last executing test programs: 3m32.218591817s ago: executing program 0 (id=1367): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x38}, 0x2}, 0x24000895) 3m32.194209109s ago: executing program 0 (id=1370): unshare(0x400) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d901000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000010000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xf}, 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x63, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @loopback}, &(0x7f0000000080)=0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1fffffbb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000008000000000000000018120000", @ANYBLOB="4eb712cc3a70e187a9c69a3d13bb25f9ff405f4def37fab706dc388d0c096e0d057b2b3a9996b409d27a588f33b6ed9bb05598ac22444d9b02a1a462c6731825f36a6dc1dc8db58bc86584be6e6d861ba0adadeef616e60f867a6fd1c9dbc9ed8361a0b5b2105aec9fe89050c65fa0b80fdc4fa77065b1cff744a994d1f993d0e019bccc4a6030d625e6c7f7e5b3cc981199a9d4ba7be80d4b341486f21b96f23ab422304160b4146d733acdc2bc9270b13bfef62ba4c135bba8e1244a97c322cc8a11b13b513963249cd53499c3ee7e03a31ad24d4492e5a5250343a04715f9cbb4171c50e9439b40ba09c5d210c63d", @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', r2, @fallback=0xbf0fb6cdfe865e97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001840)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008000100", @ANYRESHEX=r4], 0x40}}, 0x0) 3m31.290260802s ago: executing program 0 (id=1395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) lseek(r2, 0x1, 0x0) getdents64(r2, 0x0, 0x0) 3m31.289381213s ago: executing program 0 (id=1396): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x4, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)={0x160, 0x0, 0x1a5c7e3c49ae8e59, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x34, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x48, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) 3m31.251846776s ago: executing program 0 (id=1397): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) 3m31.206379379s ago: executing program 0 (id=1398): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) openat$incfs(0xffffffffffffff9c, &(0x7f00000002c0)='.pending_reads\x00', 0x4200, 0x0) (async) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000002c0)='.pending_reads\x00', 0x4200, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x200004, 0x5, 0xa810, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f00000004c0)=0x5) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x4106, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x7, 0x7800, 0x7c00000, 0x5, {{0x29, 0x4, 0x2, 0x5, 0xa4, 0x67, 0x0, 0x5, 0x29, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0x3c, 0xcf, 0x3, 0xf, [{@multicast1, 0x2616}, {@empty, 0x2}, {@multicast2, 0x9}, {@multicast2, 0x2}, {@local, 0x8}, {@loopback, 0xff}, {@multicast2, 0x7}]}, @lsrr={0x83, 0xf, 0x37, [@empty, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010102]}, @end, @lsrr={0x83, 0xb, 0x72, [@local, @loopback]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x1b, 0x3, 0x3, [{@private=0xa010100, 0x2}, {@broadcast, 0x7}, {@broadcast, 0xfffffffd}, {@multicast1, 0x2}, {@private=0xa010100, 0x101}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) r8 = gettid() rt_sigqueueinfo(r8, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) sched_setscheduler(r8, 0x5, &(0x7f0000000400)=0x7f) (async) sched_setscheduler(r8, 0x5, &(0x7f0000000400)=0x7f) socket$kcm(0x10, 0x2, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c06e8fc55a10a0015000600142603600e120800020000000401a8000700fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="f13d1c9b7a40c0f1e8d38665289e6207a2a5050cdc322d734c5db0d6c0e663532b5c5fde90fc939efc3d594d00436c15b62b0ea72a4714cfb1c575a36b6f62f64fd3765a1058806437e02903f531d613d434b24e85ea8e5851aae53a0829a52c156ed9a31408614c7ff13d94da43ab943c70f5725663d34a3a6e511a114b5f33f6d41fd1f1e674d28258ddb73586f8dcc761", @ANYRESOCT=r4, @ANYRES16=r6, @ANYRES64=r1, @ANYRES16=r2, @ANYRES8, @ANYRESOCT=r9], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f0000000080)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f0000000080)=r5}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10) sendmsg$inet(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r11}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r11, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f0000000a40), 0x8, 0x2f, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r14 = dup(r13) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r14}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r14}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 3m15.967973005s ago: executing program 32 (id=1398): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) openat$incfs(0xffffffffffffff9c, &(0x7f00000002c0)='.pending_reads\x00', 0x4200, 0x0) (async) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000002c0)='.pending_reads\x00', 0x4200, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x200004, 0x5, 0xa810, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f00000004c0)=0x5) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x4106, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x7, 0x7800, 0x7c00000, 0x5, {{0x29, 0x4, 0x2, 0x5, 0xa4, 0x67, 0x0, 0x5, 0x29, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0x3c, 0xcf, 0x3, 0xf, [{@multicast1, 0x2616}, {@empty, 0x2}, {@multicast2, 0x9}, {@multicast2, 0x2}, {@local, 0x8}, {@loopback, 0xff}, {@multicast2, 0x7}]}, @lsrr={0x83, 0xf, 0x37, [@empty, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010102]}, @end, @lsrr={0x83, 0xb, 0x72, [@local, @loopback]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x1b, 0x3, 0x3, [{@private=0xa010100, 0x2}, {@broadcast, 0x7}, {@broadcast, 0xfffffffd}, {@multicast1, 0x2}, {@private=0xa010100, 0x101}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) r8 = gettid() rt_sigqueueinfo(r8, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) sched_setscheduler(r8, 0x5, &(0x7f0000000400)=0x7f) (async) sched_setscheduler(r8, 0x5, &(0x7f0000000400)=0x7f) socket$kcm(0x10, 0x2, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c06e8fc55a10a0015000600142603600e120800020000000401a8000700fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="f13d1c9b7a40c0f1e8d38665289e6207a2a5050cdc322d734c5db0d6c0e663532b5c5fde90fc939efc3d594d00436c15b62b0ea72a4714cfb1c575a36b6f62f64fd3765a1058806437e02903f531d613d434b24e85ea8e5851aae53a0829a52c156ed9a31408614c7ff13d94da43ab943c70f5725663d34a3a6e511a114b5f33f6d41fd1f1e674d28258ddb73586f8dcc761", @ANYRESOCT=r4, @ANYRES16=r6, @ANYRES64=r1, @ANYRES16=r2, @ANYRES8, @ANYRESOCT=r9], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f0000000080)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f0000000080)=r5}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10) sendmsg$inet(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r11}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r11, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f0000000a40), 0x8, 0x2f, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r14 = dup(r13) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r14}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r14}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 3m8.00250716s ago: executing program 5 (id=1767): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000042, &(0x7f0000002240)={[{@nombcache}, {@oldalloc}, {@inlinecrypt}, {@delalloc}, {@mblk_io_submit}, {@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}]}, 0x3, 0x4ea, &(0x7f00000006c0)="$eJzs3UtvG1sdAPD/OPa9yW3AuYVFqURb+lCKoE7S9BGxKK3EY1UJUfZpSJwoihNXidM2UQXuJwChCpBYsWKDxAdAQv0ICKkS7FiwAlWQ0gUbZDR+tI1jh+TWjdvk95NO58w59fz/x4/xnJlRHMCRdSYibkbEQERciIh8sz3TLFFtlPT/vdh6NJuWJGq1O/9MImm2tW/zWPNhqe9/N+KHyc64axubSzOlUnF1e/PmpcXlmYXiQnFlcnLi2tT1qatT43scSZLdrXc4Im586+XPf/Kb79z4w9cf/G36Hxd/lKZ1t9nfaRy90Bh6LgZbDdV3EaV/0vdNtj5CAAA+BOcj4nhEnI2Ir0Y+BmLXw2gAAADgA1T75vDHrSoAAABwOGXq98YmmULzft/hyGQKhcY9vF+MTzKl8lrla/Pl9ZW5xj20I5HLzC+WiuPNe4VHIpek6xP1+uv1y23rkxHxaUQ8yQ+l6/U+AAAA4GAca5v/v8w35v8AAADAIeNiPAAAABx+5v8AAABw+Jn/AwAAwKH2vdu301J7sfWo/jsAc/c31pfK9y/NFdeWCsvrs4XZ8uq9wkK5vFAqFgb+//ZK5fK9K7Gy/nCskl2rjK1tbE4vl9dXKtP13/WeLh4/gDEBAAAA2316+ulfkoiofmOoXlIfNftyfc0MeI8k2baGu1/pUyZAT+zhlP52Z9bfTSLAgWv/TgeODnN8IGlvaDswGOx2qPDH/cdyzAEAAP0x+iXX/+GoyvQ7AaBvftrvBIC+cS4ejq7c/u8ABA6ZHdf/2wx269jz9f9abV8JAQAAPTfcWFSjeS1wODKZQuHVZcFkfrFUHI+Iz0fEn/O5j9P1iT7mCwAAAAAAAAAAAAAAAAAAAAAAAAAfolotiRoAAABwqEVk/p40f/9rNH9+uP38wEfJf/L1ZUQ8+NWdXzycqVRWJ9L2f71qr/yy2X65H2cwAAAA4CjK7drbmqe35vEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Esvth7NtspBxn1+K4ZipFP8bAzWl4ORi4hP/p1E9o3HJREx0IP41ccRcaJT/CRNK0aaWbTHz0TEUJ/jH+tBfDjKnt6KiJudPn+ZOFNfdv78ZZvlbT2/Vf+Qd4zf2v8NdNn/fW6PMU4++91Y1/iPI05mO+9/WvGTLvHP7TH+3R9sbnbrq/06YrTj90+yLdZYZfne2NrG5qXF5ZmF4kJxZXJy4trU9amrU+Nj84ulYvPfjjF+9uXfV590HX+mvnwzfmucI40Mf9xt/Of3OP7/Pnu49YVGNbczfsTFc51f/xP1ZefnP31PXGh+D6T9o616tVF/06nf/ulUt9zS+HNdnv/G65+vdRv/xb0Nf8eYAYD+WtvYXJoplYqrB1A5e6V3G0wOKGeVLpXB9yONg658+6230zocfpvt/LVn40rnDJ27+rxjAgAAeu71QX+/MwEAAAAAAAAAAAAAAAAAAICj6zP98bDT+3tUe8xqf4YKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCr/wUAAP//GpnIcw==") r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000000c0)={0x43, 0x2, "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"}) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x200, 0x0, 0x0, 0x7, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bind$netlink(r3, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x80000, 0x94) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0xffffffff, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x40, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000004, 0x0, 0x80000001, 0x543}, {0x4, 0xf, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b8008000900000009"], 0x184}}, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) set_mempolicy(0x4000, &(0x7f00000005c0)=0x7, 0xfffffffc00000000) close_range(r10, 0xffffffffffffffff, 0x100000000000000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000002cc0)={[{@nodiscard}]}, 0x4, 0x578, &(0x7f0000002d00)="$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") ioctl$EXT4_IOC_GROUP_ADD(r10, 0x40286608, &(0x7f0000000140)={0x9, 0x0, 0x1, 0x5, 0x10000}) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r8, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, r11, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe8f9cf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79e2737b}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ca1fcde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4063d07e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ef6c597}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d0fc627}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) 3m7.203049585s ago: executing program 5 (id=1791): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000f80)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs") 3m6.547392658s ago: executing program 5 (id=1800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcfffdff7b8af8f735a500000000bfa2009d0000000007020000f8ffffffb703000008000000b7040000000000008500000003001a00950000000000000081257c55f69d1df2fef53c1a6efbac8376ea405e9a1190721ff7741cf358fe45123409bfd0eff06a48491cec12fe6f52c206b0f8ac233e1b75bea2a30999df3e73ca7a7981972e59bb1a3be4"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000dbffffff00000000ff070000850000006400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) mount(&(0x7f0000000000), 0x0, 0x0, 0x1001, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='loginuid\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000008005b81816d592198830000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x2, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1f46}, 0x0, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x9) sendfile(0xffffffffffffffff, r1, 0x0, 0x20000023896) 3m6.547190368s ago: executing program 33 (id=1800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcfffdff7b8af8f735a500000000bfa2009d0000000007020000f8ffffffb703000008000000b7040000000000008500000003001a00950000000000000081257c55f69d1df2fef53c1a6efbac8376ea405e9a1190721ff7741cf358fe45123409bfd0eff06a48491cec12fe6f52c206b0f8ac233e1b75bea2a30999df3e73ca7a7981972e59bb1a3be4"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000dbffffff00000000ff070000850000006400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) mount(&(0x7f0000000000), 0x0, 0x0, 0x1001, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='loginuid\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000008005b81816d592198830000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x2, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1f46}, 0x0, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x9) sendfile(0xffffffffffffffff, r1, 0x0, 0x20000023896) 3m0.210686812s ago: executing program 2 (id=1927): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x4000000001}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=']) chdir(&(0x7f0000000600)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) 3m0.209716932s ago: executing program 2 (id=1928): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000400), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x8, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000000314fe0029bd7000ffdbdf250900020073797a310000000008004100736977001400330076657468305f746f5f62726964676500bc546c76f12d4ced1632df60ea5a1f772698fef7e64a94f85a99a4a1a156bffe722074bf23f0efd75cd2a87370357586b0caeb3ba0e660a0053d4d0653ee76372e6622abde5eac77e78aff1a4e849c3d37c0b011ffeb6185da"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 3m0.087996222s ago: executing program 2 (id=1929): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x3, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x2, 0x7, 0x8, 0x1020005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES8], 0x1, 0x376, &(0x7f0000000f80)="$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") r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="96", 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6"], &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0xfffffffffffffe9e) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4], 0x48) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r7}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 2m59.995167699s ago: executing program 2 (id=1930): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000480)='sched_switch\x00', r0}, 0x18) sync() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159}) bind$rds(0xffffffffffffffff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2m59.921684365s ago: executing program 2 (id=1931): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe57, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000000)={[{@mblk_io_submit}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x7b9, &(0x7f00000007c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) unlink(&(0x7f0000000100)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r3 = socket(0x2, 0xa, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xa}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xffeff034}, {0x6, 0x1, 0x9, 0x6}]}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000080)=0x5, &(0x7f00000000c0)=0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r8}, 0x14) 2m59.852460541s ago: executing program 2 (id=1932): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xfffffd49) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000100)) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2m44.720619488s ago: executing program 34 (id=1932): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xfffffd49) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000100)) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.332193551s ago: executing program 1 (id=6295): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(r0, &(0x7f0000000040)='\x00', 0x89901) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) move_mount(r1, 0x0, r0, 0x0, 0x46) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) lsm_get_self_attr(0x67, 0x0, 0x0, 0x0) 2.266096676s ago: executing program 1 (id=6296): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000004c900200030000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf050000b781000000000000040000000000000000000000000000001b00000000000000000000000000000000000000000000000000000000000000ffffffff"]) 2.107231819s ago: executing program 1 (id=6300): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 2.051686323s ago: executing program 1 (id=6302): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) 2.013556017s ago: executing program 1 (id=6303): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) set_mempolicy(0x3, &(0x7f00000007c0)=0x29, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) r1 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) 1.938773843s ago: executing program 1 (id=6305): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000840)={[{@data_err_ignore}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@delalloc}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}, {@quota}]}, 0x41, 0x553, &(0x7f0000000a40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) socket$kcm(0x29, 0x2, 0x0) unshare(0x2c060000) unshare(0x24020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x40, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 1.326717993s ago: executing program 7 (id=6316): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) set_mempolicy(0x3, &(0x7f00000007c0)=0x29, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) r1 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) 1.242973809s ago: executing program 7 (id=6318): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xaee2, 0x80, 