807] internal_create_groups+0x9d/0x150 [ 584.936231][ T5807] device_add+0x710/0x1b40 [ 584.937893][ T5807] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 584.940406][ T5807] ? __init_waitqueue_head+0xca/0x150 [ 584.942393][ T5807] rfkill_register+0x1a9/0xb00 [ 584.944173][ T5807] nfc_register_device+0x11f/0x3c0 [ 584.946057][ T5807] nci_register_device+0x7f4/0xb80 [ 584.947948][ T5807] ? nci_init_complete_req+0x410/0x410 [ 584.950031][ T5807] virtual_ncidev_open+0x147/0x220 [ 584.951975][ T5807] ? virtual_ncidev_read+0x4e0/0x4e0 [ 584.953925][ T5807] misc_open+0x3da/0x4c0 [ 584.955496][ T5807] ? misc_devnode+0x120/0x120 [ 584.957220][ T5807] chrdev_open+0x277/0x700 [ 584.958866][ T5807] ? __unregister_chrdev+0x100/0x100 [ 584.960811][ T5807] ? fsnotify_perm.part.0+0x25d/0x630 [ 584.962778][ T5807] ? fsnotify_perm.part.0+0x268/0x630 [ 584.964791][ T5807] do_dentry_open+0x88b/0x1780 [ 584.966557][ T5807] ? __unregister_chrdev+0x100/0x100 [ 584.968534][ T5807] ? may_open+0x1f2/0x400 [ 584.970112][ T5807] path_openat+0x19af/0x29c0 [ 584.971864][ T5807] ? path_lookupat+0x770/0x770 [ 584.973775][ T5807] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 584.975988][ T5807] do_filp_open+0x1de/0x430 [ 584.977670][ T5807] ? may_open_dev+0xf0/0xf0 [ 584.979362][ T5807] ? _raw_spin_unlock+0x28/0x40 [ 584.981178][ T5807] ? alloc_fd+0x2da/0x6c0 [ 584.982784][ T5807] do_sys_openat2+0x176/0x1e0 [ 584.984535][ T5807] ? build_open_flags+0x690/0x690 [ 584.986421][ T5807] __ia32_compat_sys_openat+0x16e/0x200 [ 584.988473][ T5807] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 584.990467][ T5807] ? ksys_write+0x1a7/0x250 [ 584.992283][ T5807] __do_fast_syscall_32+0x61/0xe0 [ 584.994136][ T5807] do_fast_syscall_32+0x33/0x70 [ 584.995946][ T5807] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 584.998262][ T5807] RIP: 0023:0xf7f9e579 [ 584.999811][ T5807] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 585.007102][ T5807] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 585.010144][ T5807] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 585.013188][ T5807] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.016088][ T5807] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 585.018962][ T5807] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 585.021845][ T5807] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 585.024701][ T5807] [ 585.031215][ T5818] FAULT_INJECTION: forcing a failure. [ 585.031215][ T5818] name failslab, interval 1, probability 0, space 0, times 0 [ 585.035931][ T5818] CPU: 0 PID: 5818 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 585.039956][ T5818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 585.044230][ T5818] Call Trace: [ 585.045503][ T5818] [ 585.046584][ T5818] dump_stack_lvl+0x125/0x1b0 [ 585.048309][ T5818] should_fail_ex+0x496/0x5b0 [ 585.050026][ T5818] should_failslab+0x9/0x20 [ 585.051706][ T5818] kmem_cache_alloc+0x33a/0x3b0 [ 585.053643][ T5818] __kernfs_new_node+0xd3/0x8a0 [ 585.055678][ T5818] ? kernfs_add_one+0x3ca/0x510 [ 585.057465][ T5818] ? kernfs_path_from_node+0x60/0x60 [ 585.059600][ T5818] ? find_held_lock+0x2d/0x110 [ 585.061482][ T5818] ? up_write+0x1b3/0x510 [ 585.063411][ T5818] kernfs_new_node+0x94/0x110 [ 585.065521][ T5818] __kernfs_create_file+0x53/0x340 [ 585.067805][ T5818] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 585.070095][ T5818] internal_create_group+0x31c/0xb40 [ 585.072208][ T5818] ? sysfs_remove_group+0x170/0x170 [ 585.074163][ T5818] ? kernfs_create_link+0x1b6/0x230 [ 585.076160][ T5818] internal_create_groups+0x9d/0x150 [ 585.078105][ T5818] device_add+0x710/0x1b40 [ 585.079765][ T5818] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 585.082268][ T5818] ? __init_waitqueue_head+0xca/0x150 [ 585.084257][ T5818] rfkill_register+0x1a9/0xb00 [ 585.086009][ T5818] nfc_register_device+0x11f/0x3c0 [ 585.087895][ T5818] nci_register_device+0x7f4/0xb80 [ 585.089785][ T5818] ? nci_init_complete_req+0x410/0x410 [ 585.091842][ T5818] virtual_ncidev_open+0x147/0x220 [ 585.093742][ T5818] ? virtual_ncidev_read+0x4e0/0x4e0 [ 585.095660][ T5818] misc_open+0x3da/0x4c0 [ 585.097211][ T5818] ? misc_devnode+0x120/0x120 [ 585.098937][ T5818] chrdev_open+0x277/0x700 [ 585.100585][ T5818] ? __unregister_chrdev+0x100/0x100 [ 585.102597][ T5818] ? fsnotify_perm.part.0+0x25d/0x630 [ 585.104575][ T5818] ? fsnotify_perm.part.0+0x268/0x630 [ 585.106727][ T5818] do_dentry_open+0x88b/0x1780 [ 585.108751][ T5818] ? __unregister_chrdev+0x100/0x100 [ 585.110677][ T5818] ? may_open+0x1f2/0x400 [ 585.112431][ T5818] path_openat+0x19af/0x29c0 [ 585.114546][ T5818] ? path_lookupat+0x770/0x770 [ 585.116747][ T5818] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 585.119495][ T5818] do_filp_open+0x1de/0x430 [ 585.121516][ T5818] ? may_open_dev+0xf0/0xf0 [ 585.123293][ T5818] ? _raw_spin_unlock+0x28/0x40 [ 585.125128][ T5818] ? alloc_fd+0x2da/0x6c0 [ 585.126742][ T5818] do_sys_openat2+0x176/0x1e0 [ 585.128479][ T5818] ? build_open_flags+0x690/0x690 [ 585.130310][ T5818] __ia32_compat_sys_openat+0x16e/0x200 [ 585.132371][ T5818] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 585.135081][ T5818] ? ksys_write+0x1a7/0x250 [ 585.137309][ T5818] __do_fast_syscall_32+0x61/0xe0 [ 585.139800][ T5818] do_fast_syscall_32+0x33/0x70 [ 585.142086][ T5818] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 585.145015][ T5818] RIP: 0023:0xf7f8d579 [ 585.146914][ T5818] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 585.154799][ T5818] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 585.157832][ T5818] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 585.160698][ T5818] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.163854][ T5818] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 585.166715][ T5818] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 585.169617][ T5818] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 585.172567][ T5818] 02:42:32 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 83) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1a}, 0x48) 02:42:32 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1b}, 0x48) 02:42:32 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 585.202435][ T5832] FAULT_INJECTION: forcing a failure. [ 585.202435][ T5832] name failslab, interval 1, probability 0, space 0, times 0 [ 585.208009][ T5832] CPU: 0 PID: 5832 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 585.212350][ T5832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 585.216146][ T5832] Call Trace: [ 585.217644][ T5832] [ 585.218963][ T5832] dump_stack_lvl+0x125/0x1b0 02:42:33 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 84) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) [ 585.221089][ T5832] should_fail_ex+0x496/0x5b0 [ 585.223622][ T5832] should_failslab+0x9/0x20 [ 585.225747][ T5832] kmem_cache_alloc+0x33a/0x3b0 [ 585.227935][ T5832] __kernfs_new_node+0xd3/0x8a0 02:42:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1c}, 0x48) [ 585.229749][ T5832] ? kernfs_add_one+0x3ca/0x510 [ 585.232102][ T5832] ? kernfs_path_from_node+0x60/0x60 [ 585.234339][ T5832] ? find_held_lock+0x2d/0x110 [ 585.236167][ T5832] ? up_write+0x1b3/0x510 [ 585.237799][ T5832] kernfs_new_node+0x94/0x110 [ 585.239563][ T5832] __kernfs_create_file+0x53/0x340 [ 585.241466][ T5832] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 585.243527][ T5832] internal_create_group+0x31c/0xb40 [ 585.245485][ T5832] ? sysfs_remove_group+0x170/0x170 [ 585.247833][ T5832] ? kernfs_create_link+0x1b6/0x230 [ 585.250161][ T5832] internal_create_groups+0x9d/0x150 [ 585.252504][ T5832] device_add+0x710/0x1b40 [ 585.254159][ T5832] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 585.256605][ T5832] ? __init_waitqueue_head+0xca/0x150 [ 585.258394][ T5832] rfkill_register+0x1a9/0xb00 [ 585.260182][ T5832] nfc_register_device+0x11f/0x3c0 [ 585.262115][ T5832] nci_register_device+0x7f4/0xb80 [ 585.264460][ T5832] ? nci_init_complete_req+0x410/0x410 [ 585.266907][ T5832] virtual_ncidev_open+0x147/0x220 [ 585.269249][ T5832] ? virtual_ncidev_read+0x4e0/0x4e0 [ 585.271688][ T5832] misc_open+0x3da/0x4c0 [ 585.273656][ T5832] ? misc_devnode+0x120/0x120 [ 585.275802][ T5832] chrdev_open+0x277/0x700 [ 585.277612][ T5832] ? __unregister_chrdev+0x100/0x100 [ 585.279568][ T5832] ? fsnotify_perm.part.0+0x25d/0x630 [ 585.281525][ T5832] ? fsnotify_perm.part.0+0x268/0x630 [ 585.283982][ T5832] do_dentry_open+0x88b/0x1780 [ 585.285932][ T5832] ? __unregister_chrdev+0x100/0x100 [ 585.287876][ T5832] ? may_open+0x1f2/0x400 [ 585.289475][ T5832] path_openat+0x19af/0x29c0 [ 585.291196][ T5832] ? path_lookupat+0x770/0x770 [ 585.293100][ T5832] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 585.295295][ T5832] do_filp_open+0x1de/0x430 [ 585.296988][ T5832] ? may_open_dev+0xf0/0xf0 [ 585.298666][ T5832] ? _raw_spin_unlock+0x28/0x40 [ 585.300584][ T5832] ? alloc_fd+0x2da/0x6c0 [ 585.302261][ T5832] do_sys_openat2+0x176/0x1e0 [ 585.304051][ T5832] ? build_open_flags+0x690/0x690 [ 585.305902][ T5832] __ia32_compat_sys_openat+0x16e/0x200 [ 585.307989][ T5832] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 585.309980][ T5832] ? ksys_write+0x1a7/0x250 [ 585.311684][ T5832] __do_fast_syscall_32+0x61/0xe0 [ 585.313562][ T5832] do_fast_syscall_32+0x33/0x70 [ 585.315348][ T5832] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 585.317679][ T5832] RIP: 0023:0xf7f9e579 [ 585.319179][ T5832] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 585.326219][ T5832] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 585.329286][ T5832] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 585.332222][ T5832] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.335110][ T5832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 585.338004][ T5832] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 585.340884][ T5832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 585.343794][ T5832] [ 585.348411][ T5843] FAULT_INJECTION: forcing a failure. [ 585.348411][ T5843] name failslab, interval 1, probability 0, space 0, times 0 [ 585.353054][ T5843] CPU: 2 PID: 5843 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 585.356813][ T5843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 02:42:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:33 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 84) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1d}, 0x48) [ 585.360500][ T5843] Call Trace: [ 585.362013][ T5843] [ 585.363128][ T5843] dump_stack_lvl+0x125/0x1b0 [ 585.364852][ T5843] should_fail_ex+0x496/0x5b0 [ 585.366600][ T5843] should_failslab+0x9/0x20 [ 585.368287][ T5843] kmem_cache_alloc+0x33a/0x3b0 [ 585.370074][ T5843] ? lockdep_hardirqs_on_prepare+0x410/0x410 02:42:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) [ 585.372281][ T5843] __kernfs_new_node+0xd3/0x8a0 [ 585.374307][ T5843] ? kernfs_path_from_node+0x60/0x60 [ 585.376330][ T5843] ? lock_sync+0x190/0x190 [ 585.377963][ T5843] ? find_held_lock+0x2d/0x110 02:42:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1e}, 0x48) [ 585.379728][ T5843] kernfs_new_node+0x94/0x110 [ 585.381629][ T5843] __kernfs_create_file+0x53/0x340 [ 585.383611][ T5843] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 585.385576][ T5843] sysfs_merge_group+0x1b1/0x330 [ 585.387771][ T5843] ? sysfs_update_groups+0x30/0x30 [ 585.389708][ T5843] ? panel_show+0xf0/0xf0 [ 585.391336][ T5843] ? bus_to_subsys+0x129/0x160 [ 585.393127][ T5843] dpm_sysfs_add+0x22f/0x280 [ 585.394833][ T5843] device_add+0x9e5/0x1b40 [ 585.396504][ T5843] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 585.398971][ T5843] ? __init_waitqueue_head+0xca/0x150 [ 585.400928][ T5843] rfkill_register+0x1a9/0xb00 [ 585.402717][ T5843] nfc_register_device+0x11f/0x3c0 [ 585.404650][ T5843] nci_register_device+0x7f4/0xb80 [ 585.406529][ T5843] ? nci_init_complete_req+0x410/0x410 [ 585.408545][ T5843] virtual_ncidev_open+0x147/0x220 [ 585.410425][ T5843] ? virtual_ncidev_read+0x4e0/0x4e0 [ 585.412399][ T5843] misc_open+0x3da/0x4c0 [ 585.413970][ T5843] ? misc_devnode+0x120/0x120 [ 585.415742][ T5843] chrdev_open+0x277/0x700 [ 585.417404][ T5843] ? __unregister_chrdev+0x100/0x100 [ 585.419341][ T5843] ? fsnotify_perm.part.0+0x25d/0x630 [ 585.421317][ T5843] ? fsnotify_perm.part.0+0x268/0x630 [ 585.423289][ T5843] do_dentry_open+0x88b/0x1780 [ 585.425068][ T5843] ? __unregister_chrdev+0x100/0x100 [ 585.426989][ T5843] ? may_open+0x1f2/0x400 [ 585.428597][ T5843] path_openat+0x19af/0x29c0 [ 585.430314][ T5843] ? path_lookupat+0x770/0x770 [ 585.432142][ T5843] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 585.434386][ T5843] do_filp_open+0x1de/0x430 [ 585.436109][ T5843] ? may_open_dev+0xf0/0xf0 [ 585.437930][ T5843] ? _raw_spin_unlock+0x28/0x40 [ 585.439721][ T5843] ? alloc_fd+0x2da/0x6c0 [ 585.441312][ T5843] do_sys_openat2+0x176/0x1e0 [ 585.443056][ T5843] ? build_open_flags+0x690/0x690 [ 585.444913][ T5843] __ia32_compat_sys_openat+0x16e/0x200 [ 585.446943][ T5843] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 585.448944][ T5843] ? ksys_write+0x1a7/0x250 [ 585.450627][ T5843] __do_fast_syscall_32+0x61/0xe0 [ 585.452528][ T5843] do_fast_syscall_32+0x33/0x70 [ 585.454335][ T5843] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 585.456673][ T5843] RIP: 0023:0xf7f8d579 [ 585.458173][ T5843] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 585.465188][ T5843] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 585.468234][ T5843] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 585.471126][ T5843] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.474041][ T5843] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 585.476979][ T5843] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 585.479898][ T5843] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 585.482824][ T5843] [ 585.486904][ T5856] FAULT_INJECTION: forcing a failure. [ 585.486904][ T5856] name failslab, interval 1, probability 0, space 0, times 0 [ 585.491532][ T5856] CPU: 2 PID: 5856 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 585.495298][ T5856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 585.499007][ T5856] Call Trace: [ 585.500267][ T5856] [ 585.501371][ T5856] dump_stack_lvl+0x125/0x1b0 [ 585.503116][ T5856] should_fail_ex+0x496/0x5b0 [ 585.504894][ T5856] should_failslab+0x9/0x20 [ 585.506584][ T5856] __kmem_cache_alloc_node+0x2fd/0x350 02:42:33 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 85) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:33 executing program 1: bpf$MAP_CREATE(0x14, &(0x7f0000000940)=@base={0x13}, 0x48) 02:42:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x21}, 0x48) [ 585.508600][ T5856] ? device_add+0xd0c/0x1b40 [ 585.510566][ T5856] kmalloc_trace+0x25/0xe0 [ 585.512246][ T5856] device_add+0xd0c/0x1b40 [ 585.513883][ T5856] ? dev_set_name+0xc8/0x100 [ 585.515598][ T5856] ? device_initialize+0x540/0x540 [ 585.517464][ T5856] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 585.519955][ T5856] ? __init_waitqueue_head+0xca/0x150 [ 585.521913][ T5856] rfkill_register+0x1a9/0xb00 [ 585.523685][ T5856] nfc_register_device+0x11f/0x3c0 [ 585.525550][ T5856] nci_register_device+0x7f4/0xb80 [ 585.527444][ T5856] ? nci_init_complete_req+0x410/0x410 [ 585.529442][ T5856] virtual_ncidev_open+0x147/0x220 [ 585.531329][ T5856] ? virtual_ncidev_read+0x4e0/0x4e0 [ 585.533283][ T5856] misc_open+0x3da/0x4c0 [ 585.534843][ T5856] ? misc_devnode+0x120/0x120 02:42:33 executing program 1: bpf$MAP_CREATE(0x14, &(0x7f0000000940)=@base={0x13}, 0x48) [ 585.536574][ T5856] chrdev_open+0x277/0x700 [ 585.538449][ T5856] ? __unregister_chrdev+0x100/0x100 [ 585.540482][ T5856] ? fsnotify_perm.part.0+0x25d/0x630 [ 585.542439][ T5856] ? fsnotify_perm.part.0+0x268/0x630 [ 585.544348][ T5856] do_dentry_open+0x88b/0x1780 [ 585.546100][ T5856] ? __unregister_chrdev+0x100/0x100 [ 585.548061][ T5856] ? may_open+0x1f2/0x400 [ 585.549641][ T5856] path_openat+0x19af/0x29c0 [ 585.551352][ T5856] ? path_lookupat+0x770/0x770 [ 585.553243][ T5856] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 585.555509][ T5856] do_filp_open+0x1de/0x430 [ 585.557199][ T5856] ? may_open_dev+0xf0/0xf0 [ 585.558880][ T5856] ? _raw_spin_unlock+0x28/0x40 [ 585.560698][ T5856] ? alloc_fd+0x2da/0x6c0 [ 585.562307][ T5856] do_sys_openat2+0x176/0x1e0 [ 585.564085][ T5856] ? build_open_flags+0x690/0x690 [ 585.565949][ T5856] __ia32_compat_sys_openat+0x16e/0x200 [ 585.568021][ T5856] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 585.570151][ T5856] ? ksys_write+0x1a7/0x250 [ 585.571869][ T5856] __do_fast_syscall_32+0x61/0xe0 [ 585.573732][ T5856] do_fast_syscall_32+0x33/0x70 [ 585.575531][ T5856] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 585.577828][ T5856] RIP: 0023:0xf7f9e579 [ 585.579331][ T5856] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 585.586279][ T5856] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 585.589335][ T5856] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 585.592241][ T5856] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.595122][ T5856] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 585.598032][ T5856] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 585.600883][ T5856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 585.603796][ T5856] [ 585.608430][ T5869] FAULT_INJECTION: forcing a failure. [ 585.608430][ T5869] name failslab, interval 1, probability 0, space 0, times 0 [ 585.613704][ T5869] CPU: 2 PID: 5869 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 585.617463][ T5869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 585.621125][ T5869] Call Trace: [ 585.622359][ T5869] [ 585.623468][ T5869] dump_stack_lvl+0x125/0x1b0 [ 585.625200][ T5869] should_fail_ex+0x496/0x5b0 [ 585.626949][ T5869] should_failslab+0x9/0x20 [ 585.628611][ T5869] kmem_cache_alloc+0x33a/0x3b0 [ 585.630411][ T5869] ? kstrdup+0x5c/0x70 02:42:33 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 85) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:33 executing program 1: bpf$MAP_CREATE(0x14, &(0x7f0000000940)=@base={0x13}, 0x48) 02:42:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x22}, 0x48) [ 585.631942][ T5869] __kernfs_new_node+0xd3/0x8a0 [ 585.633947][ T5869] ? kernfs_path_from_node+0x60/0x60 [ 585.635959][ T5869] ? __lock_acquire+0x182f/0x5de0 [ 585.637824][ T5869] kernfs_create_dir_ns+0x9a/0x210 [ 585.639724][ T5869] sysfs_create_dir_ns+0x13b/0x2a0 [ 585.641664][ T5869] ? sysfs_create_mount_point+0xb0/0xb0 [ 585.643708][ T5869] ? spin_bug+0x1d0/0x1d0 [ 585.645294][ T5869] ? do_raw_spin_unlock+0x173/0x230 [ 585.647187][ T5869] kobject_add_internal+0x2c8/0x990 [ 585.649119][ T5869] kobject_add+0x16f/0x240 02:42:33 executing program 1: bpf$MAP_CREATE(0x14, 0x0, 0x0) [ 585.650775][ T5869] ? kset_create_and_add+0x190/0x190 [ 585.652975][ T5869] ? do_raw_spin_unlock+0x173/0x230 [ 585.654955][ T5869] ? kobject_put+0xbe/0x5b0 [ 585.656654][ T5869] device_add+0x2b3/0x1b40 [ 585.658297][ T5869] ? device_initialize+0x540/0x540 [ 585.660178][ T5869] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 585.662667][ T5869] ? __init_waitqueue_head+0xca/0x150 [ 585.664666][ T5869] rfkill_register+0x1a9/0xb00 [ 585.666429][ T5869] nfc_register_device+0x11f/0x3c0 [ 585.668330][ T5869] nci_register_device+0x7f4/0xb80 [ 585.670210][ T5869] ? nci_init_complete_req+0x410/0x410 [ 585.672242][ T5869] virtual_ncidev_open+0x147/0x220 [ 585.674125][ T5869] ? virtual_ncidev_read+0x4e0/0x4e0 [ 585.676078][ T5869] misc_open+0x3da/0x4c0 [ 585.677640][ T5869] ? misc_devnode+0x120/0x120 [ 585.679396][ T5869] chrdev_open+0x277/0x700 [ 585.681039][ T5869] ? __unregister_chrdev+0x100/0x100 [ 585.682960][ T5869] ? fsnotify_perm.part.0+0x25d/0x630 [ 585.684941][ T5869] ? fsnotify_perm.part.0+0x268/0x630 [ 585.686904][ T5869] do_dentry_open+0x88b/0x1780 [ 585.688677][ T5869] ? __unregister_chrdev+0x100/0x100 [ 585.690619][ T5869] ? may_open+0x1f2/0x400 [ 585.692239][ T5869] path_openat+0x19af/0x29c0 [ 585.694029][ T5869] ? path_lookupat+0x770/0x770 [ 585.695827][ T5869] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 585.698038][ T5869] do_filp_open+0x1de/0x430 [ 585.699742][ T5869] ? may_open_dev+0xf0/0xf0 [ 585.701420][ T5869] ? _raw_spin_unlock+0x28/0x40 [ 585.703213][ T5869] ? alloc_fd+0x2da/0x6c0 [ 585.704822][ T5869] do_sys_openat2+0x176/0x1e0 [ 585.706547][ T5869] ? build_open_flags+0x690/0x690 [ 585.708409][ T5869] __ia32_compat_sys_openat+0x16e/0x200 [ 585.710445][ T5869] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 585.712470][ T5869] ? ksys_write+0x1a7/0x250 [ 585.714145][ T5869] __do_fast_syscall_32+0x61/0xe0 [ 585.716009][ T5869] do_fast_syscall_32+0x33/0x70 [ 585.717796][ T5869] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 585.720134][ T5869] RIP: 0023:0xf7f8d579 [ 585.721638][ T5869] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 585.728716][ T5869] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 585.731911][ T5869] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 585.734790][ T5869] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.737686][ T5869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 585.740584][ T5869] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 585.743493][ T5869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 585.746428][ T5869] [ 585.752291][ T5869] kobject: kobject_add_internal failed for rfkill890 (error: -12 parent: nfc2) [ 585.766537][ T5883] FAULT_INJECTION: forcing a failure. [ 585.766537][ T5883] name failslab, interval 1, probability 0, space 0, times 0 [ 585.772144][ T5883] CPU: 0 PID: 5883 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 585.776795][ T5883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 585.781301][ T5883] Call Trace: [ 585.782951][ T5883] [ 585.784283][ T5883] dump_stack_lvl+0x125/0x1b0 [ 585.786427][ T5883] should_fail_ex+0x496/0x5b0 [ 585.788572][ T5883] should_failslab+0x9/0x20 [ 585.790644][ T5883] kmem_cache_alloc+0x33a/0x3b0 [ 585.792923][ T5883] __kernfs_new_node+0xd3/0x8a0 [ 585.794836][ T5883] ? kernfs_add_one+0x3ca/0x510 [ 585.796780][ T5883] ? kernfs_path_from_node+0x60/0x60 [ 585.798757][ T5883] ? up_write+0x1b3/0x510 [ 585.800398][ T5883] kernfs_new_node+0x94/0x110 [ 585.802153][ T5883] __kernfs_create_file+0x53/0x340 [ 585.804074][ T5883] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 585.806485][ T5883] sysfs_merge_group+0x1b1/0x330 [ 585.809146][ T5883] ? sysfs_update_groups+0x30/0x30 02:42:33 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 86) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x23}, 0x48) 02:42:33 executing program 1: bpf$MAP_CREATE(0x14, 0x0, 0x0) [ 585.811493][ T5883] ? panel_show+0xf0/0xf0 [ 585.813311][ T5883] ? bus_to_subsys+0x129/0x160 [ 585.815099][ T5883] dpm_sysfs_add+0x22f/0x280 [ 585.816884][ T5883] device_add+0x9e5/0x1b40 [ 585.818557][ T5883] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 585.821080][ T5883] ? __init_waitqueue_head+0xca/0x150 [ 585.823059][ T5883] rfkill_register+0x1a9/0xb00 02:42:33 executing program 1: bpf$MAP_CREATE(0x14, 0x0, 0x0) [ 585.824861][ T5883] nfc_register_device+0x11f/0x3c0 [ 585.826997][ T5883] nci_register_device+0x7f4/0xb80 [ 585.828913][ T5883] ? nci_init_complete_req+0x410/0x410 [ 585.830952][ T5883] virtual_ncidev_open+0x147/0x220 [ 585.832912][ T5883] ? virtual_ncidev_read+0x4e0/0x4e0 [ 585.834978][ T5883] misc_open+0x3da/0x4c0 [ 585.836621][ T5883] ? misc_devnode+0x120/0x120 [ 585.838369][ T5883] chrdev_open+0x277/0x700 [ 585.840056][ T5883] ? __unregister_chrdev+0x100/0x100 [ 585.842005][ T5883] ? fsnotify_perm.part.0+0x25d/0x630 [ 585.843993][ T5883] ? fsnotify_perm.part.0+0x268/0x630 [ 585.845964][ T5883] do_dentry_open+0x88b/0x1780 [ 585.847732][ T5883] ? __unregister_chrdev+0x100/0x100 [ 585.849670][ T5883] ? may_open+0x1f2/0x400 [ 585.851282][ T5883] path_openat+0x19af/0x29c0 [ 585.853012][ T5883] ? path_lookupat+0x770/0x770 [ 585.855131][ T5883] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 585.857842][ T5883] do_filp_open+0x1de/0x430 [ 585.859898][ T5883] ? may_open_dev+0xf0/0xf0 [ 585.862004][ T5883] ? _raw_spin_unlock+0x28/0x40 [ 585.864175][ T5883] ? alloc_fd+0x2da/0x6c0 [ 585.866131][ T5883] do_sys_openat2+0x176/0x1e0 [ 585.868277][ T5883] ? build_open_flags+0x690/0x690 [ 585.870572][ T5883] __ia32_compat_sys_openat+0x16e/0x200 [ 585.873105][ T5883] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 585.875559][ T5883] ? ksys_write+0x1a7/0x250 [ 585.877620][ T5883] __do_fast_syscall_32+0x61/0xe0 [ 585.879881][ T5883] do_fast_syscall_32+0x33/0x70 [ 585.882066][ T5883] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 585.884940][ T5883] RIP: 0023:0xf7f9e579 [ 585.886773][ T5883] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 585.895313][ T5883] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 585.899035][ T5883] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 585.902595][ T5883] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.905644][ T5883] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 585.908531][ T5883] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 585.911419][ T5883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 585.914389][ T5883] [ 585.921592][ T5895] FAULT_INJECTION: forcing a failure. [ 585.921592][ T5895] name failslab, interval 1, probability 0, space 0, times 0 [ 585.929058][ T5895] CPU: 1 PID: 5895 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 585.933105][ T5895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 585.937040][ T5895] Call Trace: [ 585.938407][ T5895] [ 585.939573][ T5895] dump_stack_lvl+0x125/0x1b0 [ 585.941509][ T5895] should_fail_ex+0x496/0x5b0 [ 585.943320][ T5895] should_failslab+0x9/0x20 [ 585.945032][ T5895] kmem_cache_alloc+0x33a/0x3b0 [ 585.946819][ T5895] __kernfs_new_node+0xd3/0x8a0 [ 585.948833][ T5895] ? kernfs_add_one+0x3ca/0x510 [ 585.950736][ T5895] ? kernfs_path_from_node+0x60/0x60 [ 585.952788][ T5895] ? up_write+0x1b3/0x510 [ 585.954504][ T5895] kernfs_new_node+0x94/0x110 [ 585.956321][ T5895] __kernfs_create_file+0x53/0x340 [ 585.958284][ T5895] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 585.960430][ T5895] sysfs_merge_group+0x1b1/0x330 [ 585.962436][ T5895] ? sysfs_update_groups+0x30/0x30 [ 585.964528][ T5895] ? panel_show+0xf0/0xf0 [ 585.966234][ T5895] ? bus_to_subsys+0x129/0x160 [ 585.968043][ T5895] dpm_sysfs_add+0x22f/0x280 [ 585.969806][ T5895] device_add+0x9e5/0x1b40 [ 585.971531][ T5895] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 585.974084][ T5895] ? __init_waitqueue_head+0xca/0x150 [ 585.976108][ T5895] rfkill_register+0x1a9/0xb00 [ 585.977937][ T5895] nfc_register_device+0x11f/0x3c0 [ 585.979868][ T5895] nci_register_device+0x7f4/0xb80 [ 585.981787][ T5895] ? nci_init_complete_req+0x410/0x410 [ 585.983922][ T5895] virtual_ncidev_open+0x147/0x220 [ 585.985841][ T5895] ? virtual_ncidev_read+0x4e0/0x4e0 [ 585.987806][ T5895] misc_open+0x3da/0x4c0 [ 585.989363][ T5895] ? misc_devnode+0x120/0x120 [ 585.991128][ T5895] chrdev_open+0x277/0x700 [ 585.992836][ T5895] ? __unregister_chrdev+0x100/0x100 [ 585.994855][ T5895] ? fsnotify_perm.part.0+0x25d/0x630 [ 585.996842][ T5895] ? fsnotify_perm.part.0+0x268/0x630 [ 585.998814][ T5895] do_dentry_open+0x88b/0x1780 [ 586.000573][ T5895] ? __unregister_chrdev+0x100/0x100 [ 586.002511][ T5895] ? may_open+0x1f2/0x400 [ 586.004101][ T5895] path_openat+0x19af/0x29c0 [ 586.005799][ T5895] ? path_lookupat+0x770/0x770 [ 586.007577][ T5895] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 586.009774][ T5895] do_filp_open+0x1de/0x430 [ 586.011459][ T5895] ? may_open_dev+0xf0/0xf0 [ 586.013154][ T5895] ? _raw_spin_unlock+0x28/0x40 [ 586.014940][ T5895] ? alloc_fd+0x2da/0x6c0 [ 586.016529][ T5895] do_sys_openat2+0x176/0x1e0 [ 586.018274][ T5895] ? build_open_flags+0x690/0x690 [ 586.020137][ T5895] __ia32_compat_sys_openat+0x16e/0x200 [ 586.022171][ T5895] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 586.024179][ T5895] ? ksys_write+0x1a7/0x250 [ 586.025886][ T5895] __do_fast_syscall_32+0x61/0xe0 [ 586.027828][ T5895] do_fast_syscall_32+0x33/0x70 [ 586.029629][ T5895] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 586.031936][ T5895] RIP: 0023:0xf7f8d579 [ 586.033474][ T5895] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 586.040820][ T5895] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 586.044174][ T5895] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 586.047352][ T5895] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 586.050519][ T5895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 586.053801][ T5895] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 586.056857][ T5895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 586.059905][ T5895] 02:42:33 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 86) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:33 executing program 1: bpf$MAP_CREATE(0x14, &(0x7f0000000940), 0x48) 02:42:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x300}, 0x48) 02:42:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x500}, 0x48) [ 586.090373][ T5906] FAULT_INJECTION: forcing a failure. [ 586.090373][ T5906] name failslab, interval 1, probability 0, space 0, times 0 [ 586.096094][ T5906] CPU: 2 PID: 5906 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 02:42:33 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 87) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:33 executing program 1: bpf$MAP_CREATE(0x13, &(0x7f0000000940)=@base={0x13}, 0x48) [ 586.100750][ T5906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 586.105566][ T5906] Call Trace: [ 586.107137][ T5906] [ 586.108536][ T5906] dump_stack_lvl+0x125/0x1b0 [ 586.110751][ T5906] should_fail_ex+0x496/0x5b0 02:42:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x600}, 0x48) [ 586.112927][ T5906] should_failslab+0x9/0x20 [ 586.115216][ T5906] kmem_cache_alloc+0x33a/0x3b0 [ 586.117509][ T5906] ? lockdep_hardirqs_on_prepare+0x410/0x410 02:42:33 executing program 1: bpf$MAP_CREATE(0x13, &(0x7f0000000940)=@base={0x13}, 0x48) [ 586.120333][ T5906] __kernfs_new_node+0xd3/0x8a0 [ 586.122792][ T5906] ? kernfs_path_from_node+0x60/0x60 [ 586.125291][ T5906] ? lock_sync+0x190/0x190 [ 586.127394][ T5906] ? find_held_lock+0x2d/0x110 [ 586.129655][ T5906] kernfs_new_node+0x94/0x110 [ 586.131864][ T5906] __kernfs_create_file+0x53/0x340 [ 586.134230][ T5906] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 586.136768][ T5906] sysfs_merge_group+0x1b1/0x330 [ 586.139168][ T5906] ? sysfs_update_groups+0x30/0x30 [ 586.141561][ T5906] ? panel_show+0xf0/0xf0 [ 586.143617][ T5906] ? bus_to_subsys+0x129/0x160 [ 586.145819][ T5906] dpm_sysfs_add+0x22f/0x280 [ 586.147982][ T5906] device_add+0x9e5/0x1b40 [ 586.150027][ T5906] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 586.153017][ T5906] ? __init_waitqueue_head+0xca/0x150 [ 586.155080][ T5906] rfkill_register+0x1a9/0xb00 [ 586.156952][ T5906] nfc_register_device+0x11f/0x3c0 [ 586.158911][ T5906] nci_register_device+0x7f4/0xb80 [ 586.160870][ T5906] ? nci_init_complete_req+0x410/0x410 [ 586.162965][ T5906] virtual_ncidev_open+0x147/0x220 [ 586.164950][ T5906] ? virtual_ncidev_read+0x4e0/0x4e0 [ 586.166998][ T5906] misc_open+0x3da/0x4c0 [ 586.168658][ T5906] ? misc_devnode+0x120/0x120 [ 586.170448][ T5906] chrdev_open+0x277/0x700 [ 586.172178][ T5906] ? __unregister_chrdev+0x100/0x100 [ 586.174194][ T5906] ? fsnotify_perm.part.0+0x25d/0x630 [ 586.176282][ T5906] ? fsnotify_perm.part.0+0x268/0x630 [ 586.178324][ T5906] do_dentry_open+0x88b/0x1780 [ 586.180170][ T5906] ? __unregister_chrdev+0x100/0x100 [ 586.182194][ T5906] ? may_open+0x1f2/0x400 [ 586.183864][ T5906] path_openat+0x19af/0x29c0 [ 586.185648][ T5906] ? path_lookupat+0x770/0x770 [ 586.187498][ T5906] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 586.189776][ T5906] do_filp_open+0x1de/0x430 [ 586.191525][ T5906] ? may_open_dev+0xf0/0xf0 [ 586.193467][ T5906] ? _raw_spin_unlock+0x28/0x40 [ 586.195358][ T5906] ? alloc_fd+0x2da/0x6c0 [ 586.197021][ T5906] do_sys_openat2+0x176/0x1e0 [ 586.198802][ T5906] ? build_open_flags+0x690/0x690 [ 586.200722][ T5906] __ia32_compat_sys_openat+0x16e/0x200 [ 586.202822][ T5906] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 586.204896][ T5906] ? ksys_write+0x1a7/0x250 [ 586.206652][ T5906] __do_fast_syscall_32+0x61/0xe0 [ 586.208528][ T5906] do_fast_syscall_32+0x33/0x70 [ 586.210362][ T5906] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 586.212982][ T5906] RIP: 0023:0xf7f9e579 [ 586.214844][ T5906] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 586.222134][ T5906] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 586.225252][ T5906] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 586.228241][ T5906] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 586.231584][ T5906] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 586.235259][ T5906] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 586.238918][ T5906] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 586.242526][ T5906] [ 586.247846][ T5915] FAULT_INJECTION: forcing a failure. [ 586.247846][ T5915] name failslab, interval 1, probability 0, space 0, times 0 [ 586.252955][ T5915] CPU: 1 PID: 5915 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 586.257193][ T5915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 586.260883][ T5915] Call Trace: [ 586.262163][ T5915] [ 586.263254][ T5915] dump_stack_lvl+0x125/0x1b0 [ 586.264994][ T5915] should_fail_ex+0x496/0x5b0 [ 586.266733][ T5915] should_failslab+0x9/0x20 [ 586.268457][ T5915] kmem_cache_alloc+0x33a/0x3b0 [ 586.270265][ T5915] __kernfs_new_node+0xd3/0x8a0 [ 586.272091][ T5915] ? kernfs_add_one+0x3ca/0x510 02:42:34 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 87) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:34 executing program 1: bpf$MAP_CREATE(0x13, &(0x7f0000000940)=@base={0x13}, 0x48) 02:42:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x700}, 0x48) [ 586.273897][ T5915] ? kernfs_path_from_node+0x60/0x60 [ 586.276089][ T5915] ? up_write+0x1b3/0x510 [ 586.277694][ T5915] kernfs_new_node+0x94/0x110 [ 586.279435][ T5915] __kernfs_create_file+0x53/0x340 [ 586.281322][ T5915] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 586.283338][ T5915] sysfs_merge_group+0x1b1/0x330 [ 586.285184][ T5915] ? sysfs_update_groups+0x30/0x30 [ 586.287034][ T5915] ? panel_show+0xf0/0xf0 [ 586.288647][ T5915] ? bus_to_subsys+0x129/0x160 02:42:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x900}, 0x48) [ 586.290402][ T5915] dpm_sysfs_add+0x22f/0x280 [ 586.292322][ T5915] device_add+0x9e5/0x1b40 [ 586.293990][ T5915] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 586.296519][ T5915] ? __init_waitqueue_head+0xca/0x150 [ 586.298505][ T5915] rfkill_register+0x1a9/0xb00 [ 586.300486][ T5915] nfc_register_device+0x11f/0x3c0 [ 586.302399][ T5915] nci_register_device+0x7f4/0xb80 [ 586.304631][ T5915] ? nci_init_complete_req+0x410/0x410 [ 586.307220][ T5915] virtual_ncidev_open+0x147/0x220 [ 586.309691][ T5915] ? virtual_ncidev_read+0x4e0/0x4e0 [ 586.311681][ T5915] misc_open+0x3da/0x4c0 [ 586.313504][ T5915] ? misc_devnode+0x120/0x120 [ 586.315760][ T5915] chrdev_open+0x277/0x700 [ 586.317825][ T5915] ? __unregister_chrdev+0x100/0x100 [ 586.320212][ T5915] ? fsnotify_perm.part.0+0x25d/0x630 [ 586.322620][ T5915] ? fsnotify_perm.part.0+0x268/0x630 [ 586.324649][ T5915] do_dentry_open+0x88b/0x1780 [ 586.326463][ T5915] ? __unregister_chrdev+0x100/0x100 [ 586.328619][ T5915] ? may_open+0x1f2/0x400 [ 586.330694][ T5915] path_openat+0x19af/0x29c0 [ 586.332903][ T5915] ? path_lookupat+0x770/0x770 [ 586.334658][ T5915] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 586.337124][ T5915] do_filp_open+0x1de/0x430 [ 586.339189][ T5915] ? may_open_dev+0xf0/0xf0 [ 586.340913][ T5915] ? _raw_spin_unlock+0x28/0x40 [ 586.342935][ T5915] ? alloc_fd+0x2da/0x6c0 [ 586.344934][ T5915] do_sys_openat2+0x176/0x1e0 [ 586.346998][ T5915] ? build_open_flags+0x690/0x690 [ 586.348856][ T5915] __ia32_compat_sys_openat+0x16e/0x200 [ 586.350923][ T5915] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 586.353456][ T5915] ? ksys_write+0x1a7/0x250 [ 586.355567][ T5915] __do_fast_syscall_32+0x61/0xe0 [ 586.357795][ T5915] do_fast_syscall_32+0x33/0x70 [ 586.360007][ T5915] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 586.362866][ T5915] RIP: 0023:0xf7f8d579 [ 586.364725][ T5915] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 586.372845][ T5915] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 586.376583][ T5915] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 586.380134][ T5915] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 586.383678][ T5915] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 586.387213][ T5915] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 586.390685][ T5915] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 586.394109][ T5915] [ 586.407150][ T5929] FAULT_INJECTION: forcing a failure. [ 586.407150][ T5929] name failslab, interval 1, probability 0, space 0, times 0 02:42:34 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 88) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:34 executing program 1: bpf$MAP_CREATE(0x13, 0x0, 0x0) 02:42:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0xa00}, 0x48) [ 586.417271][ T5929] CPU: 3 PID: 5929 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 586.421509][ T5929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 586.426222][ T5929] Call Trace: [ 586.427808][ T5929] [ 586.429200][ T5929] dump_stack_lvl+0x125/0x1b0 [ 586.431411][ T5929] should_fail_ex+0x496/0x5b0 [ 586.433590][ T5929] should_failslab+0x9/0x20 [ 586.435701][ T5929] kmem_cache_alloc+0x33a/0x3b0 [ 586.438048][ T5929] __kernfs_new_node+0xd3/0x8a0 [ 586.440261][ T5929] ? kernfs_add_one+0x3ca/0x510 [ 586.442044][ T5929] ? kernfs_path_from_node+0x60/0x60 [ 586.443931][ T5929] ? up_write+0x1b3/0x510 [ 586.445489][ T5929] kernfs_new_node+0x94/0x110 [ 586.447190][ T5929] __kernfs_create_file+0x53/0x340 [ 586.449043][ T5929] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 586.450990][ T5929] sysfs_merge_group+0x1b1/0x330 [ 586.452864][ T5929] ? sysfs_update_groups+0x30/0x30 [ 586.454707][ T5929] ? panel_show+0xf0/0xf0 [ 586.456284][ T5929] ? bus_to_subsys+0x129/0x160 [ 586.458017][ T5929] dpm_sysfs_add+0x22f/0x280 [ 586.459690][ T5929] device_add+0x9e5/0x1b40 [ 586.461315][ T5929] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 586.463769][ T5929] ? __init_waitqueue_head+0xca/0x150 [ 586.465696][ T5929] rfkill_register+0x1a9/0xb00 [ 586.467428][ T5929] nfc_register_device+0x11f/0x3c0 [ 586.469273][ T5929] nci_register_device+0x7f4/0xb80 [ 586.471131][ T5929] ? nci_init_complete_req+0x410/0x410 [ 586.473132][ T5929] virtual_ncidev_open+0x147/0x220 [ 586.474966][ T5929] ? virtual_ncidev_read+0x4e0/0x4e0 [ 586.476873][ T5929] misc_open+0x3da/0x4c0 [ 586.478401][ T5929] ? misc_devnode+0x120/0x120 [ 586.480103][ T5929] chrdev_open+0x277/0x700 [ 586.481709][ T5929] ? __unregister_chrdev+0x100/0x100 [ 586.483587][ T5929] ? fsnotify_perm.part.0+0x25d/0x630 [ 586.485513][ T5929] ? fsnotify_perm.part.0+0x268/0x630 [ 586.487430][ T5929] do_dentry_open+0x88b/0x1780 [ 586.489154][ T5929] ? __unregister_chrdev+0x100/0x100 [ 586.491065][ T5929] ? may_open+0x1f2/0x400 [ 586.492673][ T5929] path_openat+0x19af/0x29c0 [ 586.494348][ T5929] ? path_lookupat+0x770/0x770 [ 586.496375][ T5929] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 586.498666][ T5929] do_filp_open+0x1de/0x430 [ 586.500413][ T5929] ? may_open_dev+0xf0/0xf0 [ 586.502071][ T5929] ? _raw_spin_unlock+0x28/0x40 [ 586.503890][ T5929] ? alloc_fd+0x2da/0x6c0 [ 586.505473][ T5929] do_sys_openat2+0x176/0x1e0 [ 586.507202][ T5929] ? build_open_flags+0x690/0x690 [ 586.509146][ T5929] __ia32_compat_sys_openat+0x16e/0x200 [ 586.511169][ T5929] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 586.513385][ T5929] ? ksys_write+0x1a7/0x250 [ 586.515298][ T5929] __do_fast_syscall_32+0x61/0xe0 [ 586.517392][ T5929] do_fast_syscall_32+0x33/0x70 [ 586.519490][ T5929] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 586.522098][ T5929] RIP: 0023:0xf7f9e579 [ 586.523689][ T5929] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 586.530625][ T5929] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 586.533656][ T5929] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 586.536491][ T5929] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 586.539336][ T5929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 586.542223][ T5929] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 586.545103][ T5929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 586.547966][ T5929] 02:42:34 executing program 1: bpf$MAP_CREATE(0x13, 0x0, 0x0) [ 586.553956][ T5945] FAULT_INJECTION: forcing a failure. [ 586.553956][ T5945] name failslab, interval 1, probability 0, space 0, times 0 [ 586.561319][ T5945] CPU: 1 PID: 5945 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 586.565709][ T5945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 586.570271][ T5945] Call Trace: [ 586.571818][ T5945] [ 586.573176][ T5945] dump_stack_lvl+0x125/0x1b0 [ 586.575313][ T5945] should_fail_ex+0x496/0x5b0 02:42:34 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 88) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:34 executing program 1: bpf$MAP_CREATE(0x13, 0x0, 0x0) 02:42:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0xb00}, 0x48) [ 586.577481][ T5945] should_failslab+0x9/0x20 [ 586.579728][ T5945] kmem_cache_alloc+0x33a/0x3b0 [ 586.582042][ T5945] __kernfs_new_node+0xd3/0x8a0 [ 586.584281][ T5945] ? kernfs_add_one+0x3ca/0x510 [ 586.586533][ T5945] ? kernfs_path_from_node+0x60/0x60 [ 586.588965][ T5945] ? up_write+0x1b3/0x510 [ 586.590932][ T5945] kernfs_new_node+0x94/0x110 [ 586.593123][ T5945] __kernfs_create_file+0x53/0x340 02:42:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0xc00}, 0x48) [ 586.595476][ T5945] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 586.598157][ T5945] sysfs_merge_group+0x1b1/0x330 [ 586.600323][ T5945] ? sysfs_update_groups+0x30/0x30 [ 586.602544][ T5945] ? panel_show+0xf0/0xf0 [ 586.604565][ T5945] ? bus_to_subsys+0x129/0x160 [ 586.606759][ T5945] dpm_sysfs_add+0x22f/0x280 [ 586.608890][ T5945] device_add+0x9e5/0x1b40 [ 586.610967][ T5945] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 586.614115][ T5945] ? __init_waitqueue_head+0xca/0x150 [ 586.616614][ T5945] rfkill_register+0x1a9/0xb00 [ 586.618910][ T5945] nfc_register_device+0x11f/0x3c0 [ 586.621224][ T5945] nci_register_device+0x7f4/0xb80 [ 586.623530][ T5945] ? nci_init_complete_req+0x410/0x410 [ 586.625911][ T5945] virtual_ncidev_open+0x147/0x220 [ 586.628300][ T5945] ? virtual_ncidev_read+0x4e0/0x4e0 [ 586.630706][ T5945] misc_open+0x3da/0x4c0 [ 586.632728][ T5945] ? misc_devnode+0x120/0x120 [ 586.634527][ T5945] chrdev_open+0x277/0x700 [ 586.636200][ T5945] ? __unregister_chrdev+0x100/0x100 [ 586.638155][ T5945] ? fsnotify_perm.part.0+0x25d/0x630 [ 586.640152][ T5945] ? fsnotify_perm.part.0+0x268/0x630 [ 586.642216][ T5945] do_dentry_open+0x88b/0x1780 [ 586.644000][ T5945] ? __unregister_chrdev+0x100/0x100 [ 586.646537][ T5945] ? may_open+0x1f2/0x400 [ 586.648603][ T5945] path_openat+0x19af/0x29c0 [ 586.650938][ T5945] ? path_lookupat+0x770/0x770 [ 586.652970][ T5945] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 586.655185][ T5945] do_filp_open+0x1de/0x430 [ 586.656892][ T5945] ? may_open_dev+0xf0/0xf0 [ 586.658584][ T5945] ? _raw_spin_unlock+0x28/0x40 [ 586.660552][ T5945] ? alloc_fd+0x2da/0x6c0 [ 586.662409][ T5945] do_sys_openat2+0x176/0x1e0 [ 586.664650][ T5945] ? build_open_flags+0x690/0x690 [ 586.667160][ T5945] __ia32_compat_sys_openat+0x16e/0x200 [ 586.669712][ T5945] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 586.671755][ T5945] ? ksys_write+0x1a7/0x250 [ 586.673737][ T5945] __do_fast_syscall_32+0x61/0xe0 [ 586.675892][ T5945] do_fast_syscall_32+0x33/0x70 [ 586.677855][ T5945] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 586.680842][ T5945] RIP: 0023:0xf7f8d579 [ 586.682736][ T5945] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 586.691081][ T5945] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 586.694692][ T5945] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 586.698230][ T5945] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 586.701621][ T5945] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 586.705129][ T5945] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 586.708350][ T5945] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 586.711283][ T5945] 02:42:34 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 89) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:34 executing program 1: bpf$MAP_CREATE(0x13, &(0x7f0000000940), 0x48) 02:42:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0xd00}, 0x48) [ 586.743058][ T5955] FAULT_INJECTION: forcing a failure. [ 586.743058][ T5955] name failslab, interval 1, probability 0, space 0, times 0 02:42:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0xe00}, 0x48) [ 586.750275][ T5955] CPU: 3 PID: 5955 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 586.754036][ T5955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 586.757787][ T5955] Call Trace: [ 586.759021][ T5955] [ 586.760119][ T5955] dump_stack_lvl+0x125/0x1b0 [ 586.761882][ T5955] should_fail_ex+0x496/0x5b0 [ 586.763628][ T5955] should_failslab+0x9/0x20 [ 586.765279][ T5955] kmem_cache_alloc+0x33a/0x3b0 [ 586.767045][ T5955] __kernfs_new_node+0xd3/0x8a0 [ 586.768813][ T5955] ? kernfs_add_one+0x3ca/0x510 [ 586.770604][ T5955] ? kernfs_path_from_node+0x60/0x60 [ 586.772633][ T5955] ? up_write+0x1b3/0x510 [ 586.774189][ T5955] kernfs_new_node+0x94/0x110 [ 586.775910][ T5955] __kernfs_create_file+0x53/0x340 [ 586.777762][ T5955] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 586.779707][ T5955] sysfs_merge_group+0x1b1/0x330 [ 586.781517][ T5955] ? sysfs_update_groups+0x30/0x30 [ 586.783407][ T5955] ? panel_show+0xf0/0xf0 [ 586.784986][ T5955] ? bus_to_subsys+0x129/0x160 [ 586.786724][ T5955] dpm_sysfs_add+0x22f/0x280 [ 586.788405][ T5955] device_add+0x9e5/0x1b40 [ 586.790043][ T5955] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 586.792572][ T5955] ? __init_waitqueue_head+0xca/0x150 [ 586.794507][ T5955] rfkill_register+0x1a9/0xb00 [ 586.796255][ T5955] nfc_register_device+0x11f/0x3c0 [ 586.798105][ T5955] nci_register_device+0x7f4/0xb80 [ 586.799967][ T5955] ? nci_init_complete_req+0x410/0x410 [ 586.801960][ T5955] virtual_ncidev_open+0x147/0x220 [ 586.804274][ T5955] ? virtual_ncidev_read+0x4e0/0x4e0 [ 586.806457][ T5955] misc_open+0x3da/0x4c0 [ 586.808284][ T5955] ? misc_devnode+0x120/0x120 [ 586.810093][ T5955] chrdev_open+0x277/0x700 [ 586.811798][ T5955] ? __unregister_chrdev+0x100/0x100 [ 586.813776][ T5955] ? fsnotify_perm.part.0+0x25d/0x630 [ 586.815786][ T5955] ? fsnotify_perm.part.0+0x268/0x630 [ 586.817758][ T5955] do_dentry_open+0x88b/0x1780 [ 586.819582][ T5955] ? __unregister_chrdev+0x100/0x100 [ 586.821565][ T5955] ? may_open+0x1f2/0x400 [ 586.823177][ T5955] path_openat+0x19af/0x29c0 [ 586.824931][ T5955] ? path_lookupat+0x770/0x770 [ 586.826735][ T5955] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 586.828949][ T5955] do_filp_open+0x1de/0x430 [ 586.830673][ T5955] ? may_open_dev+0xf0/0xf0 [ 586.832451][ T5955] ? _raw_spin_unlock+0x28/0x40 [ 586.834305][ T5955] ? alloc_fd+0x2da/0x6c0 [ 586.836065][ T5955] do_sys_openat2+0x176/0x1e0 [ 586.837820][ T5955] ? build_open_flags+0x690/0x690 [ 586.839734][ T5955] __ia32_compat_sys_openat+0x16e/0x200 [ 586.841817][ T5955] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 586.843895][ T5955] ? ksys_write+0x1a7/0x250 [ 586.845573][ T5955] __do_fast_syscall_32+0x61/0xe0 [ 586.847581][ T5955] do_fast_syscall_32+0x33/0x70 [ 586.849532][ T5955] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 586.851926][ T5955] RIP: 0023:0xf7f9e579 [ 586.853896][ T5955] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 586.861524][ T5955] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 586.864652][ T5955] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 586.867625][ T5955] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 586.870564][ T5955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 586.873580][ T5955] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 586.876557][ T5955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 586.879482][ T5955] [ 586.898322][ T5967] FAULT_INJECTION: forcing a failure. [ 586.898322][ T5967] name failslab, interval 1, probability 0, space 0, times 0 [ 586.902911][ T5967] CPU: 0 PID: 5967 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 586.906673][ T5967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 586.910357][ T5967] Call Trace: [ 586.911632][ T5967] [ 586.912748][ T5967] dump_stack_lvl+0x125/0x1b0 [ 586.914490][ T5967] should_fail_ex+0x496/0x5b0 [ 586.916258][ T5967] should_failslab+0x9/0x20 [ 586.917948][ T5967] kmem_cache_alloc+0x33a/0x3b0 [ 586.919752][ T5967] __kernfs_new_node+0xd3/0x8a0 [ 586.921557][ T5967] ? kernfs_add_one+0x3ca/0x510 [ 586.923434][ T5967] ? kernfs_path_from_node+0x60/0x60 [ 586.925394][ T5967] ? up_write+0x1b3/0x510 [ 586.926998][ T5967] kernfs_new_node+0x94/0x110 [ 586.928755][ T5967] __kernfs_create_file+0x53/0x340 [ 586.930649][ T5967] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 586.932694][ T5967] sysfs_merge_group+0x1b1/0x330 [ 586.934532][ T5967] ? sysfs_update_groups+0x30/0x30 [ 586.936424][ T5967] ? panel_show+0xf0/0xf0 [ 586.938013][ T5967] ? bus_to_subsys+0x129/0x160 [ 586.939773][ T5967] dpm_sysfs_add+0x22f/0x280 [ 586.941464][ T5967] device_add+0x9e5/0x1b40 [ 586.943104][ T5967] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 586.945574][ T5967] ? __init_waitqueue_head+0xca/0x150 [ 586.947575][ T5967] rfkill_register+0x1a9/0xb00 [ 586.949339][ T5967] nfc_register_device+0x11f/0x3c0 [ 586.951218][ T5967] nci_register_device+0x7f4/0xb80 [ 586.953115][ T5967] ? nci_init_complete_req+0x410/0x410 [ 586.955118][ T5967] virtual_ncidev_open+0x147/0x220 [ 586.956982][ T5967] ? virtual_ncidev_read+0x4e0/0x4e0 [ 586.958906][ T5967] misc_open+0x3da/0x4c0 [ 586.960483][ T5967] ? misc_devnode+0x120/0x120 [ 586.962221][ T5967] chrdev_open+0x277/0x700 [ 586.963883][ T5967] ? __unregister_chrdev+0x100/0x100 [ 586.965831][ T5967] ? fsnotify_perm.part.0+0x25d/0x630 [ 586.967812][ T5967] ? fsnotify_perm.part.0+0x268/0x630 [ 586.969795][ T5967] do_dentry_open+0x88b/0x1780 [ 586.971580][ T5967] ? __unregister_chrdev+0x100/0x100 [ 586.973519][ T5967] ? may_open+0x1f2/0x400 [ 586.975126][ T5967] path_openat+0x19af/0x29c0 [ 586.976834][ T5967] ? path_lookupat+0x770/0x770 [ 586.978601][ T5967] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 586.980804][ T5967] do_filp_open+0x1de/0x430 [ 586.982598][ T5967] ? may_open_dev+0xf0/0xf0 [ 586.984363][ T5967] ? _raw_spin_unlock+0x28/0x40 [ 586.986156][ T5967] ? alloc_fd+0x2da/0x6c0 [ 586.987767][ T5967] do_sys_openat2+0x176/0x1e0 [ 586.989487][ T5967] ? build_open_flags+0x690/0x690 [ 586.991376][ T5967] __ia32_compat_sys_openat+0x16e/0x200 [ 586.993782][ T5967] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 586.996285][ T5967] ? ksys_write+0x1a7/0x250 [ 586.998396][ T5967] __do_fast_syscall_32+0x61/0xe0 [ 587.000419][ T5967] do_fast_syscall_32+0x33/0x70 [ 587.002223][ T5967] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 587.004608][ T5967] RIP: 0023:0xf7f8d579 [ 587.006169][ T5967] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 587.015472][ T5967] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 587.019337][ T5967] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 587.023042][ T5967] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 587.026662][ T5967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 587.030191][ T5967] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 587.033701][ T5967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 587.037155][ T5967] 02:42:34 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 89) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:34 executing program 1: bpf$MAP_CREATE(0x12, &(0x7f0000000940)=@base={0x13}, 0x48) 02:42:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0xf00}, 0x48) 02:42:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1100}, 0x48) [ 587.075204][ T5977] FAULT_INJECTION: forcing a failure. [ 587.075204][ T5977] name failslab, interval 1, probability 0, space 0, times 0 02:42:34 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 90) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:34 executing program 1: bpf$MAP_CREATE(0x12, &(0x7f0000000940)=@base={0x13}, 0x48) 02:42:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1200}, 0x48) [ 587.081053][ T5977] CPU: 2 PID: 5977 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 587.084866][ T5977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 587.088571][ T5977] Call Trace: [ 587.089812][ T5977] [ 587.090907][ T5977] dump_stack_lvl+0x125/0x1b0 [ 587.092676][ T5977] should_fail_ex+0x496/0x5b0 [ 587.094423][ T5977] should_failslab+0x9/0x20 [ 587.096102][ T5977] kmem_cache_alloc+0x33a/0x3b0 02:42:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1300}, 0x48) [ 587.098066][ T5977] __kernfs_new_node+0xd3/0x8a0 [ 587.099964][ T5977] ? kernfs_add_one+0x3ca/0x510 [ 587.101749][ T5977] ? kernfs_path_from_node+0x60/0x60 [ 587.103697][ T5977] ? up_write+0x1b3/0x510 [ 587.105288][ T5977] kernfs_new_node+0x94/0x110 [ 587.107021][ T5977] __kernfs_create_file+0x53/0x340 [ 587.108909][ T5977] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 587.110881][ T5977] sysfs_merge_group+0x1b1/0x330 [ 587.112648][ T5977] ? sysfs_update_groups+0x30/0x30 [ 587.114531][ T5977] ? panel_show+0xf0/0xf0 [ 587.116124][ T5977] ? bus_to_subsys+0x129/0x160 [ 587.117890][ T5977] dpm_sysfs_add+0x22f/0x280 [ 587.119599][ T5977] device_add+0x9e5/0x1b40 [ 587.121245][ T5977] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 587.123993][ T5977] ? __init_waitqueue_head+0xca/0x150 [ 587.126403][ T5977] rfkill_register+0x1a9/0xb00 [ 587.128564][ T5977] nfc_register_device+0x11f/0x3c0 [ 587.130912][ T5977] nci_register_device+0x7f4/0xb80 [ 587.133377][ T5977] ? nci_init_complete_req+0x410/0x410 [ 587.135930][ T5977] virtual_ncidev_open+0x147/0x220 [ 587.138350][ T5977] ? virtual_ncidev_read+0x4e0/0x4e0 [ 587.140824][ T5977] misc_open+0x3da/0x4c0 [ 587.142846][ T5977] ? misc_devnode+0x120/0x120 [ 587.145095][ T5977] chrdev_open+0x277/0x700 [ 587.147175][ T5977] ? __unregister_chrdev+0x100/0x100 [ 587.149681][ T5977] ? fsnotify_perm.part.0+0x25d/0x630 [ 587.152206][ T5977] ? fsnotify_perm.part.0+0x268/0x630 [ 587.154680][ T5977] do_dentry_open+0x88b/0x1780 [ 587.156951][ T5977] ? __unregister_chrdev+0x100/0x100 [ 587.159473][ T5977] ? may_open+0x1f2/0x400 [ 587.161535][ T5977] path_openat+0x19af/0x29c0 [ 587.163744][ T5977] ? path_lookupat+0x770/0x770 [ 587.165990][ T5977] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 587.168718][ T5977] do_filp_open+0x1de/0x430 [ 587.170770][ T5977] ? may_open_dev+0xf0/0xf0 [ 587.172908][ T5977] ? _raw_spin_unlock+0x28/0x40 [ 587.175195][ T5977] ? alloc_fd+0x2da/0x6c0 [ 587.177272][ T5977] do_sys_openat2+0x176/0x1e0 [ 587.179510][ T5977] ? build_open_flags+0x690/0x690 [ 587.181902][ T5977] __ia32_compat_sys_openat+0x16e/0x200 [ 587.184541][ T5977] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 587.187060][ T5977] ? ksys_write+0x1a7/0x250 [ 587.188850][ T5977] __do_fast_syscall_32+0x61/0xe0 [ 587.190695][ T5977] do_fast_syscall_32+0x33/0x70 [ 587.192538][ T5977] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 587.194865][ T5977] RIP: 0023:0xf7f9e579 [ 587.196377][ T5977] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 587.203427][ T5977] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 