0x42, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.224344311s ago: executing program 3 (id=6319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)}, {&(0x7f0000000200)="b700000000000000000000f1dd0fccd5de059d3679f300", 0x17}, {&(0x7f0000000240)="37a8a6c41e", 0x5}, {&(0x7f00000029c0)="3de496b26cb156fc17de651bc2059979575c10", 0x13}], 0x4) 1.126750728s ago: executing program 3 (id=6323): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x80, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="930457492e166f1a7d2c3fe588eab58f3ea3a6af43512f4cf84010250a83d2550482a408c3728ee2ca373c12fe5295a49bac68aa778d8cfb3835e499d3a076b9c07566fd133de5ddbf7e05deafcc17fdd85c7319568c6f05e5d7ea527c0017a1d45a2b26bb8efa769f812cc84539b6e3c839a02f3791f06bbc0e4c5a9dfc3d39c7cab75649bef070f5867d12114769f4b35864215a3b8e7cdeac37174724c64fc60a7d524decc74264cd", 0xaa}, {&(0x7f0000000200)="9e8b8f2dc80cac0ee907fd59549d00000000897e58c2ccedb8", 0x19}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)="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", 0x300}], 0x1}}], 0x2, 0x4) 1.068805453s ago: executing program 3 (id=6325): stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0000005683e0d4cf40f96695dbe6225b2b1b1af15e2156a1f2061c60545ae8d50aabb768e4bee80dafad2c84f6be8c5ecf71745383c90b1420", @ANYRES16=r3, @ANYRESDEC=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc084}, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x18) r5 = msgget$private(0x0, 0x790) msgsnd(r5, &(0x7f0000000b00)=ANY=[@ANYRES8=r3, @ANYBLOB="cbc4072dd6076699d3f129ee72426832cfd318d01586cc8c98f89fd34ac2d5c221e69f18da91efe4d0575ebab94401a5b28a8608c36de4de445ac32bbf24719451915991d6bbc64fbceb3c49f0efc48e9828c17ba32130487d0a1d289fe0dead2a7c758e88f7aa2ec23088d00590cd0b6cbb5289802d8c50c564e70c2e2cadd565e7a8e891ef4d72", @ANYRESHEX=r4, @ANYRES64=r5, @ANYBLOB="dc79459903107724839993132074c6ce8c02e762c54992c7ca6f21867a361d22af083543b964030745108933611e4793112b24fb89015d2bca6b3ef5672f8b7e5261daa8367163a4cc5cf6cd41d562ad8c61850d2e0b792edf7634a2c1d259f6dfd3cbbb5312a0200e5c6bb06262cf9f6428d155e343a4053a973f1ed53ad2a44772f695bbb019cc737e8dca5f614649a50b30ec68539f2c26b47e69ff51f3e02ebfeb2f470558445a53454be976a7c4f2e97a4d814b0d2270e8e70182ef3122dbfa5e64810c7b8bed4804541909418b9d709d205eb158e7d566494668c571595df2b70478bf9dc1e02374055b31b2f2", @ANYRESHEX=r5], 0x401, 0x0) r6 = geteuid() quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000280)=@nullb, r6, &(0x7f00000014c0)='./file0\x00') msgrcv(r5, 0x0, 0x0, 0x0, 0x1000) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000900)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4}, 0x0, 0x0, 0x1a, 0x9, 0x2e3, 0x1, 0x9, 0x1, 0xfff8, 0x7}) msgrcv(r5, &(0x7f0000002080)={0x0, ""/170}, 0xb2, 0x1, 0x2000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x340, 0x25, 0x148, 0x340, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x268) r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) link(&(0x7f00000001c0)='./file1\x00', 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r10, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7c00, 0x0, 0x7) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r12, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000080060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r13, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1400e, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) accept4$bt_l2cap(r1, 0x0, &(0x7f0000000200), 0x80800) 877.348519ms ago: executing program 7 (id=6327): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 849.170361ms ago: executing program 4 (id=6328): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000010000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES8=r0], 0x48}}, 0x0) 786.017886ms ago: executing program 7 (id=6330): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0xffffffff, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r5}, 0x18) r6 = dup(r3) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000d0645e190000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) 665.920126ms ago: executing program 4 (id=6331): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) 659.155836ms ago: executing program 6 (id=6332): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='attr/fscreate\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x7, 0xf9, 0x40, 0x7}]}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)=r6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)={0x5f4, r7, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x528, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'tlb_flush\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+&,\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xf3, 0x5, "595135e4f6388bfbb3c7a7b5d1b990a3ed9d7e958f84d5dcfd5450acb90da34c9fb782a0074542d4d65b5247f952462ac15e0263a5de679b2746f759d82bf26fd50a01d70c1bdaac21d2d6a6bdff9e2f6aafe542ca9ce52ef9f54599f5393f91e66c1434e5dbffcff3ca68e60b1f6d5775528e977e3b294389b2084b982c0d756c289f132c48a892b275b6f87990ff33e584120d13b2d203070d8782765336691cb4da6a55de7fa67361170eef578346aebb71bed03d9961ed0d6541f4bcc92f169161ffbaa808528871023166a468867170d66486eac71884cf347323f5881db84e011876dbd30f1d5efe75dbad8d"}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\\\',\'(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xef, 0x5, "d076ee99555a53035ecce42357244d3d5a714d864b58469cb05f2f36989a89080c31988acff29d423713fcbcfdf3b369826d5074483c6fca5f6c700608865141bcec53bfe55ef0825d6940011def161a469be5a1d282d7f262d3d52be12107de84e3e985c822010866e00e6c3a764fc5906f945c8b01aa325bcbc361a8e087d9851775c1b793f1def41eb6c57a2930faaf7b23509fcab837781f3689368fc57fe4f3101880f088af02a53fd8c797a4d970280bb7e2e0f828e77d0457dedb578d2cb6c49a13ec77c6b8503f1eef22c3a7a04499bed4cb9a0e84085970c4215e443327256e9299db8ba91366"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x9a, 0x4, "cc082530a024babc4f83119aec31b9cd697c2a2953b7df06e20902e94c1d0208d4175c8711f5a2e2cddf462983a0a9f256be037bd54f1d290f51736d612a44e53b895a267d5bf6160f61d5ec9c8e34c9a38b5edfdb1387284ed7c700e0b735963f5c076f6bccd558e5e281149ac7c770e79c1266124e353cc460e3b979928ae814854d65e28d05e744cc99d8e53e0af6cb87d939ced0"}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'tlb_flush\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '//({\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@-#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa4, 0x4, "9af6a72e698a2ef847b1bea59f1e3376a0e7e710e266da0c81e5b483a311f36de7070517a400036c982cd3b3a1f8c70b4821063204ded9c8d307b66f7f4cf8deafec7dfcb4d96faad25a269705b0b09c6e7aacb47dfd43bc52595fd1479839f0e9753c06d87b6804e061a227bd395d3c8fabbfac9254359bd80f115bec6d15d2ba36d392a8fa1fc56693e0cb4cdcf1fc104c5537bfa750ac05e92981dc704a1e"}]}]}, 0x5f4}, 0x1, 0x0, 0x0, 0x4050}, 0x20064010) 658.595647ms ago: executing program 7 (id=6333): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="040000008000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f0000000000", @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) 654.866587ms ago: executing program 4 (id=6334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)}, {&(0x7f0000000200)="b700000000000000000000f1dd0fccd5de059d3679f300", 0x17}, {&(0x7f0000000240)="37a8a6c41e", 0x5}, {&(0x7f00000029c0)="3de496b26cb156fc17de651bc2059979575c10", 0x13}], 0x4) 593.263452ms ago: executing program 7 (id=6335): stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0000005683e0d4cf40f96695dbe6225b2b1b1af15e2156a1f2061c60545ae8d50aabb768e4bee80dafad2c84f6be8c5ecf71745383c90b1420", @ANYRES16=r3, @ANYRESDEC=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc084}, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x18) r5 = msgget$private(0x0, 0x790) msgsnd(r5, &(0x7f0000000b00)=ANY=[@ANYRES8=r3, @ANYBLOB="cbc4072dd6076699d3f129ee72426832cfd318d01586cc8c98f89fd34ac2d5c221e69f18da91efe4d0575ebab94401a5b28a8608c36de4de445ac32bbf24719451915991d6bbc64fbceb3c49f0efc48e9828c17ba32130487d0a1d289fe0dead2a7c758e88f7aa2ec23088d00590cd0b6cbb5289802d8c50c564e70c2e2cadd565e7a8e891ef4d72dc981d9dc6", @ANYRESHEX=r4, @ANYRES64=r5, @ANYBLOB="dc79459903107724839993132074c6ce8c02e762c54992c7ca6f21867a361d22af083543b964030745108933611e4793112b24fb89015d2bca6b3ef5672f8b7e5261daa8367163a4cc5cf6cd41d562ad8c61850d2e0b792edf7634a2c1d259f6dfd3cbbb5312a0200e5c6bb06262cf9f6428d155e343a4053a973f1ed53ad2a44772f695bbb019cc737e8dca5f614649a50b30ec68539f2c26b47e69ff51f3e02ebfeb2f470558445a53454be976a7c4f2e97a4d814b0d2270e8e70182ef3122dbfa5e64810c7b8bed4804541909418b9d709d205eb158e7d566494668c571595df2b70478bf9dc1e02374055b31b2f2", @ANYRESHEX=r5], 0x401, 0x0) r6 = geteuid() quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000280)=@nullb, r6, &(0x7f00000014c0)='./file0\x00') msgrcv(r5, 0x0, 0x0, 0x0, 0x1000) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000900)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4}, 0x0, 0x0, 0x1a, 0x9, 0x2e3, 0x1, 0x9, 0x1, 0xfff8, 0x7}) msgrcv(r5, &(0x7f0000002080)={0x0, ""/170}, 0xb2, 0x1, 0x2000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x340, 0x25, 0x148, 0x340, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x268) r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) link(&(0x7f00000001c0)='./file1\x00', 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r10, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7c00, 0x0, 0x7) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r12, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1400e, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) accept4$bt_l2cap(r1, 0x0, &(0x7f0000000200), 0x80800) 541.711436ms ago: executing program 6 (id=6336): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0009}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x4006daf, &(0x7f0000000400)={0x0, 0x100bd7f, 0x800, 0x3, 0x40024b}, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r0, 0x627, 0x4c1, 0x9, 0x0, 0x18) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="0015954d97357ea18147bbbf64fc9943f9ab1d751664006eef4c5dc3db033e7f79eed817d87a283f22a929830c2e04b6df5b86bdf2f9"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 540.927246ms ago: executing program 4 (id=6337): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_init() capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r1, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x11) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) readahead(0xffffffffffffffff, 0x0, 0x101) msgget$private(0x0, 0x790) setgroups(0x0, &(0x7f00000001c0)) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)=r8}, 0x33) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESHEX=r7, @ANYRESHEX=r8, @ANYRES32=r9], &(0x7f00000004c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x6, &(0x7f00000001c0)=@raw=[@tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000040)='syzkaller\x00', 0xff, 0x0, 0x0, 0x41100, 0x1, '\x00', r4, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x3, 0x8, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r7, r0, r0], &(0x7f00000002c0)=[{0x1, 0x4, 0x10, 0x2}, {0x3, 0x5, 0x8, 0x8}, {0x3, 0x3, 0x3, 0x8}, {0x1, 0x1, 0x7, 0x4}, {0x4, 0x5, 0xf, 0x5}, {0x3, 0x1, 0x0, 0x9}], 0x10, 0x6}, 0x94) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000100)=""/164) 489.57913ms ago: executing program 4 (id=6338): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 488.66325ms ago: executing program 6 (id=6339): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0xe, 0x0, 0x0, 0x0, 0xa93, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r2, 0x7000000) preadv(r2, &(0x7f00000017c0)=[{&(0x7f0000000380)=""/4090, 0xffa}], 0x100000000000020c, 0xa, 0x203) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) 457.638943ms ago: executing program 4 (id=6340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 444.537564ms ago: executing program 6 (id=6341): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast1, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r2, 0x0, 0x0, 0x1, 0x0, 0xd, @loopback, @empty, 0x700, 0x0, 0xfffffffc}}) 167.837626ms ago: executing program 6 (id=6342): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x334a, 0x80, 0x0, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_uring_enter(0xffffffffffffffff, 0x44fd, 0x3, 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) 167.026406ms ago: executing program 3 (id=6343): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, 0x0, 0x0, 0x18}, 0x0) 68.250375ms ago: executing program 3 (id=6344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 21.601368ms ago: executing program 6 (id=6345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0xffffffff, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r5}, 0x18) r6 = dup(r3) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000d0645e190000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) 0s ago: executing program 3 (id=6346): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="040000008000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f0000000000", @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) kernel console output (not intermixed with test programs): e=1326 audit(1754647554.707:30536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20721 comm="syz.4.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d2f9ebe9 code=0x7ffc0000 [ 266.461700][ T29] audit: type=1326 audit(1754647554.707:30537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20721 comm="syz.4.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fc0d2f9ebe9 code=0x7ffc0000 [ 266.486292][ T2955] usb usb4-port1: attempt power cycle [ 266.556628][T20733] netlink: 'syz.7.5639': attribute type 3 has an invalid length. [ 266.670449][T11533] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.717410][T20757] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 266.729718][T20757] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 266.747875][T20759] netlink: 'syz.6.5651': attribute type 3 has an invalid length. [ 266.758242][T20757] bridge0: port 1(batadv0) entered blocking state [ 266.764777][T20757] bridge0: port 1(batadv0) entered disabled state [ 266.771737][T20757] batadv0: entered allmulticast mode [ 266.777597][T20757] batadv0: entered promiscuous mode [ 267.126685][T20796] loop3: detected capacity change from 0 to 512 [ 267.133788][T20796] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 267.147095][T20796] EXT4-fs (loop3): 1 truncate cleaned up [ 267.153401][T20796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.167072][T20796] FAULT_INJECTION: forcing a failure. [ 267.167072][T20796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.180194][T20796] CPU: 1 UID: 0 PID: 20796 Comm: syz.3.5664 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 267.180227][T20796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.180242][T20796] Call Trace: [ 267.180250][T20796] [ 267.180278][T20796] __dump_stack+0x1d/0x30 [ 267.180301][T20796] dump_stack_lvl+0xe8/0x140 [ 267.180380][T20796] dump_stack+0x15/0x1b [ 267.180478][T20796] should_fail_ex+0x265/0x280 [ 267.180515][T20796] should_fail+0xb/0x20 [ 267.180587][T20796] should_fail_usercopy+0x1a/0x20 [ 267.180607][T20796] copy_folio_from_iter_atomic+0x278/0x1170 [ 267.180701][T20796] generic_perform_write+0x2c2/0x490 [ 267.180726][T20796] ext4_buffered_write_iter+0x1ee/0x3c0 [ 267.180758][T20796] ext4_file_write_iter+0xdbf/0xf00 [ 267.180861][T20796] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 267.180895][T20796] vfs_write+0x4a0/0x8e0 [ 267.180975][T20796] ksys_write+0xda/0x1a0 [ 267.181030][T20796] __x64_sys_write+0x40/0x50 [ 267.181053][T20796] x64_sys_call+0x27fe/0x2ff0 [ 267.181075][T20796] do_syscall_64+0xd2/0x200 [ 267.181106][T20796] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 267.181134][T20796] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 267.181160][T20796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.181181][T20796] RIP: 0033:0x7f6629cbebe9 [ 267.181196][T20796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.181273][T20796] RSP: 002b:00007f66286fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 267.181359][T20796] RAX: ffffffffffffffda RBX: 00007f6629ee6090 RCX: 00007f6629cbebe9 [ 267.181374][T20796] RDX: 0000000000032600 RSI: 0000200000000000 RDI: 0000000000000007 [ 267.181386][T20796] RBP: 00007f66286fe090 R08: 0000000000000000 R09: 0000000000000000 [ 267.181398][T20796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.181409][T20796] R13: 00007f6629ee6128 R14: 00007f6629ee6090 R15: 00007ffc7a1f7618 [ 267.181426][T20796] [ 267.385820][T20153] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 267.395193][T20153] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 267.534765][T20817] FAULT_INJECTION: forcing a failure. [ 267.534765][T20817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.548018][T20817] CPU: 0 UID: 0 PID: 20817 Comm: syz.7.5673 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 267.548052][T20817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.548089][T20817] Call Trace: [ 267.548096][T20817] [ 267.548106][T20817] __dump_stack+0x1d/0x30 [ 267.548126][T20817] dump_stack_lvl+0xe8/0x140 [ 267.548216][T20817] dump_stack+0x15/0x1b [ 267.548313][T20817] should_fail_ex+0x265/0x280 [ 267.548380][T20817] should_fail+0xb/0x20 [ 267.548409][T20817] should_fail_usercopy+0x1a/0x20 [ 267.548428][T20817] _copy_to_user+0x20/0xa0 [ 267.548452][T20817] simple_read_from_buffer+0xb5/0x130 [ 267.548536][T20817] proc_fail_nth_read+0x10e/0x150 [ 267.548576][T20817] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.548606][T20817] vfs_read+0x1a0/0x6f0 [ 267.548704][T20817] ? __rcu_read_unlock+0x4f/0x70 [ 267.548729][T20817] ? __fget_files+0x184/0x1c0 [ 267.548759][T20817] ksys_read+0xda/0x1a0 [ 267.548785][T20817] __x64_sys_read+0x40/0x50 [ 267.548806][T20817] x64_sys_call+0x27bc/0x2ff0 [ 267.548840][T20817] do_syscall_64+0xd2/0x200 [ 267.548888][T20817] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 267.548911][T20817] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 267.548932][T20817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.549023][T20817] RIP: 0033:0x7fa880d5d5fc [ 267.549038][T20817] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 267.549058][T20817] RSP: 002b:00007fa87f7bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 267.549081][T20817] RAX: ffffffffffffffda RBX: 00007fa880f85fa0 RCX: 00007fa880d5d5fc [ 267.549129][T20817] RDX: 000000000000000f RSI: 00007fa87f7bf0a0 RDI: 0000000000000004 [ 267.549144][T20817] RBP: 00007fa87f7bf090 R08: 0000000000000000 R09: 0000000000000000 [ 267.549159][T20817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.549171][T20817] R13: 00007fa880f86038 R14: 00007fa880f85fa0 R15: 00007ffe1a05a868 [ 267.549188][T20817] [ 267.823151][T20829] FAULT_INJECTION: forcing a failure. [ 267.823151][T20829] name failslab, interval 1, probability 0, space 0, times 0 [ 267.835869][T20829] CPU: 0 UID: 0 PID: 20829 Comm: syz.4.5679 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 267.835965][T20829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.835978][T20829] Call Trace: [ 267.835984][T20829] [ 267.835991][T20829] __dump_stack+0x1d/0x30 [ 267.836012][T20829] dump_stack_lvl+0xe8/0x140 [ 267.836066][T20829] dump_stack+0x15/0x1b [ 267.836085][T20829] should_fail_ex+0x265/0x280 [ 267.836198][T20829] should_failslab+0x8c/0xb0 [ 267.836221][T20829] __kmalloc_noprof+0xa5/0x3e0 [ 267.836248][T20829] ? pfkey_add+0x85b/0x12e0 [ 267.836273][T20829] pfkey_add+0x85b/0x12e0 [ 267.836300][T20829] pfkey_sendmsg+0x715/0x900 [ 267.836407][T20829] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 267.836428][T20829] __sock_sendmsg+0x142/0x180 [ 267.836505][T20829] ____sys_sendmsg+0x31e/0x4e0 [ 267.836525][T20829] ___sys_sendmsg+0x17b/0x1d0 [ 267.836550][T20829] __x64_sys_sendmsg+0xd4/0x160 [ 267.836595][T20829] x64_sys_call+0x191e/0x2ff0 [ 267.836608][T20829] do_syscall_64+0xd2/0x200 [ 267.836622][T20829] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 267.836636][T20829] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 267.836719][T20829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.836732][T20829] RIP: 0033:0x7fc0d2f9ebe9 [ 267.836742][T20829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.836773][T20829] RSP: 002b:00007fc0d1a07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.836836][T20829] RAX: ffffffffffffffda RBX: 00007fc0d31c5fa0 RCX: 00007fc0d2f9ebe9 [ 267.836844][T20829] RDX: 0000000000040080 RSI: 0000200000000000 RDI: 0000000000000007 [ 267.836852][T20829] RBP: 00007fc0d1a07090 R08: 0000000000000000 R09: 0000000000000000 [ 267.836875][T20829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.836885][T20829] R13: 00007fc0d31c6038 R14: 00007fc0d31c5fa0 R15: 00007fffc54a0088 [ 267.836896][T20829] [ 268.061119][T13856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.090590][T20840] loop1: detected capacity change from 0 to 512 [ 268.145377][T20848] loop1: detected capacity change from 0 to 512 [ 268.166875][T20853] team0: Unable to change to the same mode the team is in [ 268.177084][T20848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.206304][T20848] ext4 filesystem being mounted at /498/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 268.282802][T20861] loop6: detected capacity change from 0 to 512 [ 268.290886][T20861] EXT4-fs: Mount option(s) incompatible with ext3 [ 268.310465][T20861] loop6: detected capacity change from 0 to 512 [ 268.317133][T20861] EXT4-fs: Ignoring removed nobh option [ 268.327341][T20861] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 268.336081][T20861] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.5691: invalid indirect mapped block 256 (level 1) [ 268.350251][T20861] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.5691: invalid indirect mapped block 2683928664 (level 1) [ 268.365777][T20861] EXT4-fs (loop6): 1 truncate cleaned up [ 268.366643][T11533] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.372021][T20861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.417643][T20870] netlink: 'syz.7.5695': attribute type 1 has an invalid length. [ 268.451881][T18512] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.497146][T20881] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 268.503690][T20881] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 268.511540][T20881] vhci_hcd vhci_hcd.0: Device attached [ 268.527808][T20882] vhci_hcd: connection closed [ 268.528038][ T9862] vhci_hcd: stop threads [ 268.537057][ T9862] vhci_hcd: release socket [ 268.541531][ T9862] vhci_hcd: disconnect device [ 268.670518][ T2955] usb usb4-port1: unable to enumerate USB device [ 269.049735][T20944] __nla_validate_parse: 3 callbacks suppressed [ 269.049777][T20944] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5727'. [ 269.054022][T20945] loop1: detected capacity change from 0 to 512 [ 269.056358][T20944] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5727'. [ 269.082690][T20945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.098656][T20945] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.200637][T20967] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 269.207181][T20967] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 269.214662][T20967] vhci_hcd vhci_hcd.0: Device attached [ 269.220371][T20945] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5726'. [ 269.231156][T20967] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 269.237962][T20967] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 269.245601][T20967] vhci_hcd vhci_hcd.0: Device attached [ 269.281883][T11533] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.320115][T20977] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 269.343671][T20967] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 269.350302][T20967] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 269.358005][T20967] vhci_hcd vhci_hcd.0: Device attached [ 269.368981][T20985] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5738'. [ 269.382213][T20967] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 269.388890][T20967] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 269.396610][T20967] vhci_hcd vhci_hcd.0: Device attached [ 269.409606][ T3409] vhci_hcd: vhci_device speed not set [ 269.428394][T20967] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(20) [ 269.428910][T20992] netlink: 'syz.6.5737': attribute type 3 has an invalid length. [ 269.435014][T20967] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 269.435114][T20967] vhci_hcd vhci_hcd.0: Device attached [ 269.452028][T20989] ip6gre1: entered allmulticast mode [ 269.468656][T20967] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 269.468976][T20991] team0: Unable to change to the same mode the team is in [ 269.479445][ T3409] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 269.496799][T20994] vhci_hcd: connection closed [ 269.497087][T20971] vhci_hcd: connection closed [ 269.497141][T20980] vhci_hcd: connection closed [ 269.501964][T20149] vhci_hcd: stop threads [ 269.508897][T20986] vhci_hcd: connection closed [ 269.511324][T20149] vhci_hcd: release socket [ 269.511335][T20149] vhci_hcd: disconnect device [ 269.529783][T20149] vhci_hcd: stop threads [ 269.531578][T20969] vhci_hcd: connection reset by peer [ 269.534064][T20149] vhci_hcd: release socket [ 269.543859][T20149] vhci_hcd: disconnect device [ 269.553011][T20149] vhci_hcd: stop threads [ 269.557292][T20149] vhci_hcd: release socket [ 269.561751][T20149] vhci_hcd: disconnect device [ 269.567152][T20149] vhci_hcd: stop threads [ 269.571730][T20149] vhci_hcd: release socket [ 269.576163][T20149] vhci_hcd: disconnect device [ 269.582302][T20149] vhci_hcd: stop threads [ 269.586567][T20149] vhci_hcd: release socket [ 269.591083][T20149] vhci_hcd: disconnect device [ 269.608126][T21002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5743'. [ 269.702139][T21012] loop4: detected capacity change from 0 to 512 [ 269.711244][T21012] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 269.719575][T21012] System zones: 1-12 [ 269.725249][T21012] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.5748: error while reading EA inode 32 err=-116 [ 269.738026][T21012] EXT4-fs (loop4): Remounting filesystem read-only [ 269.744748][T21012] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 269.754921][T21012] EXT4-fs (loop4): 1 orphan inode deleted [ 269.761258][T21012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.784783][T19789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.819932][T21021] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5751'. [ 269.887802][T21023] team0: Unable to change to the same mode the team is in [ 270.034406][T21041] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 270.040943][T21041] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 270.048736][T21041] vhci_hcd vhci_hcd.0: Device attached [ 270.056508][T21041] netlink: 36 bytes leftover after parsing attributes in process `gtp'. [ 270.217734][T21070] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5764'. [ 270.319381][ T2955] usb 10-1: SetAddress Request (14) to port 0 [ 270.330680][ T2955] usb 10-1: new SuperSpeed USB device number 14 using vhci_hcd [ 270.557711][T21136] loop6: detected capacity change from 0 to 1024 [ 270.566328][T21136] EXT4-fs: Ignoring removed orlov option [ 270.572108][T21136] EXT4-fs: Ignoring removed mblk_io_submit option [ 270.581633][T21136] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 270.602466][T21136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.620957][T21136] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5772'. [ 270.630015][T21136] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5772'. [ 270.654655][T18512] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.959194][T21213] atomic_op ffff88810335e928 conn xmit_atomic 0000000000000000 [ 271.012469][ T29] kauditd_printk_skb: 505 callbacks suppressed [ 271.012484][ T29] audit: type=1326 audit(1754647559.429:31043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.6.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff852d9ebe9 code=0x7ffc0000 [ 271.047670][T21226] FAULT_INJECTION: forcing a failure. [ 271.047670][T21226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.060971][T21226] CPU: 0 UID: 0 PID: 21226 Comm: syz.6.5786 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 271.061071][T21226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.061084][T21226] Call Trace: [ 271.061090][T21226] [ 271.061097][T21226] __dump_stack+0x1d/0x30 [ 271.061118][T21226] dump_stack_lvl+0xe8/0x140 [ 271.061204][T21226] dump_stack+0x15/0x1b [ 271.061220][T21226] should_fail_ex+0x265/0x280 [ 271.061252][T21226] should_fail+0xb/0x20 [ 271.061284][T21226] should_fail_usercopy+0x1a/0x20 [ 271.061314][T21226] _copy_from_user+0x1c/0xb0 [ 271.061344][T21226] ____sys_sendmsg+0x1c5/0x4e0 [ 271.061393][T21226] ___sys_sendmsg+0x17b/0x1d0 [ 271.061512][T21226] __x64_sys_sendmsg+0xd4/0x160 [ 271.061553][T21226] x64_sys_call+0x191e/0x2ff0 [ 271.061578][T21226] do_syscall_64+0xd2/0x200 [ 271.061666][T21226] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 271.061690][T21226] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 271.061830][T21226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.061852][T21226] RIP: 0033:0x7ff852d9ebe9 [ 271.061910][T21226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.061927][T21226] RSP: 002b:00007ff8517ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.061948][T21226] RAX: ffffffffffffffda RBX: 00007ff852fc5fa0 RCX: 00007ff852d9ebe9 [ 271.061965][T21226] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000a [ 271.061980][T21226] RBP: 00007ff8517ff090 R08: 0000000000000000 R09: 0000000000000000 [ 271.061992][T21226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.062003][T21226] R13: 00007ff852fc6038 R14: 00007ff852fc5fa0 R15: 00007ffe0db3ada8 [ 271.062021][T21226] [ 271.245522][ T29] audit: type=1326 audit(1754647559.459:31044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.6.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff852d9ebe9 code=0x7ffc0000 [ 271.269093][ T29] audit: type=1326 audit(1754647559.459:31045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.6.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff852d9ebe9 code=0x7ffc0000 [ 271.292824][ T29] audit: type=1326 audit(1754647559.459:31046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.6.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff852da0b07 code=0x7ffc0000 [ 271.316424][ T29] audit: type=1326 audit(1754647559.459:31047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.6.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff852da0a7c code=0x7ffc0000 [ 271.339983][ T29] audit: type=1326 audit(1754647559.459:31048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.6.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff852da09b4 code=0x7ffc0000 [ 271.363657][ T29] audit: type=1326 audit(1754647559.459:31049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.6.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff852da09b4 code=0x7ffc0000 [ 271.387433][ T29] audit: type=1326 audit(1754647559.459:31050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.6.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff852d9d84a code=0x7ffc0000 [ 271.410987][ T29] audit: type=1326 audit(1754647559.459:31051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.6.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff852d9ebe9 code=0x7ffc0000 [ 271.434749][ T29] audit: type=1326 audit(1754647559.459:31052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.6.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff852d9ebe9 code=0x7ffc0000 [ 271.458725][T21042] vhci_hcd: connection reset by peer [ 271.464330][T20128] vhci_hcd: stop threads [ 271.468627][T20128] vhci_hcd: release socket [ 271.473165][T20128] vhci_hcd: disconnect device [ 271.653313][T21249] team0: Unable to change to the same mode the team is in [ 271.653406][T21252] random: crng reseeded on system resumption [ 271.774751][T21258] vlan2: entered promiscuous mode [ 271.779906][T21258] team0: entered promiscuous mode [ 271.785090][T21258] vlan2: entered allmulticast mode [ 271.790299][T21258] team0: entered allmulticast mode [ 271.876462][T21256] loop3: detected capacity change from 0 to 512 [ 271.892787][T21256] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 271.901191][T21256] System zones: 1-12 [ 271.910595][T21256] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.5797: error while reading EA inode 32 err=-116 [ 271.938326][T21256] EXT4-fs (loop3): Remounting filesystem read-only [ 271.945078][T21256] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 271.982448][T21256] EXT4-fs (loop3): 1 orphan inode deleted [ 272.024613][T21256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.114465][T13856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.344114][T21300] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 272.350663][T21300] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 272.358437][T21300] vhci_hcd vhci_hcd.0: Device attached [ 272.381255][T21305] blktrace: Concurrent blktraces are not allowed on loop9 [ 272.700058][T21335] veth0: entered promiscuous mode [ 273.737136][T21301] vhci_hcd: connection closed [ 273.737543][T20128] vhci_hcd: stop threads [ 273.746601][T20128] vhci_hcd: release socket [ 273.751094][T20128] vhci_hcd: disconnect device [ 273.795981][T21450] batadv0: left allmulticast mode [ 273.801113][T21450] batadv0: left promiscuous mode [ 273.806149][T21450] bridge0: port 1(batadv0) entered disabled state [ 273.822135][T21450] team0: Unable to change to the same mode the team is in [ 274.299741][T21479] netlink: 'syz.6.5833': attribute type 3 has an invalid length. [ 274.320836][T21474] FAULT_INJECTION: forcing a failure. [ 274.320836][T21474] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 274.334228][T21474] CPU: 1 UID: 0 PID: 21474 Comm: syz.1.5831 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 274.334266][T21474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.334280][T21474] Call Trace: [ 274.334363][T21474] [ 274.334371][T21474] __dump_stack+0x1d/0x30 [ 274.334392][T21474] dump_stack_lvl+0xe8/0x140 [ 274.334413][T21474] dump_stack+0x15/0x1b [ 274.334432][T21474] should_fail_ex+0x265/0x280 [ 274.334469][T21474] should_fail_alloc_page+0xf2/0x100 [ 274.334573][T21474] __alloc_frozen_pages_noprof+0xff/0x360 [ 274.334720][T21474] alloc_pages_mpol+0xb3/0x250 [ 274.334757][T21474] alloc_pages_noprof+0x90/0x130 [ 274.334826][T21474] get_free_pages_noprof+0xc/0x40 [ 274.334862][T21474] __se_sys_mincore+0xd9/0x490 [ 274.334889][T21474] __x64_sys_mincore+0x43/0x50 [ 274.334918][T21474] x64_sys_call+0x2a50/0x2ff0 [ 274.334942][T21474] do_syscall_64+0xd2/0x200 [ 274.334966][T21474] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 274.334989][T21474] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 274.335043][T21474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.335063][T21474] RIP: 0033:0x7fd010d6ebe9 [ 274.335078][T21474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.335095][T21474] RSP: 002b:00007fd00f78d038 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 274.335114][T21474] RAX: ffffffffffffffda RBX: 00007fd010f96180 RCX: 00007fd010d6ebe9 [ 274.335160][T21474] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ff5000 [ 274.335175][T21474] RBP: 00007fd00f78d090 R08: 0000000000000000 R09: 0000000000000000 [ 274.335189][T21474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.335204][T21474] R13: 