587.206464][ T5977] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 587.209355][ T5977] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 587.212247][ T5977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 587.215139][ T5977] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 587.218032][ T5977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 587.220947][ T5977] [ 587.240522][ T5989] FAULT_INJECTION: forcing a failure. [ 587.240522][ T5989] name failslab, interval 1, probability 0, space 0, times 0 [ 587.247977][ T5989] CPU: 2 PID: 5989 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 587.251688][ T5989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 587.255412][ T5989] Call Trace: [ 587.256665][ T5989] [ 587.257774][ T5989] dump_stack_lvl+0x125/0x1b0 [ 587.259559][ T5989] should_fail_ex+0x496/0x5b0 [ 587.261327][ T5989] should_failslab+0x9/0x20 [ 587.263085][ T5989] __kmem_cache_alloc_node+0x2fd/0x350 02:42:35 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 90) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:35 executing program 1: bpf$MAP_CREATE(0x12, &(0x7f0000000940)=@base={0x13}, 0x48) 02:42:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1400}, 0x48) [ 587.265253][ T5989] ? kobject_uevent_env+0x24c/0x1800 [ 587.267488][ T5989] ? bit_wait_timeout+0x160/0x160 [ 587.269394][ T5989] ? dev_uevent_filter+0xc0/0xc0 [ 587.271251][ T5989] kmalloc_trace+0x25/0xe0 [ 587.272973][ T5989] kobject_uevent_env+0x24c/0x1800 [ 587.274906][ T5989] ? bus_to_subsys+0x129/0x160 [ 587.276734][ T5989] device_add+0x1186/0x1b40 [ 587.278472][ T5989] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 02:42:35 executing program 1: bpf$MAP_CREATE(0x12, 0x0, 0x0) [ 587.281029][ T5989] ? __init_waitqueue_head+0xca/0x150 [ 587.283256][ T5989] rfkill_register+0x1a9/0xb00 [ 587.285096][ T5989] nfc_register_device+0x11f/0x3c0 [ 587.287019][ T5989] nci_register_device+0x7f4/0xb80 [ 587.289106][ T5989] ? nci_init_complete_req+0x410/0x410 [ 587.291168][ T5989] virtual_ncidev_open+0x147/0x220 [ 587.293172][ T5989] ? virtual_ncidev_read+0x4e0/0x4e0 [ 587.295110][ T5989] misc_open+0x3da/0x4c0 [ 587.296766][ T5989] ? misc_devnode+0x120/0x120 [ 587.298547][ T5989] chrdev_open+0x277/0x700 [ 587.300294][ T5989] ? __unregister_chrdev+0x100/0x100 [ 587.302319][ T5989] ? fsnotify_perm.part.0+0x25d/0x630 [ 587.304387][ T5989] ? fsnotify_perm.part.0+0x268/0x630 [ 587.306393][ T5989] do_dentry_open+0x88b/0x1780 [ 587.308236][ T5989] ? __unregister_chrdev+0x100/0x100 [ 587.310243][ T5989] ? may_open+0x1f2/0x400 [ 587.311903][ T5989] path_openat+0x19af/0x29c0 [ 587.313676][ T5989] ? path_lookupat+0x770/0x770 [ 587.315485][ T5989] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 587.317761][ T5989] do_filp_open+0x1de/0x430 [ 587.319537][ T5989] ? may_open_dev+0xf0/0xf0 [ 587.321276][ T5989] ? _raw_spin_unlock+0x28/0x40 [ 587.323154][ T5989] ? alloc_fd+0x2da/0x6c0 [ 587.324845][ T5989] do_sys_openat2+0x176/0x1e0 [ 587.326614][ T5989] ? build_open_flags+0x690/0x690 [ 587.328506][ T5989] __ia32_compat_sys_openat+0x16e/0x200 [ 587.330567][ T5989] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 587.332657][ T5989] ? ksys_write+0x1a7/0x250 [ 587.334388][ T5989] __do_fast_syscall_32+0x61/0xe0 [ 587.336293][ T5989] do_fast_syscall_32+0x33/0x70 [ 587.338102][ T5989] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 587.340500][ T5989] RIP: 0023:0xf7f8d579 [ 587.342026][ T5989] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 587.349255][ T5989] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 587.352433][ T5989] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 587.355430][ T5989] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 587.358382][ T5989] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 587.361364][ T5989] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 587.364324][ T5989] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 587.367268][ T5989] [ 587.373753][ T6004] FAULT_INJECTION: forcing a failure. [ 587.373753][ T6004] name failslab, interval 1, probability 0, space 0, times 0 [ 587.383886][ T6004] CPU: 0 PID: 6004 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 587.387691][ T6004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 587.391378][ T6004] Call Trace: [ 587.392624][ T6004] [ 587.393744][ T6004] dump_stack_lvl+0x125/0x1b0 [ 587.395491][ T6004] should_fail_ex+0x496/0x5b0 [ 587.397238][ T6004] should_failslab+0x9/0x20 [ 587.398914][ T6004] __kmem_cache_alloc_node+0x2fd/0x350 [ 587.400925][ T6004] ? kobject_get_path+0xce/0x2b0 [ 587.402836][ T6004] ? kobject_get_path+0xce/0x2b0 [ 587.404912][ T6004] __kmalloc+0x4c/0x100 [ 587.406518][ T6004] kobject_get_path+0xce/0x2b0 [ 587.408413][ T6004] kobject_uevent_env+0x26b/0x1800 [ 587.410377][ T6004] ? bus_to_subsys+0x129/0x160 [ 587.412261][ T6004] device_add+0x1186/0x1b40 [ 587.414058][ T6004] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 587.416699][ T6004] ? __init_waitqueue_head+0xca/0x150 [ 587.418727][ T6004] rfkill_register+0x1a9/0xb00 [ 587.420611][ T6004] nfc_register_device+0x11f/0x3c0 [ 587.422629][ T6004] nci_register_device+0x7f4/0xb80 [ 587.424547][ T6004] ? nci_init_complete_req+0x410/0x410 [ 587.426563][ T6004] virtual_ncidev_open+0x147/0x220 [ 587.428463][ T6004] ? virtual_ncidev_read+0x4e0/0x4e0 [ 587.430410][ T6004] misc_open+0x3da/0x4c0 [ 587.432035][ T6004] ? misc_devnode+0x120/0x120 [ 587.433784][ T6004] chrdev_open+0x277/0x700 [ 587.435453][ T6004] ? __unregister_chrdev+0x100/0x100 [ 587.437389][ T6004] ? fsnotify_perm.part.0+0x25d/0x630 [ 587.439384][ T6004] ? fsnotify_perm.part.0+0x268/0x630 [ 587.441353][ T6004] do_dentry_open+0x88b/0x1780 [ 587.443148][ T6004] ? __unregister_chrdev+0x100/0x100 [ 587.445094][ T6004] ? may_open+0x1f2/0x400 [ 587.446696][ T6004] path_openat+0x19af/0x29c0 [ 587.448410][ T6004] ? path_lookupat+0x770/0x770 [ 587.450170][ T6004] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 587.452401][ T6004] do_filp_open+0x1de/0x430 [ 587.454069][ T6004] ? may_open_dev+0xf0/0xf0 [ 587.455782][ T6004] ? _raw_spin_unlock+0x28/0x40 [ 587.457580][ T6004] ? alloc_fd+0x2da/0x6c0 [ 587.459177][ T6004] do_sys_openat2+0x176/0x1e0 [ 587.460919][ T6004] ? build_open_flags+0x690/0x690 [ 587.462761][ T6004] __ia32_compat_sys_openat+0x16e/0x200 [ 587.464793][ T6004] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 587.466795][ T6004] ? ksys_write+0x1a7/0x250 [ 587.468491][ T6004] __do_fast_syscall_32+0x61/0xe0 [ 587.470352][ T6004] do_fast_syscall_32+0x33/0x70 [ 587.472160][ T6004] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 587.474482][ T6004] RIP: 0023:0xf7f9e579 [ 587.475987][ T6004] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 587.483003][ T6004] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 587.486042][ T6004] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 587.488940][ T6004] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 587.491856][ T6004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 587.494761][ T6004] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 587.497647][ T6004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 587.500568][ T6004] 02:42:35 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 91) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1500}, 0x48) 02:42:35 executing program 1: bpf$MAP_CREATE(0x12, 0x0, 0x0) 02:42:35 executing program 1: bpf$MAP_CREATE(0x12, 0x0, 0x0) [ 587.543421][ T6015] FAULT_INJECTION: forcing a failure. [ 587.543421][ T6015] name failslab, interval 1, probability 0, space 0, times 0 02:42:35 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 91) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1600}, 0x48) 02:42:35 executing program 1: bpf$MAP_CREATE(0x12, &(0x7f0000000940), 0x48) [ 587.563471][ T6015] CPU: 2 PID: 6015 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 587.567975][ T6015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 587.572383][ T6015] Call Trace: [ 587.573867][ T6015] [ 587.575186][ T6015] dump_stack_lvl+0x125/0x1b0 [ 587.577271][ T6015] should_fail_ex+0x496/0x5b0 [ 587.579375][ T6015] should_failslab+0x9/0x20 [ 587.581379][ T6015] kmem_cache_alloc+0x33a/0x3b0 [ 587.583528][ T6015] __kernfs_new_node+0xd3/0x8a0 [ 587.585678][ T6015] ? kernfs_add_one+0x3ca/0x510 [ 587.587890][ T6015] ? kernfs_path_from_node+0x60/0x60 02:42:35 executing program 1: bpf$MAP_CREATE(0x11, &(0x7f0000000940)=@base={0x13}, 0x48) [ 587.590415][ T6015] ? up_write+0x1b3/0x510 [ 587.592577][ T6015] kernfs_new_node+0x94/0x110 [ 587.594761][ T6015] __kernfs_create_file+0x53/0x340 [ 587.597039][ T6015] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 587.599417][ T6015] sysfs_merge_group+0x1b1/0x330 [ 587.601602][ T6015] ? sysfs_update_groups+0x30/0x30 [ 587.603861][ T6015] ? panel_show+0xf0/0xf0 [ 587.605737][ T6015] ? bus_to_subsys+0x129/0x160 [ 587.607848][ T6015] dpm_sysfs_add+0x22f/0x280 [ 587.609875][ T6015] device_add+0x9e5/0x1b40 [ 587.611818][ T6015] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 587.614750][ T6015] ? __init_waitqueue_head+0xca/0x150 [ 587.617104][ T6015] rfkill_register+0x1a9/0xb00 [ 587.619192][ T6015] nfc_register_device+0x11f/0x3c0 [ 587.621398][ T6015] nci_register_device+0x7f4/0xb80 [ 587.623630][ T6015] ? nci_init_complete_req+0x410/0x410 [ 587.625983][ T6015] virtual_ncidev_open+0x147/0x220 [ 587.628086][ T6015] ? virtual_ncidev_read+0x4e0/0x4e0 [ 587.629963][ T6015] misc_open+0x3da/0x4c0 [ 587.631484][ T6015] ? misc_devnode+0x120/0x120 [ 587.633170][ T6015] chrdev_open+0x277/0x700 [ 587.634765][ T6015] ? __unregister_chrdev+0x100/0x100 [ 587.636657][ T6015] ? fsnotify_perm.part.0+0x25d/0x630 [ 587.638566][ T6015] ? fsnotify_perm.part.0+0x268/0x630 [ 587.640539][ T6015] do_dentry_open+0x88b/0x1780 [ 587.642223][ T6015] ? __unregister_chrdev+0x100/0x100 [ 587.644091][ T6015] ? may_open+0x1f2/0x400 [ 587.645622][ T6015] path_openat+0x19af/0x29c0 [ 587.647264][ T6015] ? path_lookupat+0x770/0x770 [ 587.648969][ T6015] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 587.651083][ T6015] do_filp_open+0x1de/0x430 [ 587.652715][ T6015] ? may_open_dev+0xf0/0xf0 [ 587.654399][ T6015] ? _raw_spin_unlock+0x28/0x40 [ 587.656172][ T6015] ? alloc_fd+0x2da/0x6c0 [ 587.657720][ T6015] do_sys_openat2+0x176/0x1e0 [ 587.659424][ T6015] ? build_open_flags+0x690/0x690 [ 587.661224][ T6015] __ia32_compat_sys_openat+0x16e/0x200 [ 587.663193][ T6015] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 587.665115][ T6015] ? ksys_write+0x1a7/0x250 [ 587.666734][ T6015] __do_fast_syscall_32+0x61/0xe0 [ 587.668510][ T6015] do_fast_syscall_32+0x33/0x70 [ 587.670243][ T6015] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 587.672479][ T6015] RIP: 0023:0xf7f8d579 [ 587.673934][ T6015] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 587.680715][ T6015] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 587.683666][ T6015] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 587.686435][ T6015] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 587.689218][ T6015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 587.692004][ T6015] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 587.694840][ T6015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 587.697687][ T6015] [ 587.702460][ T6022] FAULT_INJECTION: forcing a failure. [ 587.702460][ T6022] name failslab, interval 1, probability 0, space 0, times 0 [ 587.707088][ T6022] CPU: 2 PID: 6022 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 02:42:35 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 92) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:35 executing program 1: bpf$MAP_CREATE(0x11, &(0x7f0000000940)=@base={0x13}, 0x48) 02:42:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1700}, 0x48) [ 587.710741][ T6022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 587.714696][ T6022] Call Trace: [ 587.716176][ T6022] [ 587.717381][ T6022] dump_stack_lvl+0x125/0x1b0 [ 587.719296][ T6022] should_fail_ex+0x496/0x5b0 [ 587.721197][ T6022] should_failslab+0x9/0x20 [ 587.723034][ T6022] __kmem_cache_alloc_node+0x2fd/0x350 [ 587.725207][ T6022] ? kobject_get_path+0xce/0x2b0 02:42:35 executing program 1: bpf$MAP_CREATE(0x11, &(0x7f0000000940)=@base={0x13}, 0x48) [ 587.727188][ T6022] ? kobject_get_path+0xce/0x2b0 [ 587.729344][ T6022] __kmalloc+0x4c/0x100 [ 587.730948][ T6022] kobject_get_path+0xce/0x2b0 [ 587.733104][ T6022] kobject_uevent_env+0x26b/0x1800 [ 587.735111][ T6022] ? bus_to_subsys+0x129/0x160 [ 587.737133][ T6022] device_add+0x1186/0x1b40 [ 587.739069][ T6022] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 587.741741][ T6022] ? __init_waitqueue_head+0xca/0x150 [ 587.743760][ T6022] rfkill_register+0x1a9/0xb00 [ 587.745520][ T6022] nfc_register_device+0x11f/0x3c0 [ 587.747429][ T6022] nci_register_device+0x7f4/0xb80 [ 587.749310][ T6022] ? nci_init_complete_req+0x410/0x410 [ 587.751325][ T6022] virtual_ncidev_open+0x147/0x220 [ 587.753358][ T6022] ? virtual_ncidev_read+0x4e0/0x4e0 [ 587.755292][ T6022] misc_open+0x3da/0x4c0 [ 587.756908][ T6022] ? misc_devnode+0x120/0x120 [ 587.758635][ T6022] chrdev_open+0x277/0x700 [ 587.760343][ T6022] ? __unregister_chrdev+0x100/0x100 [ 587.762350][ T6022] ? fsnotify_perm.part.0+0x25d/0x630 [ 587.764355][ T6022] ? fsnotify_perm.part.0+0x268/0x630 [ 587.766371][ T6022] do_dentry_open+0x88b/0x1780 [ 587.768182][ T6022] ? __unregister_chrdev+0x100/0x100 [ 587.770153][ T6022] ? may_open+0x1f2/0x400 [ 587.771821][ T6022] path_openat+0x19af/0x29c0 [ 587.773559][ T6022] ? path_lookupat+0x770/0x770 [ 587.775331][ T6022] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 587.777572][ T6022] do_filp_open+0x1de/0x430 [ 587.779318][ T6022] ? may_open_dev+0xf0/0xf0 [ 587.781027][ T6022] ? _raw_spin_unlock+0x28/0x40 [ 587.782876][ T6022] ? alloc_fd+0x2da/0x6c0 [ 587.784501][ T6022] do_sys_openat2+0x176/0x1e0 [ 587.786278][ T6022] ? build_open_flags+0x690/0x690 [ 587.788207][ T6022] __ia32_compat_sys_openat+0x16e/0x200 [ 587.790401][ T6022] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 587.792563][ T6022] ? ksys_write+0x1a7/0x250 [ 587.794278][ T6022] __do_fast_syscall_32+0x61/0xe0 [ 587.796220][ T6022] do_fast_syscall_32+0x33/0x70 [ 587.798031][ T6022] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 587.800397][ T6022] RIP: 0023:0xf7f9e579 [ 587.801907][ T6022] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 587.809666][ T6022] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 587.813728][ T6022] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 587.816655][ T6022] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 587.819635][ T6022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 587.822783][ T6022] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 587.826232][ T6022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 587.829421][ T6022] [ 587.833198][ T6038] FAULT_INJECTION: forcing a failure. [ 587.833198][ T6038] name failslab, interval 1, probability 0, space 0, times 0 [ 587.838637][ T6038] CPU: 2 PID: 6038 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 587.842755][ T6038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 587.846643][ T6038] Call Trace: [ 587.847936][ T6038] [ 587.849046][ T6038] dump_stack_lvl+0x125/0x1b0 [ 587.850630][ T6038] should_fail_ex+0x496/0x5b0 [ 587.852310][ T6038] should_failslab+0x9/0x20 [ 587.854140][ T6038] kmem_cache_alloc_node+0x389/0x3f0 [ 587.856195][ T6038] ? __alloc_skb+0x287/0x330 [ 587.857959][ T6038] ? find_held_lock+0x2d/0x110 [ 587.859834][ T6038] __alloc_skb+0x287/0x330 [ 587.861530][ T6038] ? __napi_build_skb+0x50/0x50 [ 587.863277][ T6038] ? reacquire_held_locks+0x4b0/0x4b0 [ 587.865716][ T6038] alloc_uevent_skb+0x7d/0x210 [ 587.867812][ T6038] kobject_uevent_env+0xc20/0x1800 [ 587.869684][ T6038] ? bus_to_subsys+0x129/0x160 [ 587.871520][ T6038] device_add+0x1186/0x1b40 [ 587.873264][ T6038] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 587.875808][ T6038] ? __init_waitqueue_head+0xca/0x150 [ 587.877807][ T6038] rfkill_register+0x1a9/0xb00 [ 587.879723][ T6038] nfc_register_device+0x11f/0x3c0 [ 587.881843][ T6038] nci_register_device+0x7f4/0xb80 [ 587.883761][ T6038] ? nci_init_complete_req+0x410/0x410 [ 587.885822][ T6038] virtual_ncidev_open+0x147/0x220 [ 587.887758][ T6038] ? virtual_ncidev_read+0x4e0/0x4e0 [ 587.889772][ T6038] misc_open+0x3da/0x4c0 [ 587.891376][ T6038] ? misc_devnode+0x120/0x120 [ 587.893221][ T6038] chrdev_open+0x277/0x700 [ 587.894887][ T6038] ? __unregister_chrdev+0x100/0x100 [ 587.896887][ T6038] ? fsnotify_perm.part.0+0x25d/0x630 [ 587.898906][ T6038] ? fsnotify_perm.part.0+0x268/0x630 [ 587.901220][ T6038] do_dentry_open+0x88b/0x1780 [ 587.902999][ T6038] ? __unregister_chrdev+0x100/0x100 [ 587.904996][ T6038] ? may_open+0x1f2/0x400 [ 587.906650][ T6038] path_openat+0x19af/0x29c0 [ 587.908447][ T6038] ? path_lookupat+0x770/0x770 [ 587.910251][ T6038] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 587.912531][ T6038] do_filp_open+0x1de/0x430 [ 587.914214][ T6038] ? may_open_dev+0xf0/0xf0 [ 587.916019][ T6038] ? _raw_spin_unlock+0x28/0x40 [ 587.917917][ T6038] ? alloc_fd+0x2da/0x6c0 [ 587.919570][ T6038] do_sys_openat2+0x176/0x1e0 [ 587.921288][ T6038] ? build_open_flags+0x690/0x690 [ 587.923207][ T6038] __ia32_compat_sys_openat+0x16e/0x200 [ 587.925279][ T6038] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 587.927300][ T6038] ? ksys_write+0x1a7/0x250 [ 587.929061][ T6038] __do_fast_syscall_32+0x61/0xe0 [ 587.930940][ T6038] do_fast_syscall_32+0x33/0x70 [ 587.932928][ T6038] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 587.935409][ T6038] RIP: 0023:0xf7f8d579 [ 587.937015][ T6038] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 587.945553][ T6038] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 587.949412][ T6038] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 587.953056][ T6038] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 587.956733][ T6038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 587.960552][ T6038] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 587.964248][ T6038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 587.967924][ T6038] 02:42:35 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 92) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1800}, 0x48) 02:42:35 executing program 1: bpf$MAP_CREATE(0x11, 0x0, 0x0) 02:42:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1900}, 0x48) 02:42:35 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 93) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:35 executing program 1: bpf$MAP_CREATE(0x11, 0x0, 0x0) 02:42:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1a00}, 0x48) [ 588.028597][ T6051] FAULT_INJECTION: forcing a failure. [ 588.028597][ T6051] name failslab, interval 1, probability 0, space 0, times 0 02:42:35 executing program 1: bpf$MAP_CREATE(0x11, 0x0, 0x0) [ 588.033489][ T6051] CPU: 0 PID: 6051 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 588.038526][ T6051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 588.043195][ T6051] Call Trace: [ 588.044800][ T6051] [ 588.046203][ T6051] dump_stack_lvl+0x125/0x1b0 [ 588.048351][ T6051] should_fail_ex+0x496/0x5b0 [ 588.050580][ T6051] should_failslab+0x9/0x20 [ 588.052583][ T6051] __kmem_cache_alloc_node+0x2fd/0x350 [ 588.054955][ T6051] ? kobject_get_path+0xce/0x2b0 [ 588.057173][ T6051] ? kobject_get_path+0xce/0x2b0 [ 588.059422][ T6051] __kmalloc+0x4c/0x100 [ 588.061337][ T6051] kobject_get_path+0xce/0x2b0 [ 588.063639][ T6051] kobject_uevent_env+0x26b/0x1800 [ 588.066086][ T6051] ? bus_to_subsys+0x129/0x160 [ 588.068374][ T6051] device_add+0x1186/0x1b40 [ 588.070536][ T6051] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 588.073799][ T6051] ? __init_waitqueue_head+0xca/0x150 [ 588.076379][ T6051] rfkill_register+0x1a9/0xb00 [ 588.078685][ T6051] nfc_register_device+0x11f/0x3c0 [ 588.081042][ T6051] nci_register_device+0x7f4/0xb80 [ 588.083025][ T6051] ? nci_init_complete_req+0x410/0x410 [ 588.085382][ T6051] virtual_ncidev_open+0x147/0x220 [ 588.087777][ T6051] ? virtual_ncidev_read+0x4e0/0x4e0 [ 588.090299][ T6051] misc_open+0x3da/0x4c0 [ 588.092508][ T6051] ? misc_devnode+0x120/0x120 [ 588.094733][ T6051] chrdev_open+0x277/0x700 [ 588.096865][ T6051] ? __unregister_chrdev+0x100/0x100 [ 588.099417][ T6051] ? fsnotify_perm.part.0+0x25d/0x630 [ 588.101947][ T6051] ? fsnotify_perm.part.0+0x268/0x630 [ 588.104538][ T6051] do_dentry_open+0x88b/0x1780 [ 588.106815][ T6051] ? __unregister_chrdev+0x100/0x100 [ 588.109313][ T6051] ? may_open+0x1f2/0x400 [ 588.111406][ T6051] path_openat+0x19af/0x29c0 [ 588.113631][ T6051] ? path_lookupat+0x770/0x770 [ 588.115735][ T6051] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 588.118555][ T6051] do_filp_open+0x1de/0x430 [ 588.120431][ T6051] ? may_open_dev+0xf0/0xf0 [ 588.122229][ T6051] ? _raw_spin_unlock+0x28/0x40 [ 588.124117][ T6051] ? alloc_fd+0x2da/0x6c0 [ 588.125778][ T6051] do_sys_openat2+0x176/0x1e0 [ 588.127563][ T6051] ? build_open_flags+0x690/0x690 [ 588.129473][ T6051] __ia32_compat_sys_openat+0x16e/0x200 [ 588.131596][ T6051] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 588.133859][ T6051] ? ksys_write+0x1a7/0x250 [ 588.136035][ T6051] __do_fast_syscall_32+0x61/0xe0 [ 588.138016][ T6051] do_fast_syscall_32+0x33/0x70 [ 588.139845][ T6051] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 588.142251][ T6051] RIP: 0023:0xf7f9e579 [ 588.143953][ T6051] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 588.151165][ T6051] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 588.154793][ T6051] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 588.157978][ T6051] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 588.160977][ T6051] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 588.164375][ T6051] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 588.167630][ T6051] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 588.170593][ T6051] 02:42:35 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 93) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:35 executing program 1: bpf$MAP_CREATE(0x11, &(0x7f0000000940), 0x48) 02:42:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1b00}, 0x48) 02:42:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1c00}, 0x48) 02:42:36 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 94) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:36 executing program 1: bpf$MAP_CREATE(0xf, &(0x7f0000000940)=@base={0x13}, 0x48) 02:42:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1d00}, 0x48) 02:42:36 executing program 1: bpf$MAP_CREATE(0xf, &(0x7f0000000940)=@base={0x13}, 0x48) [ 588.240965][ T6075] FAULT_INJECTION: forcing a failure. [ 588.240965][ T6075] name failslab, interval 1, probability 0, space 0, times 0 [ 588.245714][ T6075] CPU: 0 PID: 6075 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 588.249633][ T6075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 588.253551][ T6075] Call Trace: [ 588.254972][ T6075] [ 588.256312][ T6075] dump_stack_lvl+0x125/0x1b0 [ 588.258465][ T6075] should_fail_ex+0x496/0x5b0 [ 588.260569][ T6075] should_failslab+0x9/0x20 [ 588.262295][ T6075] kmem_cache_alloc_node+0x389/0x3f0 [ 588.264438][ T6075] ? __alloc_skb+0x287/0x330 [ 588.266357][ T6075] ? find_held_lock+0x2d/0x110 [ 588.268211][ T6075] __alloc_skb+0x287/0x330 [ 588.269920][ T6075] ? __napi_build_skb+0x50/0x50 [ 588.271919][ T6075] ? reacquire_held_locks+0x4b0/0x4b0 [ 588.274192][ T6075] alloc_uevent_skb+0x7d/0x210 [ 588.276302][ T6075] kobject_uevent_env+0xc20/0x1800 [ 588.278592][ T6075] ? bus_to_subsys+0x129/0x160 [ 588.280748][ T6075] device_add+0x1186/0x1b40 [ 588.282761][ T6075] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 588.285786][ T6075] ? __init_waitqueue_head+0xca/0x150 [ 588.287873][ T6075] rfkill_register+0x1a9/0xb00 [ 588.289855][ T6075] nfc_register_device+0x11f/0x3c0 [ 588.291807][ T6075] nci_register_device+0x7f4/0xb80 [ 588.293758][ T6075] ? nci_init_complete_req+0x410/0x410 [ 588.295827][ T6075] virtual_ncidev_open+0x147/0x220 [ 588.297802][ T6075] ? virtual_ncidev_read+0x4e0/0x4e0 [ 588.299834][ T6075] misc_open+0x3da/0x4c0 [ 588.301440][ T6075] ? misc_devnode+0x120/0x120 [ 588.303264][ T6075] chrdev_open+0x277/0x700 [ 588.305003][ T6075] ? __unregister_chrdev+0x100/0x100 [ 588.307022][ T6075] ? fsnotify_perm.part.0+0x25d/0x630 [ 588.309084][ T6075] ? fsnotify_perm.part.0+0x268/0x630 [ 588.311156][ T6075] do_dentry_open+0x88b/0x1780 [ 588.312994][ T6075] ? __unregister_chrdev+0x100/0x100 [ 588.315096][ T6075] ? may_open+0x1f2/0x400 [ 588.316823][ T6075] path_openat+0x19af/0x29c0 [ 588.318853][ T6075] ? path_lookupat+0x770/0x770 [ 588.320658][ T6075] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 588.323171][ T6075] do_filp_open+0x1de/0x430 [ 588.325035][ T6075] ? may_open_dev+0xf0/0xf0 [ 588.326814][ T6075] ? _raw_spin_unlock+0x28/0x40 [ 588.328991][ T6075] ? alloc_fd+0x2da/0x6c0 [ 588.330832][ T6075] do_sys_openat2+0x176/0x1e0 [ 588.332727][ T6075] ? build_open_flags+0x690/0x690 [ 588.335021][ T6075] __ia32_compat_sys_openat+0x16e/0x200 [ 588.337518][ T6075] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 588.340086][ T6075] ? ksys_write+0x1a7/0x250 [ 588.342179][ T6075] __do_fast_syscall_32+0x61/0xe0 [ 588.344460][ T6075] do_fast_syscall_32+0x33/0x70 [ 588.346382][ T6075] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 588.349206][ T6075] RIP: 0023:0xf7f9e579 [ 588.350852][ T6075] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 588.358874][ T6075] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 588.362447][ T6075] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 588.366010][ T6075] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 588.369335][ T6075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 588.372626][ T6075] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 588.375914][ T6075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 588.379330][ T6075] 02:42:36 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 94) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1e00}, 0x48) 02:42:36 executing program 1: bpf$MAP_CREATE(0xf, &(0x7f0000000940)=@base={0x13}, 0x48) 02:42:36 executing program 1: bpf$MAP_CREATE(0xf, 0x0, 0x0) 02:42:36 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 95) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1f00}, 0x48) 02:42:36 executing program 1: bpf$MAP_CREATE(0xf, 0x0, 0x0) [ 588.442077][ T6097] FAULT_INJECTION: forcing a failure. 02:42:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x2000}, 0x48) [ 588.442077][ T6097] name failslab, interval 1, probability 0, space 0, times 0 [ 588.451090][ T6097] CPU: 3 PID: 6097 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 588.455449][ T6097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 588.459912][ T6097] Call Trace: [ 588.461386][ T6097] [ 588.462695][ T6097] dump_stack_lvl+0x125/0x1b0 [ 588.464796][ T6097] should_fail_ex+0x496/0x5b0 [ 588.466889][ T6097] should_failslab+0x9/0x20 [ 588.468918][ T6097] kmem_cache_alloc_node+0x389/0x3f0 [ 588.471272][ T6097] ? __alloc_skb+0x287/0x330 [ 588.473337][ T6097] ? find_held_lock+0x2d/0x110 [ 588.475379][ T6097] __alloc_skb+0x287/0x330 [ 588.477362][ T6097] ? __napi_build_skb+0x50/0x50 [ 588.479512][ T6097] ? reacquire_held_locks+0x4b0/0x4b0 [ 588.481868][ T6097] alloc_uevent_skb+0x7d/0x210 [ 588.484007][ T6097] kobject_uevent_env+0xc20/0x1800 [ 588.486286][ T6097] ? bus_to_subsys+0x129/0x160 [ 588.488659][ T6097] device_add+0x1186/0x1b40 [ 588.490695][ T6097] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 588.493321][ T6097] ? __init_waitqueue_head+0xca/0x150 [ 588.495132][ T6097] rfkill_register+0x1a9/0xb00 [ 588.496753][ T6097] nfc_register_device+0x11f/0x3c0 [ 588.498495][ T6097] nci_register_device+0x7f4/0xb80 [ 588.500315][ T6097] ? nci_init_complete_req+0x410/0x410 [ 588.502151][ T6097] virtual_ncidev_open+0x147/0x220 [ 588.504158][ T6097] ? virtual_ncidev_read+0x4e0/0x4e0 [ 588.506166][ T6097] misc_open+0x3da/0x4c0 [ 588.507871][ T6097] ? misc_devnode+0x120/0x120 [ 588.509623][ T6097] chrdev_open+0x277/0x700 [ 588.511304][ T6097] ? __unregister_chrdev+0x100/0x100 [ 588.513357][ T6097] ? fsnotify_perm.part.0+0x25d/0x630 [ 588.515448][ T6097] ? fsnotify_perm.part.0+0x268/0x630 [ 588.517613][ T6097] do_dentry_open+0x88b/0x1780 [ 588.519760][ T6097] ? __unregister_chrdev+0x100/0x100 [ 588.521769][ T6097] ? may_open+0x1f2/0x400 [ 588.523456][ T6097] path_openat+0x19af/0x29c0 [ 588.525180][ T6097] ? path_lookupat+0x770/0x770 [ 588.527015][ T6097] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 588.529307][ T6097] do_filp_open+0x1de/0x430 [ 588.531060][ T6097] ? may_open_dev+0xf0/0xf0 [ 588.533015][ T6097] ? _raw_spin_unlock+0x28/0x40 [ 588.534814][ T6097] ? alloc_fd+0x2da/0x6c0 [ 588.536414][ T6097] do_sys_openat2+0x176/0x1e0 [ 588.538135][ T6097] ? build_open_flags+0x690/0x690 [ 588.539989][ T6097] __ia32_compat_sys_openat+0x16e/0x200 [ 588.542023][ T6097] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 588.544171][ T6097] ? ksys_write+0x1a7/0x250 [ 588.545890][ T6097] __do_fast_syscall_32+0x61/0xe0 [ 588.548100][ T6097] do_fast_syscall_32+0x33/0x70 [ 588.550289][ T6097] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 588.553123][ T6097] RIP: 0023:0xf7f9e579 [ 588.554906][ T6097] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 588.562602][ T6097] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 588.566211][ T6097] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 588.569525][ T6097] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 588.573081][ T6097] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 588.576459][ T6097] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 588.579300][ T6097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 588.582229][ T6097] 02:42:36 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 95) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:36 executing program 1: bpf$MAP_CREATE(0xf, 0x0, 0x0) 02:42:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x2100}, 0x48) 02:42:36 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 96) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:36 executing program 1: bpf$MAP_CREATE(0xf, &(0x7f0000000940), 0x48) 02:42:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x2200}, 0x48) [ 588.633952][ T6120] FAULT_INJECTION: forcing a failure. [ 588.633952][ T6120] name failslab, interval 1, probability 0, space 0, times 0 [ 588.640845][ T6120] CPU: 3 PID: 6120 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 588.645388][ T6120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 588.649658][ T6120] Call Trace: [ 588.651199][ T6120] 02:42:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x2300}, 0x48) [ 588.652522][ T6120] dump_stack_lvl+0x125/0x1b0 [ 588.654768][ T6120] should_fail_ex+0x496/0x5b0 [ 588.656811][ T6120] should_failslab+0x9/0x20 [ 588.658782][ T6120] kmem_cache_alloc+0x33a/0x3b0 [ 588.660753][ T6120] skb_clone+0x171/0x3c0 [ 588.662346][ T6120] netlink_broadcast+0x9b0/0xea0 [ 588.664203][ T6120] ? netlink_connect+0x550/0x550 [ 588.666014][ T6120] ? alloc_uevent_skb+0x1bb/0x210 [ 588.667834][ T6120] kobject_uevent_env+0xbd2/0x1800 [ 588.669661][ T6120] ? bus_to_subsys+0x129/0x160 [ 588.671550][ T6120] device_add+0x1186/0x1b40 [ 588.673343][ T6120] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 588.675913][ T6120] ? __init_waitqueue_head+0xca/0x150 [ 588.677892][ T6120] rfkill_register+0x1a9/0xb00 [ 588.679790][ T6120] nfc_register_device+0x11f/0x3c0 [ 588.681672][ T6120] nci_register_device+0x7f4/0xb80 [ 588.683699][ T6120] ? nci_init_complete_req+0x410/0x410 [ 588.685960][ T6120] virtual_ncidev_open+0x147/0x220 [ 588.687969][ T6120] ? virtual_ncidev_read+0x4e0/0x4e0 [ 588.690032][ T6120] misc_open+0x3da/0x4c0 [ 588.691752][ T6120] ? misc_devnode+0x120/0x120 [ 588.693519][ T6120] chrdev_open+0x277/0x700 [ 588.695241][ T6120] ? __unregister_chrdev+0x100/0x100 [ 588.697244][ T6120] ? fsnotify_perm.part.0+0x25d/0x630 [ 588.699278][ T6120] ? fsnotify_perm.part.0+0x268/0x630 [ 588.701295][ T6120] do_dentry_open+0x88b/0x1780 [ 588.703228][ T6120] ? __unregister_chrdev+0x100/0x100 [ 588.705277][ T6120] ? may_open+0x1f2/0x400 [ 588.706988][ T6120] path_openat+0x19af/0x29c0 [ 588.708703][ T6120] ? path_lookupat+0x770/0x770 [ 588.710498][ T6120] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 588.712803][ T6120] do_filp_open+0x1de/0x430 [ 588.714475][ T6120] ? may_open_dev+0xf0/0xf0 [ 588.716232][ T6120] ? _raw_spin_unlock+0x28/0x40 [ 588.718037][ T6120] ? alloc_fd+0x2da/0x6c0 [ 588.719758][ T6120] do_sys_openat2+0x176/0x1e0 [ 588.721837][ T6120] ? build_open_flags+0x690/0x690 [ 588.724040][ T6120] __ia32_compat_sys_openat+0x16e/0x200 [ 588.726470][ T6120] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 588.728802][ T6120] ? ksys_write+0x1a7/0x250 [ 588.730544][ T6120] __do_fast_syscall_32+0x61/0xe0 [ 588.732541][ T6120] do_fast_syscall_32+0x33/0x70 [ 588.734840][ T6120] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 588.737758][ T6120] RIP: 0023:0xf7f8d579 [ 588.739667][ T6120] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 588.748548][ T6120] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 588.752479][ T6120] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 588.755842][ T6120] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 588.758697][ T6120] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 588.761692][ T6120] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 588.765205][ T6120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 588.768041][ T6120] 02:42:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1000000}, 0x48) 02:42:36 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 96) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x2000000}, 0x48) 02:42:36 executing program 1: bpf$MAP_CREATE(0xe, &(0x7f0000000940)=@base={0x13}, 0x48) 02:42:36 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 97) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x3000000}, 0x48) [ 588.804489][ T6144] FAULT_INJECTION: forcing a failure. 02:42:36 executing program 1: bpf$MAP_CREATE(0xe, &(0x7f0000000940)=@base={0x13}, 0x48) [ 588.804489][ T6144] name failslab, interval 1, probability 0, space 0, times 0 [ 588.813151][ T6144] CPU: 0 PID: 6144 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 588.817036][ T6144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 588.821123][ T6144] Call Trace: 02:42:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x4000000}, 0x48) [ 588.822390][ T6144] 02:42:36 executing program 1: bpf$MAP_CREATE(0xe, &(0x7f0000000940)=@base={0x13}, 0x48) [ 588.824044][ T6144] dump_stack_lvl+0x125/0x1b0 [ 588.826503][ T6144] should_fail_ex+0x496/0x5b0 [ 588.828838][ T6144] should_failslab+0x9/0x20 [ 588.831066][ T6144] kmem_cache_alloc+0x33a/0x3b0 [ 588.833472][ T6144] skb_clone+0x171/0x3c0 [ 588.835535][ T6144] netlink_broadcast+0x9b0/0xea0 [ 588.837927][ T6144] ? netlink_connect+0x550/0x550 [ 588.839799][ T6144] ? alloc_uevent_skb+0x1bb/0x210 [ 588.841739][ T6144] kobject_uevent_env+0xbd2/0x1800 [ 588.843751][ T6144] ? bus_to_subsys+0x129/0x160 [ 588.845520][ T6144] device_add+0x1186/0x1b40 [ 588.847195][ T6144] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 588.849701][ T6144] ? __init_waitqueue_head+0xca/0x150 [ 588.851722][ T6144] rfkill_register+0x1a9/0xb00 [ 588.853461][ T6144] nfc_register_device+0x11f/0x3c0 [ 588.855321][ T6144] nci_register_device+0x7f4/0xb80 [ 588.857204][ T6144] ? nci_init_complete_req+0x410/0x410 [ 588.859226][ T6144] virtual_ncidev_open+0x147/0x220 [ 588.861137][ T6144] ? virtual_ncidev_read+0x4e0/0x4e0 [ 588.863301][ T6144] misc_open+0x3da/0x4c0 [ 588.864882][ T6144] ? misc_devnode+0x120/0x120 [ 588.866595][ T6144] chrdev_open+0x277/0x700 [ 588.868249][ T6144] ? __unregister_chrdev+0x100/0x100 [ 588.870241][ T6144] ? fsnotify_perm.part.0+0x25d/0x630 [ 588.872207][ T6144] ? fsnotify_perm.part.0+0x268/0x630 [ 588.874172][ T6144] do_dentry_open+0x88b/0x1780 [ 588.875951][ T6144] ? __unregister_chrdev+0x100/0x100 [ 588.877898][ T6144] ? may_open+0x1f2/0x400 [ 588.879492][ T6144] path_openat+0x19af/0x29c0 [ 588.881188][ T6144] ? path_lookupat+0x770/0x770 [ 588.883005][ T6144] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 588.885309][ T6144] do_filp_open+0x1de/0x430 [ 588.887010][ T6144] ? may_open_dev+0xf0/0xf0 [ 588.888760][ T6144] ? _raw_spin_unlock+0x28/0x40 [ 588.890939][ T6144] ? alloc_fd+0x2da/0x6c0 [ 588.892705][ T6144] do_sys_openat2+0x176/0x1e0 [ 588.894566][ T6144] ? build_open_flags+0x690/0x690 [ 588.896848][ T6144] __ia32_compat_sys_openat+0x16e/0x200 [ 588.899314][ T6144] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 588.901777][ T6144] ? ksys_write+0x1a7/0x250 [ 588.903855][ T6144] __do_fast_syscall_32+0x61/0xe0 [ 588.906123][ T6144] do_fast_syscall_32+0x33/0x70 [ 588.908181][ T6144] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 588.911010][ T6144] RIP: 0023:0xf7f9e579 [ 588.912860][ T6144] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 588.921495][ T6144] RSP: 002b:00000000f7f995ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 588.925363][ T6144] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 588.928901][ T6144] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 588.932462][ T6144] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 588.935938][ T6144] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 588.939495][ T6144] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 588.942760][ T6144] [ 588.951615][ T6150] FAULT_INJECTION: forcing a failure. [ 588.951615][ T6150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.958020][ T6150] CPU: 3 PID: 6150 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 588.962761][ T6150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 02:42:36 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 97) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x5000000}, 0x48) 02:42:36 executing program 1: bpf$MAP_CREATE(0xe, 0x0, 0x0) [ 588.967476][ T6150] Call Trace: [ 588.969184][ T6150] [ 588.970588][ T6150] dump_stack_lvl+0x125/0x1b0 [ 588.972880][ T6150] should_fail_ex+0x496/0x5b0 [ 588.975113][ T6150] _copy_to_user+0x30/0xb0 [ 588.977181][ T6150] simple_read_from_buffer+0xd0/0x150 [ 588.979606][ T6150] proc_fail_nth_read+0x1a4/0x230 [ 588.981935][ T6150] ? proc_sessionid_read+0x230/0x230 [ 588.984383][ T6150] ? security_file_permission+0xdc/0x100 [ 588.986920][ T6150] ? proc_sessionid_read+0x230/0x230 [ 588.989370][ T6150] vfs_read+0x1ce/0x930 [ 588.991307][ T6150] ? kernel_read+0x1b0/0x1b0 [ 588.993493][ T6150] ? __fget_files+0x279/0x410 [ 588.995660][ T6150] ksys_read+0x12f/0x250 [ 588.997615][ T6150] ? vfs_write+0xe40/0xe40 [ 588.999661][ T6150] __do_fast_syscall_32+0x61/0xe0 [ 589.001953][ T6150] do_fast_syscall_32+0x33/0x70 [ 589.004154][ T6150] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 589.007041][ T6150] RIP: 0023:0xf7f8d579 [ 589.008870][ T6150] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 589.017711][ T6150] RSP: 002b:00000000f7f885e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 589.021601][ T6150] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f7f88670 [ 589.025190][ T6150] RDX: 000000000000000f RSI: 00000000f7353ff4 RDI: 0000000000000000 [ 589.028819][ T6150] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 589.032529][ T6150] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 589.036121][ T6150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 589.039430][ T6150] 02:42:36 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:36 executing program 1: bpf$MAP_CREATE(0xe, 0x0, 0x0) 02:42:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x6000000}, 0x48) 02:42:36 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 98) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x7000000}, 0x48) 02:42:36 executing program 1: bpf$MAP_CREATE(0xe, 0x0, 0x0) 02:42:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x8000000}, 0x48) 02:42:36 executing program 1: bpf$MAP_CREATE(0xe, &(0x7f0000000940), 0x48) 02:42:36 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:36 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) (fail_nth: 99) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x9000000}, 0x48) 02:42:36 executing program 1: bpf$MAP_CREATE(0xd, &(0x7f0000000940)=@base={0x13}, 0x48) 02:42:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0xa000000}, 0x48) 02:42:36 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:36 executing program 1: bpf$MAP_CREATE(0xd, &(0x7f0000000940)=@base={0x13}, 0x48) 02:42:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0xb000000}, 0x48) [ 589.151800][ T6197] FAULT_INJECTION: forcing a failure. [ 589.151800][ T6197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.157301][ T6197] CPU: 0 PID: 6197 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 589.161079][ T6197] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 589.164818][ T6197] Call Trace: [ 589.166054][ T6197] [ 589.167164][ T6197] dump_stack_lvl+0x125/0x1b0 [ 589.168921][ T6197] should_fail_ex+0x496/0x5b0 [ 589.170671][ T6197] _copy_to_user+0x30/0xb0 [ 589.172439][ T6197] simple_read_from_buffer+0xd0/0x150 [ 589.174395][ T6197] proc_fail_nth_read+0x1a4/0x230 [ 589.176334][ T6197] ? proc_sessionid_read+0x230/0x230 [ 589.178251][ T6197] ? security_file_permission+0xdc/0x100 [ 589.180319][ T6197] ? proc_sessionid_read+0x230/0x230 02:42:36 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x8, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) [ 589.182261][ T6197] vfs_read+0x1ce/0x930 [ 589.184107][ T6197] ? kernel_read+0x1b0/0x1b0 [ 589.185788][ T6197] ? __fget_files+0x279/0x410 [ 589.187507][ T6197] ksys_read+0x12f/0x250 [ 589.189057][ T6197] ? vfs_write+0xe40/0xe40 [ 589.190676][ T6197] __do_fast_syscall_32+0x61/0xe0 [ 589.192787][ T6197] do_fast_syscall_32+0x33/0x70 [ 589.194547][ T6197] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 589.196874][ T6197] RIP: 0023:0xf7f9e579 [ 589.198362][ T6197] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 589.205393][ T6197] RSP: 002b:00000000f7f995e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 589.208428][ T6197] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f7f99670 [ 589.211348][ T6197] RDX: 000000000000000f RSI: 00000000f7353ff4 RDI: 0000000000000000 [ 589.214249][ T6197] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 589.217154][ T6197] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 589.220059][ T6197] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 589.222969][ T6197] 02:42:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:37 executing program 1: bpf$MAP_CREATE(0xd, &(0x7f0000000940)=@base={0x13}, 0x48) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0xc000000}, 0x48) 02:42:37 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x9, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0xd000000}, 0x48) 02:42:37 executing program 1: bpf$MAP_CREATE(0xd, 0x0, 0x0) 02:42:37 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 1: bpf$MAP_CREATE(0xd, 0x0, 0x0) 02:42:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0xe000000}, 0x48) 02:42:37 executing program 1: bpf$MAP_CREATE(0xd, 0x0, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0xf000000}, 0x48) 02:42:37 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x63, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 1: bpf$MAP_CREATE(0xd, &(0x7f0000000940), 0x48) 02:42:37 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x10000000}, 0x48) 02:42:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x11000000}, 0x48) 02:42:37 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x8, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x12000000}, 0x48) 02:42:37 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x13000000}, 0x48) 02:42:37 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x14000000}, 0x48) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x15000000}, 0x48) 02:42:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x9, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:37 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x16000000}, 0x48) 02:42:37 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x17000000}, 0x48) 02:42:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:37 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x18000000}, 0x48) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x19000000}, 0x48) 02:42:37 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) 02:42:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x63, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:37 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1a000000}, 0x48) 02:42:37 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1b000000}, 0x48) 02:42:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1c000000}, 0x48) 02:42:37 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1d000000}, 0x48) 02:42:37 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1e000000}, 0x48) 02:42:37 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x1f000000}, 0x48) 02:42:37 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x20000000}, 0x48) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x21000000}, 0x48) 02:42:37 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x7) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x3) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x22000000}, 0x48) 02:42:37 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) 02:42:37 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x23000000}, 0x48) 02:42:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13}, 0x48) 02:42:37 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x2}, 0x48) 02:42:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x5) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x3}, 0x48) 02:42:37 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x18) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x4}, 0x48) 02:42:37 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) 02:42:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x5}, 0x48) 02:42:37 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x3e) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x6}, 0x48) 02:42:37 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x7}, 0x48) 02:42:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x7) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:37 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x48) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x8}, 0x48) 02:42:37 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r0 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x9}, 0x48) 02:42:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0xa}, 0x48) 02:42:37 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x4c) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0xb}, 0x48) 02:42:37 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0xc}, 0x48) 02:42:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:37 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0xd}, 0x48) 02:42:37 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) 02:42:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x18) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:37 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x68) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0xe}, 0x48) 02:42:37 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0xf}, 0x48) 02:42:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x3e) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:37 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x6c) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x10}, 0x48) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x11}, 0x48) 02:42:38 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) 02:42:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x48) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x12}, 0x48) 02:42:38 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x74) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x13}, 0x48) 02:42:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x4c) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x14}, 0x48) 02:42:38 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x15}, 0x48) 02:42:38 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x7a) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x16}, 0x48) 02:42:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x17}, 0x48) 02:42:38 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x213) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 1: openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x18}, 0x48) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x19}, 0x48) 02:42:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x68) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x300) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1a}, 0x48) 02:42:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x6c) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 1: openat$nci(0xffffff9c, 0x0, 0x10, 0x0) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1b}, 0x48) 02:42:38 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x500) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 1: openat$nci(0xffffff9c, 0x0, 0x10, 0x0) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1c}, 0x48) 02:42:38 executing program 1: openat$nci(0xffffff9c, 0x0, 0x10, 0x0) 02:42:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x74) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1d}, 0x48) 02:42:38 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x600) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1e}, 0x48) 02:42:38 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x500) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x7a) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x21}, 0x48) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x22}, 0x48) 02:42:38 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x700) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x213) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 1: openat$nci(0xffffff9c, &(0x7f00000007c0), 0x10, 0x0) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x23}, 0x48) 02:42:38 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x1217) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x4c) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x300}, 0x48) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x500}, 0x48) 02:42:38 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x1225) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x300) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x600}, 0x48) 02:42:38 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x500) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x1302) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x700}, 0x48) 02:42:38 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x300) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x900}, 0x48) 02:42:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x600) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x1712) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0xa00}, 0x48) 02:42:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x700) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x3e) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0xb00}, 0x48) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0xc00}, 0x48) 02:42:38 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x1800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0xd00}, 0x48) 02:42:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x1217) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x700) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0xe00}, 0x48) 02:42:38 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x1f00) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x1225) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0xf00}, 0x48) 02:42:38 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x2000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1100}, 0x48) 02:42:38 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x1302) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1200}, 0x48) 02:42:38 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x2512) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1300}, 0x48) 02:42:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x1712) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1400}, 0x48) 02:42:38 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x3e00) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x1800) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1500}, 0x48) 02:42:38 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x1712) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1600}, 0x48) 02:42:38 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x3f00) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1700}, 0x48) 02:42:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x1f00) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1800}, 0x48) 02:42:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x2000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1900}, 0x48) 02:42:38 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x4000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1a00}, 0x48) 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x2512) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1b00}, 0x48) 02:42:39 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x4800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1c00}, 0x48) 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1d00}, 0x48) 02:42:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x3e00) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x4c00) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1e00}, 0x48) 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1f00}, 0x48) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x2000}, 0x48) 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) 02:42:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x3f00) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) 02:42:39 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x6000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x2100}, 0x48) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x2200}, 0x48) 02:42:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x4000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x2300}, 0x48) 02:42:39 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x608a) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1000000}, 0x48) 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) 02:42:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x4800) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x2000000}, 0x48) 02:42:39 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x6800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x3000000}, 0x48) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x4000000}, 0x48) 02:42:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x4c00) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x5000000}, 0x48) 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x6000000}, 0x48) 02:42:39 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x6c00) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) 02:42:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x6000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x7000000}, 0x48) 02:42:39 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x7400) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r0 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) 02:42:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x608a) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) 02:42:39 