00007fd010f96218 R14: 00007fd010f96180 R15: 00007ffe3d851b28 [ 274.335285][T21474] [ 274.496987][ T3409] usb 7-1: enqueue for inactive port 0 [ 274.526949][ T3409] usb 7-1: enqueue for inactive port 0 [ 274.597169][ T3409] vhci_hcd: vhci_device speed not set [ 274.704982][T21486] loop1: detected capacity change from 0 to 512 [ 274.714121][T21486] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 274.724535][T21486] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.5836: invalid block [ 274.736719][T21486] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5836: invalid indirect mapped block 4294967295 (level 1) [ 274.751303][T21486] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5836: invalid indirect mapped block 4294967295 (level 1) [ 274.765899][T21486] EXT4-fs (loop1): 2 truncates cleaned up [ 274.771960][T21486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.802239][T21486] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.5836: bg 0: block 5: invalid block bitmap [ 274.830425][T11533] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.858458][T21490] loop1: detected capacity change from 0 to 1024 [ 274.865997][T21490] EXT4-fs: Ignoring removed nomblk_io_submit option [ 274.879391][T21490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.912515][T21490] ip6tnl1: entered allmulticast mode [ 274.958151][T11533] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.376630][ T2955] usb 10-1: device descriptor read/8, error -110 [ 275.418108][T21530] tmpfs: Bad value for 'mpol' [ 275.468025][T21533] netlink: 'syz.6.5852': attribute type 3 has an invalid length. [ 275.486819][ T2955] usb 10-1: new SuperSpeed USB device number 14 using vhci_hcd [ 275.507149][ T2955] usb 10-1: enqueue for inactive port 0 [ 275.519517][ T2955] usb 10-1: enqueue for inactive port 0 [ 275.525104][ T2955] usb 10-1: enqueue for inactive port 0 [ 275.573413][T21539] team0: Unable to change to the same mode the team is in [ 276.016277][ T29] kauditd_printk_skb: 1656 callbacks suppressed [ 276.016293][ T29] audit: type=1400 audit(1754647564.431:32709): avc: denied { map_read map_write } for pid=21556 comm="syz.7.5865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 276.044074][ T29] audit: type=1400 audit(1754647564.451:32710): avc: denied { read write } for pid=11533 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 276.069068][ T29] audit: type=1400 audit(1754647564.451:32711): avc: denied { open } for pid=11533 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 276.093405][ T29] audit: type=1400 audit(1754647564.451:32712): avc: denied { ioctl } for pid=11533 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 276.119577][ T29] audit: type=1400 audit(1754647564.451:32713): avc: denied { setopt } for pid=21556 comm="syz.7.5865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 276.142339][ T29] audit: type=1400 audit(1754647564.521:32714): avc: denied { map_create } for pid=21558 comm="syz.1.5866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 276.159252][T21561] loop7: detected capacity change from 0 to 1024 [ 276.161746][ T29] audit: type=1400 audit(1754647564.521:32715): avc: denied { bpf } for pid=21558 comm="syz.1.5866" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 276.171196][T21561] EXT4-fs: Ignoring removed orlov option [ 276.188780][ T29] audit: type=1400 audit(1754647564.531:32716): avc: denied { map_read map_write } for pid=21558 comm="syz.1.5866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 276.194316][T21561] EXT4-fs: Ignoring removed mblk_io_submit option [ 276.214287][ T29] audit: type=1400 audit(1754647564.531:32717): avc: denied { prog_load } for pid=21558 comm="syz.1.5866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 276.239901][ T29] audit: type=1400 audit(1754647564.531:32718): avc: denied { perfmon } for pid=21558 comm="syz.1.5866" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 276.278635][T21561] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 276.313792][T21563] team0: Unable to change to the same mode the team is in [ 276.329211][T21561] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.439549][T18328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.596091][ T2955] usb usb10-port1: attempt power cycle [ 276.713194][T21601] netlink: 'syz.7.5880': attribute type 3 has an invalid length. [ 277.175929][ T3408] usb usb8-port1: attempt power cycle [ 277.659179][T21628] __nla_validate_parse: 6 callbacks suppressed [ 277.659196][T21628] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5892'. [ 277.696521][T21632] tmpfs: Unknown parameter 'm' [ 277.918868][T21655] openvswitch: netlink: Message has 6 unknown bytes. [ 277.965691][T21650] team0: Unable to change to the same mode the team is in [ 278.277523][T21688] loop6: detected capacity change from 0 to 512 [ 278.286737][T21688] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 278.301034][T21688] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 278.309075][T21688] System zones: 1-12 [ 278.314358][T21688] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.5912: corrupted in-inode xattr: e_value size too large [ 278.332900][T21688] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.5912: couldn't read orphan inode 15 (err -117) [ 278.347780][T21688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.362966][T21668] pim6reg: entered allmulticast mode [ 278.374469][T21668] pim6reg: left allmulticast mode [ 278.425916][ T2955] usb usb10-port1: unable to enumerate USB device [ 278.503736][T18512] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.698021][T21720] loop3: detected capacity change from 0 to 1024 [ 278.706310][T21720] EXT4-fs: Ignoring removed orlov option [ 278.711976][T21720] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.719053][T21720] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 278.751055][T21720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.791715][T13856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.800167][T21718] loop6: detected capacity change from 0 to 736 [ 278.835160][T21724] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.896949][T21724] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.974300][T21724] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.985341][T21734] FAULT_INJECTION: forcing a failure. [ 278.985341][T21734] name failslab, interval 1, probability 0, space 0, times 0 [ 278.998216][T21734] CPU: 0 UID: 0 PID: 21734 Comm: syz.1.5927 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 278.998252][T21734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.998288][T21734] Call Trace: [ 278.998295][T21734] [ 278.998303][T21734] __dump_stack+0x1d/0x30 [ 278.998370][T21734] dump_stack_lvl+0xe8/0x140 [ 278.998459][T21734] dump_stack+0x15/0x1b [ 278.998478][T21734] should_fail_ex+0x265/0x280 [ 278.998516][T21734] ? bdi_split_work_to_wbs+0x2db/0x640 [ 278.998546][T21734] should_failslab+0x8c/0xb0 [ 278.998643][T21734] __kmalloc_cache_noprof+0x4c/0x320 [ 278.998675][T21734] bdi_split_work_to_wbs+0x2db/0x640 [ 278.998712][T21734] sync_inodes_sb+0xff/0x440 [ 278.998742][T21734] ? down_read+0x77/0xe0 [ 278.998969][T21734] sync_inodes_one_sb+0x3d/0x50 [ 278.999049][T21734] __iterate_supers+0x110/0x220 [ 278.999068][T21734] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 278.999151][T21734] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 278.999176][T21734] iterate_supers+0x1f/0x30 [ 278.999196][T21734] ksys_sync+0x5c/0xe0 [ 278.999218][T21734] __ia32_sys_sync+0xe/0x20 [ 278.999243][T21734] x64_sys_call+0x2d10/0x2ff0 [ 278.999301][T21734] do_syscall_64+0xd2/0x200 [ 278.999368][T21734] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 278.999391][T21734] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 278.999412][T21734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.999512][T21734] RIP: 0033:0x7fd010d6ebe9 [ 278.999529][T21734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.999548][T21734] RSP: 002b:00007fd00f7cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 278.999568][T21734] RAX: ffffffffffffffda RBX: 00007fd010f95fa0 RCX: 00007fd010d6ebe9 [ 278.999582][T21734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.999633][T21734] RBP: 00007fd00f7cf090 R08: 0000000000000000 R09: 0000000000000000 [ 278.999645][T21734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.999734][T21734] R13: 00007fd010f96038 R14: 00007fd010f95fa0 R15: 00007ffe3d851b28 [ 278.999789][T21734] [ 279.221017][ T3408] usb usb8-port1: unable to enumerate USB device [ 279.283774][T21724] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.404154][T20153] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.421339][T20153] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.451956][T20153] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.504517][T20153] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.517706][T21747] loop1: detected capacity change from 0 to 128 [ 279.779631][T21771] loop6: detected capacity change from 0 to 2048 [ 279.815106][T21771] loop6: p1 < > p4 [ 279.825841][T21771] loop6: p4 size 8388608 extends beyond EOD, truncated [ 279.997636][T21793] loop3: detected capacity change from 0 to 512 [ 280.020920][T21793] EXT4-fs: Ignoring removed oldalloc option [ 280.031285][T21793] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 280.048685][T21793] EXT4-fs (loop3): 1 truncate cleaned up [ 280.054840][T21793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.130569][T21804] netlink: 'syz.6.5958': attribute type 39 has an invalid length. [ 280.511396][T21842] loop6: detected capacity change from 0 to 512 [ 280.553678][T21844] FAULT_INJECTION: forcing a failure. [ 280.553678][T21844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.566769][T21844] CPU: 0 UID: 0 PID: 21844 Comm: syz.4.5975 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 280.566797][T21844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 280.566812][T21844] Call Trace: [ 280.566819][T21844] [ 280.566827][T21844] __dump_stack+0x1d/0x30 [ 280.566850][T21844] dump_stack_lvl+0xe8/0x140 [ 280.566921][T21844] dump_stack+0x15/0x1b [ 280.566936][T21844] should_fail_ex+0x265/0x280 [ 280.566968][T21844] should_fail+0xb/0x20 [ 280.567083][T21844] should_fail_usercopy+0x1a/0x20 [ 280.567101][T21844] _copy_from_user+0x1c/0xb0 [ 280.567193][T21844] do_sock_getsockopt+0xf1/0x240 [ 280.567276][T21844] __x64_sys_getsockopt+0x11e/0x1a0 [ 280.567315][T21844] x64_sys_call+0x2bc6/0x2ff0 [ 280.567340][T21844] do_syscall_64+0xd2/0x200 [ 280.567368][T21844] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 280.567455][T21844] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 280.567480][T21844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.567510][T21844] RIP: 0033:0x7fc0d2f9ebe9 [ 280.567527][T21844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.567548][T21844] RSP: 002b:00007fc0d1a07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 280.567610][T21844] RAX: ffffffffffffffda RBX: 00007fc0d31c5fa0 RCX: 00007fc0d2f9ebe9 [ 280.567626][T21844] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 0000000000000003 [ 280.567712][T21844] RBP: 00007fc0d1a07090 R08: 00002000000010c0 R09: 0000000000000000 [ 280.567727][T21844] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 280.567743][T21844] R13: 00007fc0d31c6038 R14: 00007fc0d31c5fa0 R15: 00007fffc54a0088 [ 280.567763][T21844] [ 281.023755][ T29] kauditd_printk_skb: 1885 callbacks suppressed [ 281.023769][ T29] audit: type=1400 audit(1754647569.444:34604): avc: denied { prog_load } for pid=21863 comm="syz.7.5983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 281.054717][ T29] audit: type=1400 audit(1754647569.444:34605): avc: denied { map_create } for pid=21863 comm="syz.7.5983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 281.094991][ T29] audit: type=1400 audit(1754647569.504:34606): avc: denied { open } for pid=21865 comm="syz.4.5984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 281.114451][ T29] audit: type=1400 audit(1754647569.504:34607): avc: denied { perfmon } for pid=21865 comm="syz.4.5984" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 281.135619][ T29] audit: type=1400 audit(1754647569.504:34608): avc: denied { kernel } for pid=21865 comm="syz.4.5984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 281.155194][ T29] audit: type=1400 audit(1754647569.504:34609): avc: denied { read write } for pid=18328 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 281.179679][ T29] audit: type=1400 audit(1754647569.504:34610): avc: denied { open } for pid=18328 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 281.204010][ T29] audit: type=1400 audit(1754647569.504:34611): avc: denied { ioctl } for pid=18328 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 281.229887][ T29] audit: type=1400 audit(1754647569.504:34612): avc: denied { perfmon } for pid=21865 comm="syz.4.5984" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 281.251170][ T29] audit: type=1400 audit(1754647569.504:34613): avc: denied { cpu } for pid=21865 comm="syz.4.5984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 281.304786][T21871] loop7: detected capacity change from 0 to 512 [ 281.312987][T21871] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 281.325283][T21871] EXT4-fs (loop7): 1 truncate cleaned up [ 281.331234][T21871] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.370192][T18328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.417260][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5989'. [ 281.426640][T21879] netlink: 312 bytes leftover after parsing attributes in process `syz.6.5989'. [ 281.435697][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5989'. [ 281.489415][T21885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5990'. [ 281.502212][T21885] netlink: 312 bytes leftover after parsing attributes in process `syz.4.5990'. [ 281.511361][T21885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5990'. [ 281.527004][T21889] loop7: detected capacity change from 0 to 1024 [ 281.534559][T21889] EXT4-fs: Ignoring removed i_version option [ 281.541653][T21889] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 281.555490][T21889] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.5988: Invalid block bitmap block 0 in block_group 0 [ 281.569653][T21889] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.5988: Failed to acquire dquot type 0 [ 281.581178][T21889] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.5988: Freeing blocks not in datazone - block = 0, count = 4096 [ 281.594832][T21889] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.5988: Invalid inode bitmap blk 0 in block_group 0 [ 281.607749][T21889] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 281.616516][T21889] EXT4-fs (loop7): 1 orphan inode deleted [ 281.622641][T21889] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.635401][T20153] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:66: Failed to release dquot type 0 [ 281.648788][T21879] FAULT_INJECTION: forcing a failure. [ 281.648788][T21879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.661975][T21879] CPU: 1 UID: 0 PID: 21879 Comm: syz.6.5989 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 281.662005][T21879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.662017][T21879] Call Trace: [ 281.662023][T21879] [ 281.662029][T21879] __dump_stack+0x1d/0x30 [ 281.662054][T21879] dump_stack_lvl+0xe8/0x140 [ 281.662090][T21879] dump_stack+0x15/0x1b [ 281.662109][T21879] should_fail_ex+0x265/0x280 [ 281.662223][T21879] should_fail+0xb/0x20 [ 281.662252][T21879] should_fail_usercopy+0x1a/0x20 [ 281.662271][T21879] _copy_to_user+0x20/0xa0 [ 281.662321][T21879] simple_read_from_buffer+0xb5/0x130 [ 281.662347][T21879] proc_fail_nth_read+0x10e/0x150 [ 281.662416][T21879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.662502][T21879] vfs_read+0x1a0/0x6f0 [ 281.662526][T21879] ? __rcu_read_unlock+0x4f/0x70 [ 281.662550][T21879] ? __fget_files+0x184/0x1c0 [ 281.662626][T21879] ksys_read+0xda/0x1a0 [ 281.662648][T21879] __x64_sys_read+0x40/0x50 [ 281.662668][T21879] x64_sys_call+0x27bc/0x2ff0 [ 281.662689][T21879] do_syscall_64+0xd2/0x200 [ 281.662840][T21879] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 281.662897][T21879] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 281.662922][T21879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.662943][T21879] RIP: 0033:0x7ff852d9d5fc [ 281.663033][T21879] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 281.663051][T21879] RSP: 002b:00007ff8517ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.663072][T21879] RAX: ffffffffffffffda RBX: 00007ff852fc5fa0 RCX: 00007ff852d9d5fc [ 281.663087][T21879] RDX: 000000000000000f RSI: 00007ff8517ff0a0 RDI: 000000000000000d [ 281.663103][T21879] RBP: 00007ff8517ff090 R08: 0000000000000000 R09: 0000000000000000 [ 281.663171][T21879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.663184][T21879] R13: 00007ff852fc6038 R14: 00007ff852fc5fa0 R15: 00007ffe0db3ada8 [ 281.663206][T21879] [ 281.955870][T21900] tipc: Started in network mode [ 281.960800][T21900] tipc: Node identity 22c2b6fd0e35, cluster identity 4711 [ 281.968002][T21900] tipc: Enabled bearer , priority 0 [ 282.043963][T21904] loop1: detected capacity change from 0 to 512 [ 282.051566][T21905] tipc: Disabling bearer [ 282.177106][T21911] loop6: detected capacity change from 0 to 1024 [ 282.185424][T21911] EXT4-fs: Ignoring removed orlov option [ 282.191152][T21911] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.199363][T21911] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 282.229055][T21911] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.270526][T18328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.281541][T18512] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.451227][T21924] team0: Unable to change to the same mode the team is in [ 282.740555][T21951] loop7: detected capacity change from 0 to 1024 [ 282.897226][T21957] team0: Unable to change to the same mode the team is in [ 282.994114][T13856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.014588][T21965] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6020'. [ 283.221446][T21978] loop6: detected capacity change from 0 to 512 [ 283.242976][T21978] journal_path: Lookup failure for './file0/../file0' [ 283.249826][T21978] EXT4-fs: error: could not find journal device path [ 283.337866][T21987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6027'. [ 283.346819][T21987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6027'. [ 283.417008][T21992] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6031'. [ 283.428801][T21992] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6031'. [ 283.436111][T21996] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6033'. [ 283.591088][T22001] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 283.599445][T22001] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 283.873741][T22016] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 283.953444][T22021] FAULT_INJECTION: forcing a failure. [ 283.953444][T22021] name failslab, interval 1, probability 0, space 0, times 0 [ 283.966291][T22021] CPU: 0 UID: 0 PID: 22021 Comm: +}[@ Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 283.966325][T22021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.966365][T22021] Call Trace: [ 283.966371][T22021] [ 283.966381][T22021] __dump_stack+0x1d/0x30 [ 283.966404][T22021] dump_stack_lvl+0xe8/0x140 [ 283.966426][T22021] dump_stack+0x15/0x1b [ 283.966445][T22021] should_fail_ex+0x265/0x280 [ 283.966512][T22021] should_failslab+0x8c/0xb0 [ 283.966590][T22021] kmem_cache_alloc_noprof+0x50/0x310 [ 283.966628][T22021] ? radix_tree_node_alloc+0x8a/0x1f0 [ 283.966650][T22021] radix_tree_node_alloc+0x8a/0x1f0 [ 283.966691][T22021] idr_get_free+0x1fa/0x550 [ 283.966786][T22021] idr_alloc_u32+0xca/0x180 [ 283.966812][T22021] tcf_idr_check_alloc+0x193/0x240 [ 283.966836][T22021] tcf_pedit_init+0x1cf/0x9a0 [ 283.966870][T22021] ? should_fail_ex+0xdb/0x280 [ 283.967003][T22021] tcf_action_init_1+0x367/0x4a0 [ 283.967033][T22021] tcf_action_init+0x267/0x6d0 [ 283.967056][T22021] ? _find_next_bit+0x61/0x90 [ 283.967104][T22021] tc_ctl_action+0x291/0x830 [ 283.967290][T22021] ? __pfx_tc_ctl_action+0x10/0x10 [ 283.967316][T22021] rtnetlink_rcv_msg+0x65a/0x6d0 [ 283.967343][T22021] netlink_rcv_skb+0x123/0x220 [ 283.967376][T22021] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 283.967411][T22021] rtnetlink_rcv+0x1c/0x30 [ 283.967511][T22021] netlink_unicast+0x5bd/0x690 [ 283.967545][T22021] netlink_sendmsg+0x58b/0x6b0 [ 283.967601][T22021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.967634][T22021] __sock_sendmsg+0x142/0x180 [ 283.967663][T22021] ____sys_sendmsg+0x31e/0x4e0 [ 283.967763][T22021] ___sys_sendmsg+0x17b/0x1d0 [ 283.967811][T22021] __x64_sys_sendmsg+0xd4/0x160 [ 283.967886][T22021] x64_sys_call+0x191e/0x2ff0 [ 283.967980][T22021] do_syscall_64+0xd2/0x200 [ 283.968006][T22021] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 283.968033][T22021] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 283.968072][T22021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.968092][T22021] RIP: 0033:0x7f6629cbebe9 [ 283.968107][T22021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.968177][T22021] RSP: 002b:00007f662871f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.968197][T22021] RAX: ffffffffffffffda RBX: 00007f6629ee5fa0 RCX: 00007f6629cbebe9 [ 283.968211][T22021] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 283.968226][T22021] RBP: 00007f662871f090 R08: 0000000000000000 R09: 0000000000000000 [ 283.968240][T22021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.968254][T22021] R13: 00007f6629ee6038 R14: 00007f6629ee5fa0 R15: 00007ffc7a1f7618 [ 283.968342][T22021] [ 283.988776][T22022] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6044'. [ 284.115624][T22030] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 284.144118][T22018] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6044'. [ 284.144681][T22030] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 284.274578][T22030] vhci_hcd vhci_hcd.0: Device attached [ 284.312204][T22030] netlink: 36 bytes leftover after parsing attributes in process `gtp'. [ 284.428884][T22042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6051'. [ 284.469929][T22047] loop6: detected capacity change from 0 to 128 [ 284.529777][T22053] loop3: detected capacity change from 0 to 1024 [ 284.537642][T22053] EXT4-fs: Ignoring removed orlov option [ 284.543416][T22053] EXT4-fs: Ignoring removed mblk_io_submit option [ 284.550022][ T3409] usb 16-1: SetAddress Request (13) to port 0 [ 284.561976][ T3409] usb 16-1: new SuperSpeed USB device number 13 using vhci_hcd [ 284.566012][T22053] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 284.610540][T22053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.636062][T22059] FAULT_INJECTION: forcing a failure. [ 284.636062][T22059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.649256][T22059] CPU: 0 UID: 0 PID: 22059 Comm: syz.4.6054 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 284.649287][T22059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.649299][T22059] Call Trace: [ 284.649328][T22059] [ 284.649335][T22059] __dump_stack+0x1d/0x30 [ 284.649356][T22059] dump_stack_lvl+0xe8/0x140 [ 284.649375][T22059] dump_stack+0x15/0x1b [ 284.649393][T22059] should_fail_ex+0x265/0x280 [ 284.649486][T22059] should_fail+0xb/0x20 [ 284.649553][T22059] should_fail_usercopy+0x1a/0x20 [ 284.649575][T22059] _copy_to_user+0x20/0xa0 [ 284.649602][T22059] simple_read_from_buffer+0xb5/0x130 [ 284.649627][T22059] proc_fail_nth_read+0x10e/0x150 [ 284.649665][T22059] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.649723][T22059] vfs_read+0x1a0/0x6f0 [ 284.649746][T22059] ? __rcu_read_unlock+0x4f/0x70 [ 284.649771][T22059] ? __fget_files+0x184/0x1c0 [ 284.649835][T22059] ksys_read+0xda/0x1a0 [ 284.649858][T22059] __x64_sys_read+0x40/0x50 [ 284.649882][T22059] x64_sys_call+0x27bc/0x2ff0 [ 284.649906][T22059] do_syscall_64+0xd2/0x200 [ 284.649957][T22059] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 284.649983][T22059] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 284.650008][T22059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.650078][T22059] RIP: 0033:0x7fc0d2f9d5fc [ 284.650149][T22059] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 284.650169][T22059] RSP: 002b:00007fc0d1a07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 284.650192][T22059] RAX: ffffffffffffffda RBX: 00007fc0d31c5fa0 RCX: 00007fc0d2f9d5fc [ 284.650208][T22059] RDX: 000000000000000f RSI: 00007fc0d1a070a0 RDI: 0000000000000007 [ 284.650266][T22059] RBP: 00007fc0d1a07090 R08: 0000000000000000 R09: 0000000000000000 [ 284.650281][T22059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 284.650296][T22059] R13: 00007fc0d31c6038 R14: 00007fc0d31c5fa0 R15: 00007fffc54a0088 [ 284.650318][T22059] [ 284.894447][T22065] tipc: Started in network mode [ 284.899394][T22065] tipc: Node identity 121cfa1fd8be, cluster identity 4711 [ 284.906794][T22065] tipc: Enabled bearer , priority 0 [ 284.919665][T13856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.988149][T22074] FAULT_INJECTION: forcing a failure. [ 284.988149][T22074] name failslab, interval 1, probability 0, space 0, times 0 [ 285.000825][T22074] CPU: 0 UID: 0 PID: 22074 Comm: syz.3.6057 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 285.000935][T22074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.000950][T22074] Call Trace: [ 285.000957][T22074] [ 285.000967][T22074] __dump_stack+0x1d/0x30 [ 285.000992][T22074] dump_stack_lvl+0xe8/0x140 [ 285.001015][T22074] dump_stack+0x15/0x1b [ 285.001087][T22074] should_fail_ex+0x265/0x280 [ 285.001124][T22074] should_failslab+0x8c/0xb0 [ 285.001152][T22074] __kmalloc_noprof+0xa5/0x3e0 [ 285.001207][T22074] ? security_msg_msg_alloc+0x45/0x100 [ 285.001244][T22074] ? should_fail_ex+0xdb/0x280 [ 285.001277][T22074] security_msg_msg_alloc+0x45/0x100 [ 285.001308][T22074] load_msg+0x226/0x2f0 [ 285.001344][T22074] do_msgsnd+0xdc/0xaf0 [ 285.001454][T22074] ? __rcu_read_unlock+0x4f/0x70 [ 285.001487][T22074] ? __fget_files+0x184/0x1c0 [ 285.001516][T22074] ? fput+0x8f/0xc0 [ 285.001585][T22074] __x64_sys_msgsnd+0xa8/0xc0 [ 285.001621][T22074] x64_sys_call+0x17c1/0x2ff0 [ 285.001657][T22074] do_syscall_64+0xd2/0x200 [ 285.001695][T22074] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 285.001719][T22074] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 285.001811][T22074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.001842][T22074] RIP: 0033:0x7f6629cbebe9 [ 285.001860][T22074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.001878][T22074] RSP: 002b:00007f662871f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 285.001896][T22074] RAX: ffffffffffffffda RBX: 00007f6629ee5fa0 RCX: 00007f6629cbebe9 [ 285.001941][T22074] RDX: 0000000000002000 RSI: 0000200000000480 RDI: 0000000000000000 [ 285.001956][T22074] RBP: 00007f662871f090 R08: 0000000000000000 R09: 0000000000000000 [ 285.001970][T22074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.001985][T22074] R13: 00007f6629ee6038 R14: 00007f6629ee5fa0 R15: 00007ffc7a1f7618 [ 285.002007][T22074] [ 285.229997][T22075] tipc: Disabling bearer [ 285.268888][T22091] loop4: detected capacity change from 0 to 512 [ 285.317647][T22091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.341129][T22099] loop3: detected capacity change from 0 to 512 [ 285.350401][T22091] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.393114][T22099] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.6060: casefold flag without casefold feature [ 285.431577][T22099] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6060: couldn't read orphan inode 15 (err -117) [ 285.470443][T19789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.499143][T22099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.598895][T22121] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 285.645246][T13856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.756974][T22130] loop3: detected capacity change from 0 to 1024 [ 285.779174][T22130] EXT4-fs: Ignoring removed orlov option [ 285.784990][T22130] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.806838][T22130] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 285.886496][T22130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.949988][T13856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.032511][ T29] kauditd_printk_skb: 1819 callbacks suppressed [ 286.032528][ T29] audit: type=1400 audit(1754647574.456:36430): avc: denied { prog_load } for pid=22158 comm="syz.1.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 286.061448][ T29] audit: type=1400 audit(1754647574.456:36431): avc: denied { bpf } for pid=22158 comm="syz.1.6075" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 286.082427][ T29] audit: type=1400 audit(1754647574.456:36432): avc: denied { prog_load } for pid=22158 comm="syz.1.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 286.101751][ T29] audit: type=1400 audit(1754647574.456:36433): avc: denied { bpf } for pid=22158 comm="syz.1.6075" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 286.122506][ T29] audit: type=1400 audit(1754647574.456:36434): avc: denied { perfmon } for pid=22158 comm="syz.1.6075" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 286.143602][ T29] audit: type=1400 audit(1754647574.456:36435): avc: denied { prog_run } for pid=22158 comm="syz.1.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 286.162799][ T29] audit: type=1400 audit(1754647574.456:36436): avc: denied { create } for pid=22158 comm="syz.1.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 286.183680][ T29] audit: type=1400 audit(1754647574.456:36437): avc: denied { create } for pid=22158 comm="syz.1.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 286.204473][ T29] audit: type=1400 audit(1754647574.456:36438): avc: denied { write } for pid=22158 comm="syz.1.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 286.225207][ T29] audit: type=1400 audit(1754647574.456:36439): avc: denied { map_create } for pid=22158 comm="syz.1.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 286.433020][T22183] team0: Unable to change to the same mode the team is in [ 286.502364][T22191] FAULT_INJECTION: forcing a failure. [ 286.502364][T22191] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 286.515819][T22191] CPU: 0 UID: 0 PID: 22191 Comm: syz.4.6082 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 286.515847][T22191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.515860][T22191] Call Trace: [ 286.515868][T22191] [ 286.515877][T22191] __dump_stack+0x1d/0x30 [ 286.515943][T22191] dump_stack_lvl+0xe8/0x140 [ 286.515997][T22191] dump_stack+0x15/0x1b [ 286.516016][T22191] should_fail_ex+0x265/0x280 [ 286.516070][T22191] should_fail_alloc_page+0xf2/0x100 [ 286.516141][T22191] __alloc_frozen_pages_noprof+0xff/0x360 [ 286.516180][T22191] alloc_pages_mpol+0xb3/0x250 [ 286.516213][T22191] alloc_pages_noprof+0x90/0x130 [ 286.516250][T22191] __pmd_alloc+0x47/0x470 [ 286.516275][T22191] handle_mm_fault+0x19d4/0x2c20 [ 286.516296][T22191] ? __rcu_read_unlock+0x4f/0x70 [ 286.516336][T22191] do_user_addr_fault+0x3fe/0x1090 [ 286.516373][T22191] ? kstrtouint_from_user+0x9f/0xf0 [ 286.516394][T22191] exc_page_fault+0x62/0xa0 [ 286.516426][T22191] asm_exc_page_fault+0x26/0x30 [ 286.516445][T22191] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 286.516485][T22191] Code: f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 286.516505][T22191] RSP: 0018:ffffc90003b4fe40 EFLAGS: 00050206 [ 286.516523][T22191] RAX: ffff88810194aba0 RBX: 0000000000000070 RCX: 0000000000000070 [ 286.516535][T22191] RDX: 0000000000000000 RSI: ffffc90003b4fe78 RDI: 0000200000000000 [ 286.516590][T22191] RBP: ffffc90003b4ff48 R08: 0000000000000142 R09: 0000000000000000 [ 286.516605][T22191] R10: 0001c90003b4fe78 R11: 0001c90003b4fee7 R12: 0000200000000070 [ 286.516618][T22191] R13: 00007ffffffff000 R14: 0000200000000000 R15: ffffc90003b4fe78 [ 286.516667][T22191] _copy_to_user+0x7c/0xa0 [ 286.516698][T22191] __x64_sys_sysinfo+0x57/0xa0 [ 286.516778][T22191] x64_sys_call+0x284b/0x2ff0 [ 286.516798][T22191] do_syscall_64+0xd2/0x200 [ 286.516856][T22191] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 286.516883][T22191] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 286.516907][T22191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.516930][T22191] RIP: 0033:0x7fc0d2f9ebe9 [ 286.516985][T22191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.517002][T22191] RSP: 002b:00007fc0d1a07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000063 [ 286.517019][T22191] RAX: ffffffffffffffda RBX: 00007fc0d31c5fa0 RCX: 00007fc0d2f9ebe9 [ 286.517032][T22191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 286.517106][T22191] RBP: 00007fc0d1a07090 R08: 0000000000000000 R09: 0000000000000000 [ 286.517120][T22191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.517135][T22191] R13: 00007fc0d31c6038 R14: 00007fc0d31c5fa0 R15: 00007fffc54a0088 [ 286.517153][T22191] [ 286.813993][T22195] FAULT_INJECTION: forcing a failure. [ 286.813993][T22195] name failslab, interval 1, probability 0, space 0, times 0 [ 286.826815][T22195] CPU: 1 UID: 0 PID: 22195 Comm: syz.3.6083 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 286.826849][T22195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.826864][T22195] Call Trace: [ 286.826872][T22195] [ 286.826881][T22195] __dump_stack+0x1d/0x30 [ 286.826905][T22195] dump_stack_lvl+0xe8/0x140 [ 286.826923][T22195] dump_stack+0x15/0x1b [ 286.826992][T22195] should_fail_ex+0x265/0x280 [ 286.827028][T22195] should_failslab+0x8c/0xb0 [ 286.827061][T22195] __kvmalloc_node_noprof+0x123/0x4e0 [ 286.827133][T22195] ? bpf_test_run_xdp_live+0xed/0xfe0 [ 286.827166][T22195] bpf_test_run_xdp_live+0xed/0xfe0 [ 286.827200][T22195] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 286.827272][T22195] ? __pfx_autoremove_wake_function+0x10/0x10 [ 286.827309][T22195] ? 0xffffffffa0205240 [ 286.827405][T22195] ? synchronize_rcu+0x45/0x320 [ 286.827438][T22195] ? 0xffffffffa0205240 [ 286.827454][T22195] ? 0xffffffffa0205240 [ 286.827469][T22195] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 286.827504][T22195] ? 