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x7a00) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x8000000}, 0x48) 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x9000000}, 0x48) 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) 02:42:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x6800) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) 02:42:39 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x10040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0xa000000}, 0x48) 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) 02:42:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x6c00) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0xb000000}, 0x48) 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) 02:42:39 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225e7) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0xc000000}, 0x48) 02:42:39 executing program 1: openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7ffff, 0x0) 02:42:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x7400) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0xd000000}, 0x48) 02:42:39 executing program 1: openat$nci(0xffffff9c, 0x0, 0x7ffff, 0x0) 02:42:39 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225e8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0xe000000}, 0x48) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0xf000000}, 0x48) 02:42:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x7a00) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x10040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225e9) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x10000000}, 0x48) 02:42:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x10040) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x11000000}, 0x48) 02:42:39 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x4c00) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225ea) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x12000000}, 0x48) 02:42:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x22695) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x2512) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225eb) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x13000000}, 0x48) 02:42:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x22696) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x14000000}, 0x48) 02:42:39 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225ec) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x15000000}, 0x48) 02:42:39 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x2512) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x22697) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x16000000}, 0x48) 02:42:39 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225ed) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x17000000}, 0x48) 02:42:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x22698) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x18000000}, 0x48) 02:42:39 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225ee) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225ed) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x19000000}, 0x48) 02:42:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x22699) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1a000000}, 0x48) 02:42:39 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225ef) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:39 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x22696) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1b000000}, 0x48) 02:42:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x2269a) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1c000000}, 0x48) 02:42:40 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225f0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1d000000}, 0x48) 02:42:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x2269b) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225ef) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1e000000}, 0x48) 02:42:40 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225f1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x1f000000}, 0x48) 02:42:40 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x2269c) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x20000000}, 0x48) 02:42:40 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225f2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:40 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x21000000}, 0x48) 02:42:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x2269d) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x22000000}, 0x48) 02:42:40 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x2269e) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x23000000}, 0x48) 02:42:40 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225f3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13}, 0x48) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x2}, 0x48) 02:42:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x2269f) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x3}, 0x48) 02:42:40 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) 02:42:40 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225f4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x4}, 0x48) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x5}, 0x48) 02:42:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226a0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x6}, 0x48) 02:42:40 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225f5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x7}, 0x48) 02:42:40 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 02:42:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226a1) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225f6) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x8}, 0x48) 02:42:40 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x9}, 0x48) 02:42:40 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225f7) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0xa}, 0x48) 02:42:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226a2) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0xb}, 0x48) 02:42:40 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) 02:42:40 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225f8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0xc}, 0x48) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0xd}, 0x48) 02:42:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226a3) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0xe}, 0x48) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0xf}, 0x48) 02:42:40 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x10}, 0x48) 02:42:40 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225f9) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x11}, 0x48) 02:42:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226a4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x12}, 0x48) 02:42:40 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) 02:42:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226a5) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225fa) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x13}, 0x48) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x14}, 0x48) 02:42:40 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) 02:42:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226a6) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225fb) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x15}, 0x48) 02:42:40 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x16}, 0x48) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x17}, 0x48) 02:42:40 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225fc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226a7) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x18}, 0x48) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x19}, 0x48) 02:42:40 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1a}, 0x48) 02:42:40 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225fd) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1b}, 0x48) 02:42:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226a8) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1c}, 0x48) 02:42:40 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225fe) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:40 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1d}, 0x48) 02:42:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226a9) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1e}, 0x48) 02:42:40 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225ff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x21}, 0x48) 02:42:40 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) 02:42:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226aa) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x22}, 0x48) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x23}, 0x48) 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x300}, 0x48) 02:42:40 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) 02:42:40 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x22600) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226ab) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x500}, 0x48) 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x22601) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x600}, 0x48) 02:42:41 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) 02:42:41 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226ac) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x700}, 0x48) 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x22602) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x900}, 0x48) 02:42:41 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) 02:42:41 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226ad) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0xa00}, 0x48) 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x22603) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0xb00}, 0x48) 02:42:41 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226ae) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0xc00}, 0x48) 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x7ffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0xd00}, 0x48) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0xe00}, 0x48) 02:42:41 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226af) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:41 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0xf00}, 0x48) 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x1fffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x260200) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1100}, 0x48) 02:42:41 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1200}, 0x48) 02:42:41 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226b0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x1000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1300}, 0x48) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1400}, 0x48) 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x1260200) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1500}, 0x48) 02:42:41 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226b1) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:41 executing program 1: openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1600}, 0x48) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1700}, 0x48) 02:42:41 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x1fffff) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x2000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 1: openat$nci(0xffffff9c, 0x0, 0x7, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1800}, 0x48) 02:42:41 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x1000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1900}, 0x48) 02:42:41 executing program 1: openat$nci(0xffffff9c, 0x0, 0x7, 0x0) 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x2130000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 1: openat$nci(0xffffff9c, 0x0, 0x7, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1a00}, 0x48) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1b00}, 0x48) 02:42:41 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x2000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1c00}, 0x48) 02:42:41 executing program 1: openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1d00}, 0x48) 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x2260200) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1e00}, 0x48) 02:42:41 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x2130000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x3000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1f00}, 0x48) 02:42:41 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) 02:42:41 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x3000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x2000}, 0x48) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x2100}, 0x48) 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x3260200) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x18}, 0x48) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x2200}, 0x48) 02:42:41 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x4000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x18}, 0x48) 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x4000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x2300}, 0x48) 02:42:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x18}, 0x48) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1000000}, 0x48) 02:42:41 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x5000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x5000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x2000000}, 0x48) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x3000000}, 0x48) 02:42:41 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x6000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x4000000}, 0x48) 02:42:41 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x6000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:41 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x5000000}, 0x48) 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x7000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x6000000}, 0x48) 02:42:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x0, 0x0, 0x0, 0x0, 0x18}, 0x48) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x7000000}, 0x48) 02:42:41 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x7000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x8000000}, 0x48) 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x8000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:41 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x8000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x9000000}, 0x48) 02:42:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0xa000000}, 0x48) 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x10000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0xb000000}, 0x48) 02:42:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:41 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x10000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:41 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226a6) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0xc000000}, 0x48) 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x17120000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0xd000000}, 0x48) 02:42:41 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x17120000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:41 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x10000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0xe000000}, 0x48) 02:42:41 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x18000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0xf000000}, 0x48) 02:42:42 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x18000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x7, 0x0) 02:42:42 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x1f000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x10000000}, 0x48) 02:42:42 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x1f000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x11000000}, 0x48) 02:42:42 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225f9) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x20000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x20000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x12000000}, 0x48) 02:42:42 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226a2) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x25120000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x13000000}, 0x48) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x14000000}, 0x48) 02:42:42 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x25120000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x3e000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x15000000}, 0x48) 02:42:42 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x226a1) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x16000000}, 0x48) 02:42:42 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x3e000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x3f000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x17000000}, 0x48) 02:42:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x8}, 0x48) 02:42:42 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x3f000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x8}, 0x48) 02:42:42 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x40000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x18000000}, 0x48) 02:42:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x8}, 0x48) 02:42:42 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x40000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x40000100) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x19000000}, 0x48) 02:42:42 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:42 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x40000100) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1a000000}, 0x48) 02:42:42 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:42 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x48000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1b000000}, 0x48) 02:42:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x0, 0x0, 0x0, 0x0, 0x8}, 0x48) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1c000000}, 