0xffffffffa02017d4 [ 286.827579][T22195] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 286.827623][T22195] bpf_prog_test_run_xdp+0x4f5/0x910 [ 286.827657][T22195] ? __rcu_read_unlock+0x4f/0x70 [ 286.827690][T22195] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 286.827720][T22195] bpf_prog_test_run+0x227/0x390 [ 286.827751][T22195] __sys_bpf+0x4b9/0x7b0 [ 286.827803][T22195] __x64_sys_bpf+0x41/0x50 [ 286.827831][T22195] x64_sys_call+0x2aea/0x2ff0 [ 286.827856][T22195] do_syscall_64+0xd2/0x200 [ 286.827953][T22195] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 286.828004][T22195] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 286.828028][T22195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.828059][T22195] RIP: 0033:0x7f6629cbebe9 [ 286.828076][T22195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.828093][T22195] RSP: 002b:00007f662871f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 286.828113][T22195] RAX: ffffffffffffffda RBX: 00007f6629ee5fa0 RCX: 00007f6629cbebe9 [ 286.828175][T22195] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 286.828187][T22195] RBP: 00007f662871f090 R08: 0000000000000000 R09: 0000000000000000 [ 286.828201][T22195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.828255][T22195] R13: 00007f6629ee6038 R14: 00007f6629ee5fa0 R15: 00007ffc7a1f7618 [ 286.828352][T22195] [ 287.111398][T22032] vhci_hcd: connection reset by peer [ 287.120241][T20128] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.130720][T20128] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.179950][T22210] loop3: detected capacity change from 0 to 1024 [ 287.229469][T20120] vhci_hcd: stop threads [ 287.233794][T20120] vhci_hcd: release socket [ 287.238230][T20120] vhci_hcd: disconnect device [ 287.244700][T22210] EXT4-fs: Ignoring removed nobh option [ 287.250355][T22210] EXT4-fs: Ignoring removed bh option [ 287.309346][T20128] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.319889][T20128] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.337513][T22210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.368962][T22210] ext4 filesystem being mounted at /582/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.394245][T20128] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.404616][T20128] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.452792][T13856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.503242][T20128] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.513697][T20128] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.553869][T22179] lo speed is unknown, defaulting to 1000 [ 287.611619][T22234] loop4: detected capacity change from 0 to 2048 [ 287.664911][T22234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.690011][T22234] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.707925][T22234] EXT4-fs error (device loop4): __ext4_new_inode:1073: comm syz.4.6089: reserved inode found cleared - inode=1 [ 287.746425][T20128] bond0 (unregistering): Released all slaves [ 287.763427][T20128] bond1 (unregistering): Released all slaves [ 287.795702][T19789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.841188][T20128] tipc: Left network mode [ 287.907068][T20128] hsr_slave_0: left promiscuous mode [ 287.925211][T20128] hsr_slave_1: left promiscuous mode [ 287.940364][T20128] veth1_macvtap: left promiscuous mode [ 287.945892][T20128] veth0_macvtap: left promiscuous mode [ 287.951524][T20128] veth1_vlan: left promiscuous mode [ 287.956774][T20128] veth0_vlan: left promiscuous mode [ 288.157567][T22179] chnl_net:caif_netlink_parms(): no params data found [ 288.233047][T22281] __nla_validate_parse: 5 callbacks suppressed [ 288.233063][T22281] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6107'. [ 288.263016][T22179] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.270306][T22179] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.287115][T22179] bridge_slave_0: entered allmulticast mode [ 288.297601][T22179] bridge_slave_0: entered promiscuous mode [ 288.341559][T22179] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.348678][T22179] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.356099][T22179] bridge_slave_1: entered allmulticast mode [ 288.363515][T22179] bridge_slave_1: entered promiscuous mode [ 288.393193][T22179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.393649][T22293] loop6: detected capacity change from 0 to 512 [ 288.405372][T22179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.439090][T22293] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.460237][T22293] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.476251][T22179] team0: Port device team_slave_0 added [ 288.490364][T22179] team0: Port device team_slave_1 added [ 288.508677][T22301] netlink: 'syz.7.6114': attribute type 4 has an invalid length. [ 288.522427][T22293] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.6111: corrupted xattr block 19: overlapping e_value [ 288.542939][T22179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.549944][T22179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.576069][T22179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.599722][T22293] EXT4-fs (loop6): Remounting filesystem read-only [ 288.606343][T22293] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 288.615422][T22293] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 288.625144][T22293] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 288.637841][T22179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.644860][T22179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.670891][T22179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.700789][T18512] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.722336][T22179] hsr_slave_0: entered promiscuous mode [ 288.728698][T22179] hsr_slave_1: entered promiscuous mode [ 288.747213][T22179] debugfs: 'hsr0' already exists in 'hsr' [ 288.753024][T22179] Cannot create hsr debugfs directory [ 288.783368][T22312] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6119'. [ 288.822516][T22307] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.836378][T22310] loop7: detected capacity change from 0 to 512 [ 288.846006][T22310] msdos: Unknown parameter '!selinu˙' [ 288.870507][T22307] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.885113][T22319] ALSA: seq fatal error: cannot create timer (-22) [ 288.924984][T22307] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.936682][T22320] tipc: Started in network mode [ 288.941656][T22320] tipc: Node identity 1ae215a14a99, cluster identity 4711 [ 288.948938][T22320] tipc: Enabled bearer , priority 0 [ 288.985045][T22307] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.007970][T22320] tipc: Disabling bearer [ 289.038278][T20120] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.052641][T20120] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.067171][T20120] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.085701][T20120] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.127389][T22332] FAULT_INJECTION: forcing a failure. [ 289.127389][T22332] name failslab, interval 1, probability 0, space 0, times 0 [ 289.140278][T22332] CPU: 1 UID: 0 PID: 22332 Comm: syz.7.6126 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 289.140307][T22332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.140319][T22332] Call Trace: [ 289.140325][T22332] [ 289.140374][T22332] __dump_stack+0x1d/0x30 [ 289.140419][T22332] dump_stack_lvl+0xe8/0x140 [ 289.140440][T22332] dump_stack+0x15/0x1b [ 289.140456][T22332] should_fail_ex+0x265/0x280 [ 289.140509][T22332] should_failslab+0x8c/0xb0 [ 289.140547][T22332] kmem_cache_alloc_noprof+0x50/0x310 [ 289.140626][T22332] ? skb_clone+0x151/0x1f0 [ 289.140645][T22332] skb_clone+0x151/0x1f0 [ 289.140734][T22332] __netlink_deliver_tap+0x2c9/0x500 [ 289.140772][T22332] netlink_unicast+0x66b/0x690 [ 289.140863][T22332] netlink_sendmsg+0x58b/0x6b0 [ 289.140947][T22332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.141025][T22332] __sock_sendmsg+0x142/0x180 [ 289.141071][T22332] sock_write_iter+0x165/0x1b0 [ 289.141096][T22332] do_iter_readv_writev+0x421/0x4c0 [ 289.141127][T22332] vfs_writev+0x2df/0x8b0 [ 289.141168][T22332] do_writev+0xe7/0x210 [ 289.141228][T22332] __x64_sys_writev+0x45/0x50 [ 289.141255][T22332] x64_sys_call+0x1e9a/0x2ff0 [ 289.141278][T22332] do_syscall_64+0xd2/0x200 [ 289.141355][T22332] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 289.141382][T22332] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 289.141406][T22332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.141427][T22332] RIP: 0033:0x7fa880d5ebe9 [ 289.141449][T22332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.141466][T22332] RSP: 002b:00007fa87f7bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 289.141487][T22332] RAX: ffffffffffffffda RBX: 00007fa880f85fa0 RCX: 00007fa880d5ebe9 [ 289.141501][T22332] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000007 [ 289.141515][T22332] RBP: 00007fa87f7bf090 R08: 0000000000000000 R09: 0000000000000000 [ 289.141528][T22332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.141587][T22332] R13: 00007fa880f86038 R14: 00007fa880f85fa0 R15: 00007ffe1a05a868 [ 289.141609][T22332] [ 289.142041][T22332] netlink: 'syz.7.6126': attribute type 4 has an invalid length. [ 289.564010][T22179] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 289.574674][T22179] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 289.581849][T22359] FAULT_INJECTION: forcing a failure. [ 289.581849][T22359] name failslab, interval 1, probability 0, space 0, times 0 [ 289.594667][T22359] CPU: 1 UID: 0 PID: 22359 Comm: syz.3.6136 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 289.594767][T22359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.594779][T22359] Call Trace: [ 289.594785][T22359] [ 289.594792][T22359] __dump_stack+0x1d/0x30 [ 289.594813][T22359] dump_stack_lvl+0xe8/0x140 [ 289.594905][T22359] dump_stack+0x15/0x1b [ 289.594922][T22359] should_fail_ex+0x265/0x280 [ 289.595004][T22359] should_failslab+0x8c/0xb0 [ 289.595033][T22359] kmem_cache_alloc_bulk_noprof+0x5b/0x410 [ 289.595095][T22359] bpf_test_run_xdp_live+0xcaa/0xfe0 [ 289.595136][T22359] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 289.595171][T22359] ? synchronize_rcu+0x45/0x320 [ 289.595248][T22359] ? 0xffffffffa0205240 [ 289.595262][T22359] ? bpf_test_run_xdp_live+0x29d/0xfe0 [ 289.595311][T22359] bpf_prog_test_run_xdp+0x4f5/0x910 [ 289.595344][T22359] ? __rcu_read_unlock+0x4f/0x70 [ 289.595400][T22359] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 289.595472][T22359] bpf_prog_test_run+0x227/0x390 [ 289.595503][T22359] __sys_bpf+0x4b9/0x7b0 [ 289.595616][T22359] __x64_sys_bpf+0x41/0x50 [ 289.595644][T22359] x64_sys_call+0x2aea/0x2ff0 [ 289.595668][T22359] do_syscall_64+0xd2/0x200 [ 289.595695][T22359] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 289.595721][T22359] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 289.595742][T22359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.595762][T22359] RIP: 0033:0x7f6629cbebe9 [ 289.595778][T22359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.595795][T22359] RSP: 002b:00007f662871f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 289.595823][T22359] RAX: ffffffffffffffda RBX: 00007f6629ee5fa0 RCX: 00007f6629cbebe9 [ 289.595835][T22359] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 289.595847][T22359] RBP: 00007f662871f090 R08: 0000000000000000 R09: 0000000000000000 [ 289.595860][T22359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 289.595874][T22359] R13: 00007f6629ee6038 R14: 00007f6629ee5fa0 R15: 00007ffc7a1f7618 [ 289.595971][T22359] [ 289.659472][ T3409] usb 16-1: device descriptor read/8, error -110 [ 289.661610][T22179] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 289.779413][ T3409] usb 16-1: new SuperSpeed USB device number 13 using vhci_hcd [ 289.837099][T22179] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 289.838034][T22365] loop3: detected capacity change from 0 to 512 [ 289.850194][ T3409] usb 16-1: enqueue for inactive port 0 [ 289.855818][ T3409] usb 16-1: enqueue for inactive port 0 [ 289.864170][ T3409] usb 16-1: enqueue for inactive port 0 [ 289.874658][T22365] EXT4-fs: Ignoring removed oldalloc option [ 289.894607][T22365] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.6139: Parent and EA inode have the same ino 15 [ 289.998803][T22365] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.6139: Parent and EA inode have the same ino 15 [ 290.042953][T22379] FAULT_INJECTION: forcing a failure. [ 290.042953][T22379] name failslab, interval 1, probability 0, space 0, times 0 [ 290.055760][T22379] CPU: 0 UID: 0 PID: 22379 Comm: syz.7.6142 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 290.055788][T22379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.055881][T22379] Call Trace: [ 290.055888][T22379] [ 290.055896][T22379] __dump_stack+0x1d/0x30 [ 290.055965][T22379] dump_stack_lvl+0xe8/0x140 [ 290.056046][T22379] dump_stack+0x15/0x1b [ 290.056083][T22379] should_fail_ex+0x265/0x280 [ 290.056120][T22379] should_failslab+0x8c/0xb0 [ 290.056143][T22379] kmem_cache_alloc_noprof+0x50/0x310 [ 290.056246][T22379] ? skb_clone+0x151/0x1f0 [ 290.056270][T22379] skb_clone+0x151/0x1f0 [ 290.056291][T22379] __netlink_deliver_tap+0x2c9/0x500 [ 290.056330][T22379] netlink_unicast+0x66b/0x690 [ 290.056396][T22379] netlink_sendmsg+0x58b/0x6b0 [ 290.056435][T22379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.056466][T22379] __sock_sendmsg+0x142/0x180 [ 290.056511][T22379] ____sys_sendmsg+0x31e/0x4e0 [ 290.056554][T22379] ___sys_sendmsg+0x17b/0x1d0 [ 290.056648][T22379] __x64_sys_sendmsg+0xd4/0x160 [ 290.056683][T22379] x64_sys_call+0x191e/0x2ff0 [ 290.056719][T22379] do_syscall_64+0xd2/0x200 [ 290.056742][T22379] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 290.056797][T22379] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 290.056821][T22379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.056839][T22379] RIP: 0033:0x7fa880d5ebe9 [ 290.056852][T22379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.056868][T22379] RSP: 002b:00007fa87f7bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.056913][T22379] RAX: ffffffffffffffda RBX: 00007fa880f85fa0 RCX: 00007fa880d5ebe9 [ 290.056951][T22379] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000005 [ 290.056966][T22379] RBP: 00007fa87f7bf090 R08: 0000000000000000 R09: 0000000000000000 [ 290.056981][T22379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.056996][T22379] R13: 00007fa880f86038 R14: 00007fa880f85fa0 R15: 00007ffe1a05a868 [ 290.057018][T22379] [ 290.059580][T22179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.080394][T22365] EXT4-fs (loop3): 1 orphan inode deleted [ 290.086789][T22179] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.095308][T22365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.098163][T22379] netem: change failed [ 290.324039][ T9862] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.331151][ T9862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.341720][ T9862] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.348772][ T9862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.367993][T22383] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 290.544505][T22179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.585143][T22393] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 290.591686][T22393] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 290.599432][T22393] vhci_hcd vhci_hcd.0: Device attached [ 290.616515][T22393] netlink: 36 bytes leftover after parsing attributes in process `gtp'. [ 290.878783][ T3375] usb 14-1: SetAddress Request (18) to port 0 [ 290.885395][ T3375] usb 14-1: new SuperSpeed USB device number 18 using vhci_hcd [ 291.012697][T22179] veth0_vlan: entered promiscuous mode [ 291.026433][T22179] veth1_vlan: entered promiscuous mode [ 291.041279][ T29] kauditd_printk_skb: 1643 callbacks suppressed [ 291.041299][ T29] audit: type=1400 audit(1754647579.469:38081): avc: denied { create } for pid=22397 comm="syz.4.6146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 291.067947][T22179] veth0_macvtap: entered promiscuous mode [ 291.109128][ T29] audit: type=1400 audit(1754647579.489:38082): avc: denied { module_request } for pid=22391 comm="gtp" kmod="crypto-ecb(cipher_null)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 291.131649][ T29] audit: type=1326 audit(1754647579.499:38083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22364 comm="syz.3.6139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6629cb5ba7 code=0x7ffc0000 [ 291.155287][ T29] audit: type=1326 audit(1754647579.509:38084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22364 comm="syz.3.6139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6629c5add9 code=0x7ffc0000 [ 291.179091][ T29] audit: type=1326 audit(1754647579.509:38085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22364 comm="syz.3.6139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6629cbebe9 code=0x7ffc0000 [ 291.202708][ T29] audit: type=1400 audit(1754647579.509:38086): avc: denied { read write } for pid=18328 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 291.227082][ T29] audit: type=1400 audit(1754647579.509:38087): avc: denied { open } for pid=18328 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 291.251425][ T29] audit: type=1400 audit(1754647579.509:38088): avc: denied { ioctl } for pid=18328 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 291.277185][ T29] audit: type=1400 audit(1754647579.509:38089): avc: denied { write } for pid=22397 comm="syz.4.6146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 291.297969][ T29] audit: type=1326 audit(1754647579.509:38090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22364 comm="syz.3.6139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6629cb5ba7 code=0x7ffc0000 [ 291.324628][ T3409] usb usb16-port1: attempt power cycle [ 291.377099][T22179] veth1_macvtap: entered promiscuous mode [ 291.514309][T22179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.543511][T22179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.576005][T22434] loop4: detected capacity change from 0 to 512 [ 291.583665][T20110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.612133][T20110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.631192][T20110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.652764][T22434] EXT4-fs: Ignoring removed mblk_io_submit option [ 291.659298][T22434] EXT4-fs: Ignoring removed bh option [ 291.664188][T20110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.676353][T22434] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 291.710403][T22434] EXT4-fs (loop4): 1 truncate cleaned up [ 291.728185][T22434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.012258][T22476] loop1: detected capacity change from 0 to 512 [ 292.050548][T22476] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 292.087095][T22476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.118794][T22476] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.146233][T19789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.188834][T22179] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.236532][T22494] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6157'. [ 292.271941][T22498] loop1: detected capacity change from 0 to 512 [ 292.301326][T22498] EXT4-fs (loop1): orphan cleanup on readonly fs [ 292.307707][T22498] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 292.324797][T22498] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 292.340901][T22498] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.6158: attempt to clear invalid blocks 2 len 1 [ 292.358600][T22498] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.6158: invalid indirect mapped block 1819239214 (level 0) [ 292.390676][T22498] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.6158: invalid indirect mapped block 1819239214 (level 1) [ 292.414834][T22498] EXT4-fs (loop1): 1 truncate cleaned up [ 292.425279][T22498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 292.505775][T22509] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 292.573805][T22522] loop7: detected capacity change from 0 to 128 [ 292.596426][T22522] ext2: Unknown parameter 'uid' [ 292.741329][T22535] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 292.747873][T22535] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 292.756027][T22535] vhci_hcd vhci_hcd.0: Device attached [ 292.781869][T22535] netlink: 36 bytes leftover after parsing attributes in process `gtp'. [ 292.818021][ T3409] usb 16-1: SetAddress Request (16) to port 0 [ 292.825225][ T3409] usb 16-1: new SuperSpeed USB device number 16 using vhci_hcd [ 292.837701][T22179] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.847148][T22536] vhci_hcd: connection closed [ 292.849283][T20118] vhci_hcd: stop threads [ 292.858304][T20118] vhci_hcd: release socket [ 292.862805][T20118] vhci_hcd: disconnect device [ 293.360977][T22593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6166'. [ 293.412607][T22394] vhci_hcd: connection reset by peer [ 293.422727][T22598] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6167'. [ 293.432813][T20118] vhci_hcd: stop threads [ 293.437065][T20118] vhci_hcd: release socket [ 293.441512][T20118] vhci_hcd: disconnect device [ 293.446626][T13856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.491905][T22598] team0: Unable to change to the same mode the team is in [ 293.650654][T22612] loop1: detected capacity change from 0 to 512 [ 293.650922][T22614] tipc: Enabled bearer , priority 0 [ 293.677767][T22612] EXT4-fs: Ignoring removed nobh option [ 293.694254][T20110] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.707964][T22614] tipc: Disabling bearer [ 293.710559][T22612] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.6173: corrupted inode contents [ 293.762369][T22612] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.6173: mark_inode_dirty error [ 293.763038][T20110] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.784963][T22612] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.6173: corrupted inode contents [ 293.797013][T22612] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.6173: mark_inode_dirty error [ 293.824135][T22612] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.6173: Failed to acquire dquot type 0 [ 293.864474][T22608] lo speed is unknown, defaulting to 1000 [ 293.887296][T22612] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6173: corrupted inode contents [ 293.900596][T20110] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.948802][T22612] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.6173: mark_inode_dirty error [ 293.986790][T20110] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.998629][T22612] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6173: corrupted inode contents [ 294.024906][T22612] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.6173: mark_inode_dirty error [ 294.066892][T22632] loop7: detected capacity change from 0 to 512 [ 294.073579][T22612] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6173: corrupted inode contents [ 294.100550][T22632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 294.110656][T22612] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 294.125951][T22632] EXT4-fs (loop7): orphan cleanup on readonly fs [ 294.134519][T22632] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6175: bg 0: block 248: padding at end of block bitmap is not set [ 294.141164][T22612] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6173: corrupted inode contents [ 294.150773][T22632] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.6175: Failed to acquire dquot type 1 [ 294.173330][T22636] loop6: detected capacity change from 0 to 1024 [ 294.173727][T22632] EXT4-fs (loop7): 1 truncate cleaned up [ 294.193931][T22612] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.6173: mark_inode_dirty error [ 294.221911][T22636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.226455][T22612] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 294.256924][T22632] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 294.287806][T22612] EXT4-fs (loop1): 1 truncate cleaned up [ 294.296719][T22612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.310271][T22612] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.386127][T18512] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.401261][T20110] bond0 (unregistering): Released all slaves [ 294.516796][T22608] chnl_net:caif_netlink_parms(): no params data found [ 294.540929][T22612] lo speed is unknown, defaulting to 1000 [ 294.556932][T20110] hsr_slave_0: left promiscuous mode [ 294.585470][T20110] hsr_slave_1: left promiscuous mode [ 294.595786][T20110] veth1_macvtap: left promiscuous mode [ 294.601504][T20110] veth0_macvtap: left promiscuous mode [ 294.608356][T20110] veth1_vlan: left promiscuous mode [ 294.619769][T20110] veth0_vlan: left promiscuous mode [ 294.687165][T22627] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm gtp: deleted inode referenced: 12 [ 294.771212][T18328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.959271][T22667] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6182'. [ 294.982035][T22608] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.989205][T22608] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.004344][T22608] bridge_slave_0: entered allmulticast mode [ 295.024537][T22608] bridge_slave_0: entered promiscuous mode [ 295.041418][T22671] team0: Unable to change to the same mode the team is in [ 295.051696][T22608] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.058858][T22608] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.073283][T22608] bridge_slave_1: entered allmulticast mode [ 295.092074][T22608] bridge_slave_1: entered promiscuous mode [ 295.092259][T22673] 9pnet_fd: Insufficient options for proto=fd [ 295.159445][T22608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.179315][T22179] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.196301][T22608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.205629][T22677] tipc: Enabled bearer , priority 0 [ 295.250316][T22677] tipc: Disabling bearer [ 295.274337][T22608] team0: Port device team_slave_0 added [ 295.290547][T22608] team0: Port device team_slave_1 added [ 295.331031][T22681] pim6reg: entered allmulticast mode [ 295.348041][T22681] pim6reg: left allmulticast mode [ 295.369859][T22608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.376932][T22608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.402829][T22608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.424486][T22608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.431493][T22608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.457546][T22608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.529924][T22608] hsr_slave_0: entered promiscuous mode [ 295.559590][T22608] hsr_slave_1: entered promiscuous mode [ 295.566299][T22608] debugfs: 'hsr0' already exists in 'hsr' [ 295.572066][T22608] Cannot create hsr debugfs directory [ 295.614142][T22696] FAULT_INJECTION: forcing a failure. [ 295.614142][T22696] name failslab, interval 1, probability 0, space 0, times 0 [ 295.626878][T22696] CPU: 0 UID: 0 PID: 22696 Comm: syz.1.6193 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 295.626917][T22696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.626964][T22696] Call Trace: [ 295.626972][T22696] [ 295.626981][T22696] __dump_stack+0x1d/0x30 [ 295.627005][T22696] dump_stack_lvl+0xe8/0x140 [ 295.627028][T22696] dump_stack+0x15/0x1b [ 295.627070][T22696] should_fail_ex+0x265/0x280 [ 295.627148][T22696] should_failslab+0x8c/0xb0 [ 295.627171][T22696] __kmalloc_noprof+0xa5/0x3e0 [ 295.627252][T22696] ? iovec_from_user+0x84/0x210 [ 295.627284][T22696] iovec_from_user+0x84/0x210 [ 295.627313][T22696] __import_iovec+0xf3/0x540 [ 295.627362][T22696] ? terminate_walk+0x27f/0x2a0 [ 295.627388][T22696] import_iovec+0x61/0x80 [ 295.627410][T22696] process_vm_rw+0xea/0x960 [ 295.627485][T22696] ? _parse_integer+0x27/0x40 [ 295.627521][T22696] ? kstrtoull+0x111/0x140 [ 295.627654][T22696] ? __fget_files+0x184/0x1c0 [ 295.627802][T22696] ? fput+0x8f/0xc0 [ 295.627848][T22696] __x64_sys_process_vm_writev+0x78/0x90 [ 295.627917][T22696] x64_sys_call+0x2a7c/0x2ff0 [ 295.627938][T22696] do_syscall_64+0xd2/0x200 [ 295.627991][T22696] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 295.628019][T22696] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 295.628045][T22696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.628129][T22696] RIP: 0033:0x7ffaef01ebe9 [ 295.628143][T22696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.628162][T22696] RSP: 002b:00007ffaeda7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 295.628185][T22696] RAX: ffffffffffffffda RBX: 00007ffaef245fa0 RCX: 00007ffaef01ebe9 [ 295.628199][T22696] RDX: 0000000000000009 RSI: 0000200000000500 RDI: 0000000000000000 [ 295.628248][T22696] RBP: 00007ffaeda7f090 R08: 0000000000000000 R09: 0000000000000000 [ 295.628261][T22696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.628276][T22696] R13: 00007ffaef246038 R14: 00007ffaef245fa0 R15: 00007ffcc29c7508 [ 295.628298][T22696] [ 295.893987][T22695] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6194'. [ 295.927279][T22699] loop1: detected capacity change from 0 to 1024 [ 295.930416][ T3375] usb 14-1: device descriptor read/8, error -110 [ 295.941446][T22699] EXT4-fs: Ignoring removed orlov option [ 295.947188][T22699] EXT4-fs: Ignoring removed mblk_io_submit option [ 295.993333][T22699] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 295.996055][T22704] loop6: detected capacity change from 0 to 512 [ 296.010848][T22704] EXT4-fs: Ignoring removed nobh option [ 296.029231][T22704] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.6197: corrupted inode contents [ 296.029508][T22699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.046380][T22704] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #3: comm syz.6.6197: mark_inode_dirty error [ 296.064963][ T3375] usb 14-1: new SuperSpeed USB device number 18 using vhci_hcd [ 296.072954][ T29] kauditd_printk_skb: 1550 callbacks suppressed [ 296.072968][ T29] audit: type=1400 audit(1754647584.501:39637): avc: denied { read write } for pid=18328 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.103493][T22704] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.6197: corrupted inode contents [ 296.103737][ T29] audit: type=1400 audit(1754647584.501:39638): avc: denied { open } for pid=18328 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.117167][T22704] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.6197: mark_inode_dirty error [ 296.139696][ T3375] usb 14-1: enqueue for inactive port 0 [ 296.152616][T22704] Quota error (device loop6): write_blk: dquota write failed [ 296.163802][T22704] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 296.175575][T22704] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.6197: Failed to acquire dquot type 0 [ 296.190306][T22704] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.6197: corrupted inode contents [ 296.202484][T22704] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.6197: mark_inode_dirty error [ 296.202559][ T3375] usb 14-1: enqueue for inactive port 0 [ 296.215499][T22704] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.6197: corrupted inode contents [ 296.232106][ T3375] usb 14-1: enqueue for inactive port 0 [ 296.237851][ T29] audit: type=1400 audit(1754647584.601:39639): avc: denied { ioctl } for pid=18328 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.263664][ T29] audit: type=1400 audit(1754647584.631:39640): avc: denied { mount } for pid=22698 comm="syz.1.6196" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 296.285673][ T29] audit: type=1400 audit(1754647584.661:39641): avc: denied { read write } for pid=22698 comm="syz.1.6196" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.295978][T22704] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.6197: mark_inode_dirty error [ 296.310008][ T29] audit: type=1400 audit(1754647584.661:39642): avc: denied { open } for pid=22698 comm="syz.1.6196" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.347945][T22704] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.6197: corrupted inode contents [ 296.370705][ T29] audit: type=1400 audit(1754647584.752:39643): avc: denied { create } for pid=22710 comm="syz.7.6198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 296.385378][T22704] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 296.390632][ T29] audit: type=1400 audit(1754647584.762:39644): avc: denied { map_create } for pid=22698 comm="syz.1.6196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 296.409978][T22716] loop4: detected capacity change from 0 to 1024 [ 296.429895][T22179] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.432348][T22704] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.6197: corrupted inode contents [ 296.441383][T22716] EXT4-fs: Ignoring removed orlov option [ 296.456586][T22716] EXT4-fs: Ignoring removed mblk_io_submit option [ 296.456698][T22704] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.6197: mark_inode_dirty error [ 296.476179][T22716] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 296.494544][T22704] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 296.504915][T22704] EXT4-fs (loop6): 1 truncate cleaned up [ 296.511187][T22704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.524681][T22704] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.538110][T22716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.627185][T22608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 296.640836][T22704] lo speed is unknown, defaulting to 1000 [ 296.642551][T22608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 296.656933][T19789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.671975][T22608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 296.700234][T22608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 296.850204][T18512] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.884602][T22608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.943079][T22608] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.963499][T22747] lo speed is unknown, defaulting to 1000 [ 296.979884][T20118] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.987002][T20118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.998548][T20118] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.005861][T20118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.040290][T22750] loop1: detected capacity change from 0 to 128 [ 297.140490][T22747] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6207'. [ 297.157924][T22608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.307754][ T3375] usb usb14-port1: attempt power cycle [ 297.331669][T22608] veth0_vlan: entered promiscuous mode [ 297.341220][T22608] veth1_vlan: entered promiscuous mode [ 297.389591][T22608] veth0_macvtap: entered promiscuous mode [ 297.404246][T22608] veth1_macvtap: entered promiscuous mode [ 297.454771][T22770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.473410][T22608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.486875][T22608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.506607][T20118] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.524501][T20118] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.537056][T20118] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.561610][T20118] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.683425][T22786] loop6: detected capacity change from 0 to 1024 [ 297.705744][T22786] EXT4-fs: Ignoring removed orlov option [ 297.711491][T22786] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.723715][T22788] loop3: detected capacity change from 0 to 1024 [ 297.731382][T22786] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 297.745475][T22788] EXT4-fs: Ignoring removed orlov option [ 297.751197][T22788] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.769063][T22786] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.798167][T22788] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 297.815973][T18512] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.826597][T22788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.881207][T22608] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.925489][ T3409] usb 16-1: device descriptor read/8, error -110 [ 298.016457][T22802] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6222'. [ 298.055292][ T3409] usb 16-1: new SuperSpeed USB device number 16 using vhci_hcd [ 298.075444][ T3409] usb 16-1: enqueue for inactive port 0 [ 298.081092][ T3409] usb 16-1: enqueue for inactive port 0 [ 298.106236][ T3409] usb 16-1: enqueue for inactive port 0 [ 298.264403][T22818] random: crng reseeded on system resumption [ 298.333220][T22822] team0: Unable to change to the same mode the team is in [ 298.427230][T22828] ˙˙˙˙˙˙: renamed from vlan1 (while UP) [ 298.876478][T22841] loop6: detected capacity change from 0 to 512 [ 298.952707][T22845] netlink: 'syz.6.6241': attribute type 3 has an invalid length. [ 299.005081][T22845] loop6: detected capacity change from 0 to 128 [ 299.048588][T22845] FAT-fs (loop6): Directory bread(block 32) failed [ 299.055256][T22845] FAT-fs (loop6): Directory bread(block 33) failed [ 299.067119][T22845] FAT-fs (loop6): Directory bread(block 34) failed [ 299.095565][T22845] FAT-fs (loop6): Directory bread(block 35) failed [ 299.119873][T22845] FAT-fs (loop6): Directory bread(block 36) failed [ 299.153145][T22845] FAT-fs (loop6): Directory bread(block 37) failed [ 299.170883][T22845] FAT-fs (loop6): Directory bread(block 38) failed [ 299.177701][ T3375] usb usb14-port1: unable to enumerate USB device [ 299.187680][T22851] loop1: detected capacity change from 0 to 1024 [ 299.204147][T22845] FAT-fs (loop6): Directory bread(block 39) failed [ 299.222586][T22845] FAT-fs (loop6): Directory bread(block 40) failed [ 299.230505][T22845] FAT-fs (loop6): Directory bread(block 41) failed [ 299.886885][T22872] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6250'. [ 299.914452][T22849] Set syz1 is full, maxelem 65536 reached [ 299.938162][T22874] loop3: detected capacity change from 0 to 1024 [ 299.947456][T22874] EXT4-fs: Ignoring removed orlov option [ 299.953136][T22874] EXT4-fs: Ignoring removed mblk_io_submit option [ 299.961017][T22874] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 299.982075][T22877] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6252'. [ 300.002107][T22878] loop1: detected capacity change from 0 to 1024 [ 300.010878][T22878] EXT4-fs: Ignoring removed orlov option [ 300.019818][T22874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.037204][T22878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.056034][T22878] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 300.069574][T22608] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.089523][T22883] serio: Serial port ptm0 [ 300.119791][T22179] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.279161][T22899] FAULT_INJECTION: forcing a failure. [ 300.279161][T22899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.279221][T22899] CPU: 0 UID: 0 PID: 22899 Comm: syz.1.6259 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 300.279252][T22899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.279266][T22899] Call Trace: [ 300.279273][T22899] [ 300.279280][T22899] __dump_stack+0x1d/0x30 [ 300.279367][T22899] dump_stack_lvl+0xe8/0x140 [ 300.279396][T22899] dump_stack+0x15/0x1b [ 300.279473][T22899] should_fail_ex+0x265/0x280 [ 300.279575][T22899] should_fail+0xb/0x20 [ 300.279606][T22899] should_fail_usercopy+0x1a/0x20 [ 300.279627][T22899] fpu__restore_sig+0x12d/0xaa0 [ 300.279662][T22899] ? should_fail_ex+0xdb/0x280 [ 300.279765][T22899] __ia32_sys_rt_sigreturn+0x29f/0x350 [ 300.279797][T22899] x64_sys_call+0x2d3c/0x2ff0 [ 300.279821][T22899] do_syscall_64+0xd2/0x200 [ 300.279847][T22899] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 300.279952][T22899] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 300.279975][T22899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.279998][T22899] RIP: 0033:0x7ffaef01ebe7 [ 300.280075][T22899] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 300.280095][T22899] RSP: 002b:00007ffaeda7f038 EFLAGS: 00000246 [ 300.280111][T22899] RAX: 0000000000000113 RBX: 00007ffaef245fa0 RCX: 00007ffaef01ebe9 [ 300.280125][T22899] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000007 [ 300.280139][T22899] RBP: 00007ffaeda7f090 R08: 0000000000000007 R09: 0000000000000000 [ 300.280153][T22899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.280166][T22899] R13: 00007ffaef246038 R14: 00007ffaef245fa0 R15: 00007ffcc29c7508 [ 300.280243][T22899] [ 300.362643][T22901] 9pnet_fd: Insufficient options for proto=fd [ 300.390585][T22906] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6263'. [ 300.434029][T22909] loop7: detected capacity change from 0 to 128 [ 300.492670][T22911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6265'. [ 300.506316][T22904] FAT-fs (loop7): error, clusters badly computed (0 != 1) [ 300.523797][T22911] team0: Unable to change to the same mode the team is in [ 300.524230][T22904] FAT-fs (loop7): Filesystem has been set read-only [ 300.604748][T22904] FAT-fs (loop7): error, clusters badly computed (1 != 2) [ 300.612009][T22904] FAT-fs (loop7): error, clusters badly computed (2 != 3) [ 300.643393][T22904] FAT-fs (loop7): error, clusters badly computed (3 != 4) [ 300.652759][T22913] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 300.659219][T22904] FAT-fs (loop7): error, clusters badly computed (4 != 5) [ 300.659290][T22913] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 300.666482][T22904] FAT-fs (loop7): error, clusters badly computed (5 != 6) [ 300.674118][T22913] vhci_hcd vhci_hcd.0: Device attached [ 300.682839][T22904] FAT-fs (loop7): error, clusters badly computed (6 != 7) [ 300.722643][T22904] FAT-fs (loop7): error, clusters badly computed (7 != 8) [ 300.722681][T22904] FAT-fs (loop7): error, clusters badly computed (8 != 9) [ 300.738860][T22904] FAT-fs (loop7): error, clusters badly computed (9 != 10) [ 300.974403][ T1040] usb 14-1: SetAddress Request (22) to port 0 [ 300.974433][ T1040] usb 14-1: new SuperSpeed USB device number 22 using vhci_hcd [ 301.090846][ T29] kauditd_printk_skb: 1523 callbacks suppressed [ 301.090919][ T29] audit: type=1400 audit(1754650167.518:41168): avc: denied { module_request } for pid=22912 comm="gtp" kmod="crypto-cbc(des)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 301.118987][ T29] audit: type=1400 audit(1754650167.538:41169): avc: denied { module_request } for pid=22912 comm="gtp" kmod="crypto-cbc(des)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 301.156503][ T29] audit: type=1400 audit(1754650167.588:41170): avc: denied { unmount } for pid=18328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 301.185194][ T29] audit: type=1400 audit(1754650167.608:41171): avc: denied { read write } for pid=18328 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.185292][ T29] audit: type=1400 audit(1754650167.618:41172): avc: denied { read write open } for pid=18328 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.191792][ T29] audit: type=1400 audit(1754650167.618:41173): avc: denied { ioctl } for pid=18328 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.217382][ T29] audit: type=1400 audit(1754650167.628:41174): avc: denied { map_create } for pid=22951 comm="syz.7.6269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 301.217468][ T29] audit: type=1400 audit(1754650167.628:41175): avc: denied { prog_load } for pid=22951 comm="syz.7.6269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 301.217492][ T29] audit: type=1400 audit(1754650167.628:41176): avc: denied { bpf } for pid=22951 comm="syz.7.6269" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 301.217539][ T29] audit: type=1400 audit(1754650167.628:41177): avc: denied { perfmon } for pid=22951 comm="syz.7.6269" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 301.409350][T22959] loop7: detected capacity change from 0 to 1024 [ 301.444211][T22964] tipc: Started in network mode [ 301.449218][T22964] tipc: Node identity 669ff5ce5ed9, cluster identity 4711 [ 301.454357][T22959] EXT4-fs: Ignoring removed orlov option [ 301.456501][T22964] tipc: Enabled bearer , priority 0 [ 301.481205][T22959] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.511037][T22964] tipc: Disabling bearer [ 301.528944][T22959] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 301.553887][T18328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.651304][T22987] loop7: detected capacity change from 0 to 512 [ 301.659256][T22987] EXT4-fs: test_dummy_encryption option not supported [ 301.685667][T22987] netlink: 14593 bytes leftover after parsing attributes in process `syz.7.6276'. [ 301.873914][T23010] loop7: detected capacity change from 0 to 512 [ 301.882369][T23010] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 301.895867][T23010] EXT4-fs (loop7): 1 truncate cleaned up [ 301.901893][T23010] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.917000][T23010] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.399010][T23068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6278'. [ 302.421598][T23068] team0: No ports can be present during mode change [ 302.549545][T23078] tipc: Enabled bearer , priority 0 [ 302.556543][T22916] vhci_hcd: connection reset by peer [ 302.562047][T20141] vhci_hcd: stop threads [ 302.566566][T20141] vhci_hcd: release socket [ 302.570974][T20141] vhci_hcd: disconnect device [ 302.593738][T23078] tipc: Disabling bearer [ 302.594900][T23082] loop1: detected capacity change from 0 to 512 [ 302.599896][T23080] loop4: detected capacity change from 0 to 1024 [ 302.616163][T23080] EXT4-fs: Ignoring removed orlov option [ 302.621858][T23080] EXT4-fs: Ignoring removed mblk_io_submit option [ 302.631153][T23080] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 302.648252][T23080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.713278][T19789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.751859][T23090] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6286'. [ 302.831046][T23098] loop7: detected capacity change from 0 to 512 [ 302.870320][T23098] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 302.890706][T23098] EXT4-fs (loop7): 1 truncate cleaned up [ 302.896994][T23098] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.944396][T23108] tipc: Started in network mode [ 302.949324][T23108] tipc: Node identity ced75b2da61e, cluster identity 4711 [ 302.956779][T23108] tipc: Enabled bearer , priority 0 [ 302.971902][T18328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.988173][T23108] tipc: Disabling bearer [ 303.006480][T23112] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6294'. [ 303.090313][T23118] loop1: detected capacity change from 0 to 1024 [ 303.107500][T23118] EXT4-fs: Ignoring removed orlov option [ 303.113240][T23118] EXT4-fs: Ignoring removed mblk_io_submit option [ 303.123948][T23118] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 303.141189][T23122] tipc: Enabled bearer , priority 0 [ 303.156575][T23118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.180991][T23122] tipc: Disabling bearer [ 303.202186][T22179] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.421682][T23140] loop1: detected capacity change from 0 to 1024 [ 303.432020][T23140] EXT4-fs: quotafile must be on filesystem root [ 303.571826][T23152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6311'. [ 303.597044][T23152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6311'. [ 303.607115][T23152] FAULT_INJECTION: forcing a failure. [ 303.607115][T23152] name failslab, interval 1, probability 0, space 0, times 0 [ 303.619817][T23152] CPU: 1 UID: 0 PID: 23152 Comm: syz.4.6311 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 303.619849][T23152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.619863][T23152] Call Trace: [ 303.619871][T23152] [ 303.619879][T23152] __dump_stack+0x1d/0x30 [ 303.619906][T23152] dump_stack_lvl+0xe8/0x140 [ 303.619929][T23152] dump_stack+0x15/0x1b [ 303.619962][T23152] should_fail_ex+0x265/0x280 [ 303.619995][T23152] should_failslab+0x8c/0xb0 [ 303.620018][T23152] kmem_cache_alloc_node_noprof+0x57/0x320 [ 303.620051][T23152] ? __alloc_skb+0x101/0x320 [ 303.620144][T23152] __alloc_skb+0x101/0x320 [ 303.620171][T23152] fdb_notify+0x6e/0x120 [ 303.620198][T23152] fdb_delete+0x686/0x820 [ 303.620231][T23152] fdb_delete_local+0x230/0x2f0 [ 303.620362][T23152] br_fdb_delete_by_port+0x169/0x220 [ 303.620392][T23152] br_dev_delete+0x86/0xe0 [ 303.620422][T23152] ? __pfx_br_dev_delete+0x10/0x10 [ 303.620466][T23152] rtnl_dellink+0x3ba/0x550 [ 303.620549][T23152] ? selinux_capable+0x31/0x40 [ 303.620576][T23152] ? security_capable+0x83/0x90 [ 303.620599][T23152] ? ns_capable+0x7d/0xb0 [ 303.620686][T23152] ? __pfx_rtnl_dellink+0x10/0x10 [ 303.620709][T23152] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 303.620734][T23152] netlink_rcv_skb+0x123/0x220 [ 303.620763][T23152] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 303.620825][T23152] rtnetlink_rcv+0x1c/0x30 [ 303.620845][T23152] netlink_unicast+0x5bd/0x690 [ 303.620876][T23152] netlink_sendmsg+0x58b/0x6b0 [ 303.620938][T23152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.620974][T23152] __sock_sendmsg+0x142/0x180 [ 303.620997][T23152] ____sys_sendmsg+0x31e/0x4e0 [ 303.621113][T23152] ___sys_sendmsg+0x17b/0x1d0 [ 303.621160][T23152] __x64_sys_sendmsg+0xd4/0x160 [ 303.621205][T23152] x64_sys_call+0x191e/0x2ff0 [ 303.621229][T23152] do_syscall_64+0xd2/0x200 [ 303.621310][T23152] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 303.621333][T23152] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 303.621356][T23152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.621377][T23152] RIP: 0033:0x7fc0d2f9ebe9 [ 303.621392][T23152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.621434][T23152] RSP: 002b:00007fc0d1a07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.621506][T23152] RAX: ffffffffffffffda RBX: 00007fc0d31c5fa0 RCX: 00007fc0d2f9ebe9 [ 303.621519][T23152] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 303.621531][T23152] RBP: 00007fc0d1a07090 R08: 0000000000000000 R09: 0000000000000000 [ 303.621543][T23152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.621556][T23152] R13: 00007fc0d31c6038 R14: 00007fc0d31c5fa0 R15: 00007fffc54a0088 [ 303.621578][T23152] [ 304.007388][T23160] tipc: Enabled bearer , priority 0 [ 304.026110][T23160] tipc: Disabling bearer [ 304.413828][T23185] team0: Unable to change to the same mode the team is in [ 304.957617][T23222] __nla_validate_parse: 2 callbacks suppressed [ 304.957633][T23222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6341'. [ 305.370996][T23219] ================================================================== [ 305.379109][T23219] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 305.386135][T23219] [ 305.388438][T23219] read-write to 0xffff888237c29d64 of 4 bytes by task 9 on cpu 0: [ 305.396216][T23219] wq_worker_running+0x95/0x120 [ 305.401065][T23219] schedule_preempt_disabled+0x10/0x20 [ 305.406768][T23219] __mutex_lock+0x467/0xcf0 [ 305.411263][T23219] __mutex_lock_slowpath+0xa/0x10 [ 305.416263][T23219] mutex_lock+0x27/0x30 [ 305.420398][T23219] pcpu_balance_workfn+0x4a/0xc00 [ 305.425409][T23219] process_scheduled_works+0x4ce/0x9d0 [ 305.430853][T23219] worker_thread+0x582/0x770 [ 305.435428][T23219] kthread+0x486/0x510 [ 305.439492][T23219] ret_from_fork+0xda/0x150 [ 305.443979][T23219] ret_from_fork_asm+0x1a/0x30 [ 305.448732][T23219] [ 305.451120][T23219] read to 0xffff888237c29d64 of 4 bytes by task 23219 on cpu 1: [ 305.458722][T23219] kick_pool+0x49/0x2d0 [ 305.462867][T23219] __queue_work+0x8cb/0xb50 [ 305.467347][T23219] queue_work_on+0xd1/0x160 [ 305.471827][T23219] pcpu_alloc_noprof+0x9a4/0x1210 [ 305.477264][T23219] percpu_ref_init+0x33/0x250 [ 305.481933][T23219] io_ring_ctx_alloc+0x1aa/0x6a0 [ 305.486875][T23219] io_uring_create+0x10f/0x610 [ 305.491621][T23219] __se_sys_io_uring_setup+0x1f7/0x210 [ 305.497077][T23219] __x64_sys_io_uring_setup+0x31/0x40 [ 305.502433][T23219] x64_sys_call+0x2b21/0x2ff0 [ 305.507113][T23219] do_syscall_64+0xd2/0x200 [ 305.511597][T23219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.517494][T23219] [ 305.519795][T23219] value changed: 0x00000000 -> 0x00000001 [ 305.525590][T23219] [ 305.527894][T23219] Reported by Kernel Concurrency Sanitizer on: [ 305.534022][T23219] CPU: 1 UID: 0 PID: 23219 Comm: syz.4.6340 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 305.546152][T23219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 305.556201][T23219] ================================================================== [ 306.003818][ T1040] usb 14-1: device descriptor read/8, error -110 [ 306.113720][ T1040] usb 14-1: new SuperSpeed USB device number 22 using vhci_hcd [ 306.133765][ T1040] usb 14-1: enqueue for inactive port 0 [ 306.139437][ T1040] usb 14-1: enqueue for inactive port 0 [ 306.145045][ T1040] usb 14-1: enqueue for inactive port 0 [ 306.213822][ T3375] usb usb8-port1: attempt power cycle [ 307.163795][ T1040] usb usb14-port1: attempt power cycle [ 308.035144][ T3375] usb usb8-port1: unable to enumerate USB device [ 308.059774][ T29] kauditd_printk_skb: 1651 callbacks suppressed [ 308.059790][ T29] audit: type=1400 audit(1754650174.489:42829): avc: denied { read write } for pid=22179 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 308.090649][ T29] audit: type=1400 audit(1754650174.489:42830): avc: denied { open } for pid=22179 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 308.114978][ T29] audit: type=1400 audit(1754650174.489:42831): avc: denied { ioctl } for pid=22179 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.053602][ T1040] usb usb14-port1: unable to enumerate USB device