0x48) 02:42:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:42 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x48000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1d000000}, 0x48) 02:42:42 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x4c000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1e000000}, 0x48) 02:42:42 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x4c000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x1f000000}, 0x48) 02:42:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940), 0x48) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x20000000}, 0x48) 02:42:42 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x40000100) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x60000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x21000000}, 0x48) 02:42:42 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x60000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x22000000}, 0x48) 02:42:42 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x40000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x23000000}, 0x48) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13}, 0x48) 02:42:42 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x68000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2}, 0x48) 02:42:42 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x68000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x40000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}, 0x48) 02:42:42 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x6c000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x48) 02:42:42 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x6c000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5}, 0x48) 02:42:42 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x40000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x74000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x48) 02:42:42 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x74000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8}, 0x48) 02:42:42 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x79e5f9f7) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x68000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x79d5f8f7) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x48) 02:42:42 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x60000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x7a000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa}, 0x48) 02:42:42 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x7a000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb}, 0x48) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc}, 0x48) 02:42:42 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x79d5f8f7) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) 02:42:42 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x8a600000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x8a600000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe}, 0x48) 02:42:42 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x3e000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x95260200) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xe4ffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xf}, 0x48) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10}, 0x48) 02:42:42 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x96260200) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11}, 0x48) 02:42:42 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xe7250200) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x4}, 0x48) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x12}, 0x48) 02:42:42 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x97260200) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x4}, 0x48) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x13}, 0x48) 02:42:42 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xe8250200) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x14}, 0x48) 02:42:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x4}, 0x48) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x15}, 0x48) 02:42:43 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x98260200) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:43 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:43 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:43 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xe9250200) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x16}, 0x48) 02:42:43 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x17}, 0x48) 02:42:43 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x99260200) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) 02:42:43 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xea250200) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18}, 0x48) 02:42:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19}, 0x48) 02:42:43 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xeb250200) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) 02:42:43 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x9a260200) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:43 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xec250200) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 02:42:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13}, 0x48) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0x48) 02:42:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13}, 0x48) 02:42:43 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xed250200) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1c}, 0x48) 02:42:43 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x9b260200) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13}, 0x48) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d}, 0x48) 02:42:43 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x225f2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:43 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xee250200) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1e}, 0x48) 02:42:43 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x9c260200) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x21}, 0x48) 02:42:43 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x63, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:43 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xef250200) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x22}, 0x48) 02:42:43 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x9d260200) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x23}, 0x48) 02:42:43 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x63, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x300}, 0x48) 02:42:43 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xf0250200) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x500}, 0x48) 02:42:43 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x9e260200) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:43 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x63, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x600}, 0x48) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x700}, 0x48) 02:42:43 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x9f260200) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:43 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xf1250200) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:43 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x63, 0x0) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x900}, 0x48) 02:42:43 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xa0260200) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa00}, 0x48) 02:42:43 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xf2250200) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb00}, 0x48) 02:42:43 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x63, 0x0) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc00}, 0x48) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd00}, 0x48) 02:42:43 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xa1260200) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:43 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xf3250200) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe00}, 0x48) 02:42:43 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x63, 0x0) 02:42:43 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xa2260200) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xf00}, 0x48) 02:42:43 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xf4250200) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:43 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x63, 0x0) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1100}, 0x48) 02:42:43 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xa3260200) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:43 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xf5250200) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1200}, 0x48) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1300}, 0x48) 02:42:43 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xa4260200) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:43 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x63, 0x0) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1400}, 0x48) 02:42:43 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x63, 0x0) 02:42:43 executing program 2: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xf6250200) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1500}, 0x48) 02:42:43 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xa5260200) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1600}, 0x48) 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1700}, 0x48) 02:42:43 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0xa6260200) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0xffffffff, 0x0, 0x20, 0x21, 0xffffffffffffffff, 0x0, '\x00', r0, r2, 0x3, 0x5, 0x5}, 0x48) symlinkat(&(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00') [ 595.906833][ T8587] list_add corruption. prev->next should be next (ffff888026f4b000), but was ffff88801ebbf000. (prev=ffffffff8e8bcbc0). 02:42:43 executing program 1: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a80)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000500)=@raw=[@cb_func, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x14}], 0x0, 0x4, 0x1e, &(0x7f00000005c0)=""/30, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x80) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, 0xc7, &(0x7f00000000c0)=""/199, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$nci(0xffffff9c, &(0x7f00000007c0), 0x63, 0x0) [ 595.911738][ T8587] ------------[ cut here ]------------ 02:42:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1800}, 0x48) [ 595.914066][ T8587] kernel BUG at lib/list_debug.c:30! [ 595.917628][ T8587] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 595.919949][ T8587] CPU: 1 PID: 8587 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00225-gf837f0a3c948 #0 [ 595.923754][ T8587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 595.928676][ T8587] RIP: 0010:__list_add_valid+0xb6/0x100 [ 595.930660][ T8587] Code: e8 0f 29 46 fd 0f 0b 48 89 d9 48 c7 c7 e0 0a c8 8a e8 fe 28 46 fd 0f 0b 48 89 f1 48 c7 c7 60 0b c8 8a 48 89 de e8 ea 28 46 fd <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 e0 0b c8 8a e8 d3 28 46 [ 595.937760][ T8587] RSP: 0018:ffffc90002a07800 EFLAGS: 00010282 [ 595.939984][ T8587] RAX: 0000000000000075 RBX: ffff888026f4b000 RCX: ffffc90007619000 [ 595.942892][ T8587] RDX: 0000000000000000 RSI: ffffffff816a69c0 RDI: 0000000000000005 [ 595.945817][ T8587] RBP: ffff888025586000 R08: 0000000000000005 R09: 0000000000000000 [ 595.948687][ T8587] R10: 0000000080000000 R11: 6464615f7473696c R12: ffff888025586008 [ 595.951583][ T8587] R13: ffff888026f4b000 R14: ffff8880203f70f0 R15: ffff8880203f7140 [ 595.954592][ T8587] FS: 0000000000000000(0000) GS:ffff88802c700000(0063) knlGS:00000000f7f88b40 [ 595.957836][ T8587] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 595.960273][ T8587] CR2: 00000000f7f87d00 CR3: 000000002058a000 CR4: 0000000000350ee0 [ 595.963177][ T8587] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 595.966121][ T8587] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 595.969029][ T8587] Call Trace: [ 595.970282][ T8587] [ 595.971595][ T8587] ? die+0x31/0x80 [ 595.973031][ T8587] ? do_trap+0x1ab/0x3b0 [ 595.974618][ T8587] ? __list_add_valid+0xb6/0x100 [ 595.976519][ T8587] ? do_error_trap+0x9e/0x160 [ 595.978263][ T8587] ? __list_add_valid+0xb6/0x100 [ 595.980111][ T8587] ? handle_invalid_op+0x2c/0x30 [ 595.981958][ T8587] ? __list_add_valid+0xb6/0x100 [ 595.983821][ T8587] ? exc_invalid_op+0x2d/0x40 [ 595.985579][ T8587] ? asm_exc_invalid_op+0x1a/0x20 [ 595.987424][ T8587] ? vprintk+0x90/0xa0 [ 595.988954][ T8587] ? __list_add_valid+0xb6/0x100 [ 595.990781][ T8587] nfc_llcp_register_device+0x7a3/0x9d0 [ 595.992871][ T8587] nfc_register_device+0x6d/0x3c0 [ 595.994805][ T8587] nci_register_device+0x7f4/0xb80 [ 595.996758][ T8587] ? nci_init_complete_req+0x410/0x410 [ 595.998879][ T8587] virtual_ncidev_open+0x147/0x220 [ 596.000841][ T8587] ? virtual_ncidev_read+0x4e0/0x4e0 [ 596.002870][ T8587] misc_open+0x3da/0x4c0 [ 596.004574][ T8587] ? misc_devnode+0x120/0x120 [ 596.006409][ T8587] chrdev_open+0x277/0x700 [ 596.008050][ T8587] ? __unregister_chrdev+0x100/0x100 [ 596.010042][ T8587] ? fsnotify_perm.part.0+0x25d/0x630 [ 596.012148][ T8587] ? fsnotify_perm.part.0+0x268/0x630 [ 596.014237][ T8587] do_dentry_open+0x88b/0x1780 [ 596.016099][ T8587] ? __unregister_chrdev+0x100/0x100 [ 596.018117][ T8587] ? may_open+0x1f2/0x400 [ 596.019805][ T8587] path_openat+0x19af/0x29c0 [ 596.021587][ T8587] ? path_lookupat+0x770/0x770 [ 596.023412][ T8587] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 596.025685][ T8587] do_filp_open+0x1de/0x430 [ 596.027480][ T8587] ? may_open_dev+0xf0/0xf0 [ 596.029190][ T8587] ? _raw_spin_unlock+0x28/0x40 [ 596.031097][ T8587] ? alloc_fd+0x2da/0x6c0 [ 596.032758][ T8587] do_sys_openat2+0x176/0x1e0 [ 596.034515][ T8587] ? build_open_flags+0x690/0x690 [ 596.036432][ T8587] ? xfd_validate_state+0x5d/0x180 [ 596.038321][ T8587] __ia32_compat_sys_openat+0x16e/0x200 [ 596.040403][ T8587] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 596.042456][ T8587] __do_fast_syscall_32+0x61/0xe0 [ 596.044340][ T8587] do_fast_syscall_32+0x33/0x70 [ 596.046188][ T8587] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 596.048565][ T8587] RIP: 0023:0xf7f8d579 [ 596.050087][ T8587] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 596.057223][ T8587] RSP: 002b:00000000f7f885ac EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 596.060263][ T8587] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200007c0 [ 596.063169][ T8587] RDX: 0000000000000002 RSI: 00000000f6250200 RDI: 0000000000000000 [ 596.066072][ T8587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 596.068961][ T8587] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 596.071914][ T8587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 596.074832][ T8587] [ 596.075981][ T8587] Modules linked in: [ 596.078111][ T8587] ---[ end trace 0000000000000000 ]--- [ 596.080129][ T8587] RIP: 0010:__list_add_valid+0xb6/0x100 [ 596.082090][ T8587] Code: e8 0f 29 46 fd 0f 0b 48 89 d9 48 c7 c7 e0 0a c8 8a e8 fe 28 46 fd 0f 0b 48 89 f1 48 c7 c7 60 0b c8 8a 48 89 de e8 ea 28 46 fd <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 e0 0b c8 8a e8 d3 28 46 [ 596.090674][ T8587] RSP: 0018:ffffc90002a07800 EFLAGS: 00010282 [ 596.092897][ T8587] RAX: 0000000000000075 RBX: ffff888026f4b000 RCX: ffffc90007619000 [ 596.095771][ T8587] RDX: 0000000000000000 RSI: ffffffff816a69c0 RDI: 0000000000000005 [ 596.099970][ T8587] RBP: ffff888025586000 R08: 0000000000000005 R09: 0000000000000000 [ 596.102904][ T8587] R10: 0000000080000000 R11: 6464615f7473696c R12: ffff888025586008 [ 596.106421][ T8587] R13: ffff888026f4b000 R14: ffff8880203f70f0 R15: ffff8880203f7140 [ 596.109290][ T8587] FS: 0000000000000000(0000) GS:ffff88802c600000(0063) knlGS:00000000f7f88b40 [ 596.112477][ T8587] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 596.114876][ T8587] CR2: 00000000f7f76c80 CR3: 000000002058a000 CR4: 0000000000350ef0 [ 596.119485][ T8587] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 596.122310][ T8587] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 596.125164][ T8587] Kernel panic - not syncing: Fatal exception [ 596.128287][ T8587] Kernel Offset: disabled [ 596.129842][ T8587] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:42:43 Registers: info registers vcpu 0 CPU#0 RAX=ffffed100811450d RBX=ffffed100811450e RCX=ffffffff81e50d9f RDX=ffffed100811450e RSI=0000000000000004 RDI=ffff8880408a2868 RBP=ffffed100811450d RSP=ffffc90002a475c8 R8 =0000000000000000 R9 =ffffed100811450d R10=ffff8880408a286b R11=000000000000520a R12=ffff8880408a2828 R13=0000000000000000 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff81da651d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7378000 CR3=000000000c776000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000050 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8495dea5 RDI=ffffffff92407360 RBP=ffffffff92407320 RSP=ffffc90002a071c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6572617764726148 R12=0000000000000000 R13=0000000000000050 R14=ffffffff8495de40 R15=0000000000000000 RIP=ffffffff8495decf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f87d00 CR3=000000002058a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000045cef4 RBX=0000000000000002 RCX=ffffffff8a3249ae RDX=ffffed1005906d9e RSI=ffffffff8ac808e0 RDI=ffffffff8161cdae RBP=ffffed10027df900 RSP=ffffc90000477e10 R8 =0000000000000000 R9 =ffffed1005906d9d R10=ffff88802c836ceb R11=0000000000000000 R12=0000000000000002 R13=ffff888013efc800 R14=ffffffff8eab8410 R15=0000000000000000 RIP=ffffffff8a325bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000056732480 CR3=000000005de69000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000004ce93c RBX=0000000000000003 RCX=ffffffff8a3249ae RDX=ffffed1005926d9e RSI=ffffffff8ac808e0 RDI=ffffffff8161cdae RBP=ffffed1002859000 RSP=ffffc90000487e10 R8 =0000000000000000 R9 =ffffed1005926d9d R10=ffff88802c936ceb R11=0000000000000000 R12=0000000000000003 R13=ffff8880142c8000 R14=ffffffff8eab8410 R15=0000000000000000 RIP=ffffffff8a325bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f737c0c4 CR3=000000005d6f6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000